Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
File: 9X2cj_wgS2294BIFMDvfi1BjiqY.mft (raw, json)
Hash identifier: XPcaonqHydunjob9am+W5YIX39azoLaw4tsP446KzlQ=
Subject key identifier: 50:93:D0:11:2C:C9:6D:84:45:D0:44:BF:01:50:20:CB:0E:6A:AD:8E
Authority key identifier: F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
Certificate issuer: /CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Certificate serial: 0196BB242F6C3F43B165199ACC765883D74F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
Manifest number: 38
Signing time: Sat 10 May 2025 17:00:32 +0000
Manifest this update: Sat 10 May 2025 17:00:32 +0000
Manifest next update: Sun 11 May 2025 17:00:32 +0000
Files and hashes: 1: 9X2cj_wgS2294BIFMDvfi1BjiqY.crl (hash: IguU8VSKqo82q9WeZjm8vJh/YvrWu/TYvLdw2eZqKDk=)
2: blFPI1QT3vGyXWS1-axkqAT7T1o.roa (hash: 9ZF4v61ldXuDLq/JdKEO0mrKJOTY13vVthxskJAXAEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:2f:6c:3f:43:b1:65:19:9a:cc:76:58:83:d7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Validity
Not Before: May 10 17:00:32 2025 GMT
Not After : May 11 17:00:32 2025 GMT
Subject: CN=5093d0112cc96d8445d044bf015020cb0e6aad8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a6:b2:e2:1a:10:8e:59:e1:7a:6a:f3:92:d9:
19:30:91:6b:26:8e:8e:6e:d5:73:b1:f2:fb:17:44:
b2:de:5e:ee:69:bd:0c:d4:c0:58:eb:97:63:1b:79:
ef:14:9b:59:21:07:0e:7a:e0:2f:66:d7:fb:4c:df:
1e:c6:8a:34:f5:de:b1:aa:ed:fe:71:10:b3:12:d4:
f0:29:4b:a1:9e:3b:6c:b9:3b:36:ec:30:b5:90:7c:
50:97:fc:72:1b:f9:30:3a:75:a7:ba:f2:42:0b:f8:
d5:4c:20:1d:5d:eb:ce:f9:cb:0e:39:7a:2d:48:c7:
d8:1b:b2:2f:3b:e6:13:94:35:3f:5b:33:c3:f8:0d:
b4:f5:63:6a:5a:b6:5d:07:59:2a:4b:7d:d5:33:ef:
76:2c:77:a8:90:c3:8a:34:38:80:2c:96:25:76:13:
50:dc:16:60:c6:99:20:c0:be:ac:5a:f4:5e:7a:81:
20:60:a0:2d:8f:2e:d1:37:06:0c:25:fe:c4:03:9e:
54:82:8b:8a:c6:71:c7:a1:42:1a:21:14:d7:ec:f6:
be:4f:60:6d:ee:82:8a:f5:40:13:db:f2:33:7e:67:
1c:36:bd:12:07:41:7e:7b:f2:d6:14:d4:84:e4:c5:
77:8a:b6:0a:17:cb:89:84:ac:4f:06:89:a2:3d:e8:
c8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:93:D0:11:2C:C9:6D:84:45:D0:44:BF:01:50:20:CB:0E:6A:AD:8E
X509v3 Authority Key Identifier:
keyid:F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:7f:bd:43:a0:b6:d1:81:e4:b1:df:34:93:41:4e:66:a1:08:
2d:6f:61:e7:8d:12:79:ad:c4:57:3c:1e:d4:82:7c:59:b7:53:
49:9a:34:b8:85:aa:05:37:d8:65:ef:d2:cf:6b:15:ad:3e:a1:
ec:06:ee:af:0c:7c:09:db:c6:be:9a:00:9a:4f:48:81:d5:3f:
a7:1f:bf:08:e2:96:83:cd:99:45:c8:81:6b:d1:8e:2e:9f:8b:
0c:ba:fd:cc:98:a9:03:7a:63:e2:3d:b7:55:d7:b0:b9:a3:ba:
de:b0:3f:db:8a:c0:ae:f3:2f:c3:64:22:12:15:17:70:3a:52:
55:2b:9a:3c:6c:59:7d:52:37:8d:79:39:98:0e:16:6d:dc:c1:
a5:c0:fd:56:c5:44:cc:0d:18:56:b1:85:4e:0c:b9:ed:8d:43:
14:fd:fd:90:08:5c:8a:03:98:e6:6d:69:5e:45:8d:ac:29:54:
3c:68:76:82:81:fa:1f:12:67:13:35:ac:e0:4b:7a:cf:65:d8:
55:74:99:91:36:87:2e:a9:97:a6:4c:12:dc:b7:35:c7:a4:b3:
1d:47:5f:3a:04:48:a9:b0:79:39:3e:76:40:2d:25:3b:fe:7d:
66:d4:6e:b8:26:3b:22:f1:50:1c:51:3c:1e:15:fc:42:cd:aa:
5c:94:d8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:41:18 2025 by rpki-client