Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
File: S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json)
Hash identifier: XPIwXbJB97lXmuOtraAC7wvcoCNuM1pQaR2CpDALZl0=
Subject key identifier: 69:32:D0:52:4C:2F:24:37:17:19:2F:B9:93:08:DF:51:4F:1D:96:12
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial: 0196C5DEABBEFF742EEAE66C97A290E17D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
Manifest number: 0679
Signing time: Mon 12 May 2025 19:00:26 +0000
Manifest this update: Mon 12 May 2025 19:00:26 +0000
Manifest next update: Tue 13 May 2025 19:00:26 +0000
Files and hashes: 1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: ak7IdS0oq7rLjdnUlkGdOZvXdkLG49lFFDFvhWG0MSM=)
2: uNPxSzoBaXvBOJFQn-2SS8eLdrE.roa (hash: aQ7mvpV3ivI5FkoVAB6sSeBflcpGk3YWeApRgwYyH1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:de:ab:be:ff:74:2e:ea:e6:6c:97:a2:90:e1:7d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Validity
Not Before: May 12 19:00:26 2025 GMT
Not After : May 13 19:00:26 2025 GMT
Subject: CN=6932d0524c2f243717192fb99308df514f1d9612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fa:c3:21:4f:4c:02:fe:b7:58:1b:17:c5:3b:
b1:95:81:44:92:23:c8:aa:5d:cb:15:f8:16:5b:04:
da:3a:4c:a3:fd:9b:04:07:8d:58:02:d7:b1:75:4a:
0e:7e:70:7d:c8:bf:47:21:0e:dd:c0:7d:94:58:55:
43:89:5c:ad:0c:f7:61:a3:1e:65:e2:59:30:79:d8:
54:7e:a2:77:44:5a:d3:34:a9:b7:48:ed:85:8c:b6:
6c:ca:ee:cf:d5:f5:28:bd:e8:70:8f:61:73:09:e3:
7a:e0:dc:b8:74:0b:5a:0d:ae:16:33:e3:61:41:0a:
28:2a:ee:d7:63:f5:fb:fc:a8:df:3e:3d:3a:07:0c:
f6:70:86:b0:06:ff:8e:bb:64:36:46:b3:f8:97:ff:
b0:7d:79:5e:97:2b:8d:f2:55:d2:85:91:2c:9e:cc:
be:2c:88:e5:fb:e5:09:50:b8:1a:f7:84:fd:3a:db:
c1:3f:aa:27:81:c8:7d:b9:17:86:e0:f3:b7:a8:04:
df:df:34:08:ff:e4:c9:5d:6c:85:23:06:99:f7:73:
7a:09:b5:e2:12:05:6d:4b:90:c4:ba:ae:84:12:00:
63:24:c2:00:de:e1:55:3d:c0:59:a9:34:9c:9e:3b:
2a:db:e7:04:2a:15:87:95:82:2a:08:2f:3b:1a:99:
e4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:32:D0:52:4C:2F:24:37:17:19:2F:B9:93:08:DF:51:4F:1D:96:12
X509v3 Authority Key Identifier:
keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0f:0e:e9:cf:e6:ec:77:6c:8b:c2:9e:dc:a7:aa:bc:94:8d:
10:6c:51:c6:fa:15:2c:a0:36:7d:f6:37:78:7b:91:8e:58:72:
88:00:b5:97:87:54:ea:2a:fb:a4:4b:a4:51:cf:b8:13:41:0a:
f4:de:6d:bb:97:c3:e5:db:da:81:cd:71:09:34:40:4a:b5:85:
be:e2:de:bb:8d:1f:6a:18:4d:65:cc:76:60:dc:3c:0d:1c:10:
5e:0e:a3:46:41:f8:14:44:21:fb:93:81:19:9e:f2:73:20:6e:
37:bd:89:f8:17:50:fe:5b:05:60:aa:b8:9a:e1:97:16:47:89:
ad:5f:2f:de:ed:96:26:2d:7f:ae:31:e4:3b:c4:23:03:39:db:
2d:1a:9f:f8:a5:be:dc:fb:d4:6f:88:95:34:d7:d2:39:d1:17:
c2:c8:17:2b:d6:71:e2:9a:26:96:2f:2c:85:e0:3c:57:46:fe:
25:9c:eb:32:19:32:6a:ff:31:50:3d:ee:13:f0:6f:09:35:a3:
20:3b:af:4a:ed:78:7f:cf:77:fc:b6:20:7e:e7:1b:07:6f:ec:
f7:66:05:ea:f0:a7:4d:0e:56:b1:36:75:60:12:c4:b1:bb:cc:
17:fd:43:4a:64:34:21:61:c5:d8:4f:f8:b0:14:76:c0:64:bf:
6a:ed:90:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:01:53 2025 by rpki-client