Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier: 8orIqo+A/TX/VyjWbXLkAQOdze9FEb5SqA+0ePOpk3U=
Subject key identifier: DC:5C:93:83:0C:3D:69:65:A4:09:A6:19:2B:61:54:05:B4:78:E7:F8
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial: 01969FACDA24047F9D414936B799A3EE9F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number: 094E
Signing time: Mon 05 May 2025 09:00:27 +0000
Manifest this update: Mon 05 May 2025 09:00:27 +0000
Manifest next update: Tue 06 May 2025 09:00:27 +0000
Files and hashes: 1: 9jRjdTO7fBkjcFHt1fnUnaX_T3k.roa (hash: 3WY7AgxSwDZyrJrZX0H0mFMYrwb18tzFjzAuAbCSY+Q=)
2: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: w0IJka/m7xf+PO6iItdQhmCbU30eifViYij+jisIjIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ac:da:24:04:7f:9d:41:49:36:b7:99:a3:ee:9f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Validity
Not Before: May 5 09:00:27 2025 GMT
Not After : May 6 09:00:27 2025 GMT
Subject: CN=dc5c93830c3d6965a409a6192b615405b478e7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:0d:93:06:59:03:3c:44:67:c4:3a:73:bf:
30:52:e5:30:41:41:31:a8:1f:08:bb:17:dd:fa:24:
c7:a4:e7:28:c3:33:3b:b9:15:30:28:0a:9c:35:5b:
0d:79:e0:5a:ea:47:cc:7e:73:d7:8e:07:29:29:8f:
7d:70:b2:62:ea:fc:f8:5b:fe:7d:e2:6b:ee:fa:cd:
3f:4c:79:68:a9:0c:be:3a:28:8d:a9:39:ff:7c:9b:
8f:e9:18:bb:b1:4b:d7:21:4b:a6:62:82:61:f7:85:
17:58:29:ac:69:5f:5e:38:58:5c:54:ce:f8:0e:c3:
22:02:ee:37:33:52:93:27:94:19:23:23:62:77:59:
dc:db:89:1f:18:94:6c:bc:cf:2b:05:44:ae:2e:d2:
84:a3:3f:4c:ba:54:07:3b:1b:f3:e0:fd:b9:d1:74:
08:6a:bc:4f:10:2a:4c:a3:2b:42:af:0d:a9:23:e7:
ba:70:d6:6c:9e:9d:be:f0:a6:0c:ec:c1:de:74:c1:
56:65:57:c4:4e:1f:ed:f7:87:0a:89:3d:ce:8b:2e:
6e:ea:00:fc:1b:d8:57:1c:24:4d:4e:72:55:36:65:
8b:3c:c4:09:3e:7d:c6:4f:42:c8:3d:e6:24:b2:95:
90:87:da:4c:5f:ea:0a:7e:ad:0e:08:1e:6a:c3:4d:
6f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5C:93:83:0C:3D:69:65:A4:09:A6:19:2B:61:54:05:B4:78:E7:F8
X509v3 Authority Key Identifier:
keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:cc:ba:3c:49:c6:03:7e:f8:d4:a1:d4:94:85:7d:43:25:1d:
44:f3:60:02:13:20:c3:2a:dc:a2:d3:9d:25:60:4b:65:44:39:
0c:0c:fd:13:4d:f8:9d:6d:81:82:b6:f1:23:13:f4:a9:94:fb:
41:53:c8:b7:60:28:53:2e:1e:d7:dd:d0:d3:a1:e0:67:3d:5e:
6f:d4:39:7f:4d:6a:43:e9:ea:ec:9a:b0:fc:07:a7:12:af:0f:
29:33:84:94:f9:da:bc:e8:dd:6e:b7:75:d7:4e:04:be:3c:9e:
c4:15:98:06:f4:a4:df:d6:0c:4c:d8:8d:8e:be:5a:55:41:2a:
ee:70:61:0c:73:2b:88:10:b8:fd:0c:e4:1c:29:bf:68:db:3d:
fb:0b:1c:88:e6:28:03:41:dd:63:5a:4b:cd:dc:e0:8d:c0:2f:
d4:86:77:6c:c0:84:6a:d1:2a:e6:93:ae:37:50:96:5b:06:a3:
3c:36:10:cc:ef:c1:af:66:fa:db:b5:88:0c:33:f9:e3:14:46:
1f:41:9e:f9:0e:85:d3:0f:1e:b7:c1:8e:42:56:52:16:f4:0e:
bc:7d:55:31:e2:5d:f1:73:85:ac:e0:08:5c:78:e6:91:3d:5e:
81:b8:56:77:4d:3c:b0:c5:14:13:c3:ad:05:e0:ce:2f:93:39:
fb:42:b2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:40:00 2025 by rpki-client