Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
File: 9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json)
Hash identifier: OnkooEU3HBEdGsXyRlX6kem5A8dgOhhAnTVrLTcFMTo=
Subject key identifier: 3F:B3:9F:C4:01:BF:29:AB:11:BD:CE:55:0F:2B:97:F6:6A:42:9C:E3
Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
Certificate issuer: /CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Certificate serial: 0196DBC1CD2D09873D3E62603722A4603A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
Manifest number: 153F
Signing time: Sat 17 May 2025 01:00:33 +0000
Manifest this update: Sat 17 May 2025 01:00:33 +0000
Manifest next update: Sun 18 May 2025 01:00:33 +0000
Files and hashes: 1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: 2fhvPwmllrX/jm5U6YADfVcwx1peMm4ni2jlvbfCMTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:db:c1:cd:2d:09:87:3d:3e:62:60:37:22:a4:60:3a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Validity
Not Before: May 17 01:00:33 2025 GMT
Not After : May 18 01:00:33 2025 GMT
Subject: CN=3fb39fc401bf29ab11bdce550f2b97f66a429ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:41:c6:65:9d:45:a5:db:a8:37:63:53:9f:
51:92:ed:a7:34:12:8c:ef:40:4a:5d:d5:39:a5:6a:
c1:e4:8b:a2:7e:ab:06:ca:26:e7:2d:f8:0c:a6:29:
73:97:4a:c6:a2:9b:59:09:86:3f:c3:eb:20:6e:0b:
f3:a9:5d:9c:5f:6f:0c:c6:48:a2:ef:b0:bb:38:68:
6c:22:d5:f1:45:9d:5c:20:c7:8e:a1:1c:84:1f:f3:
83:a3:95:d2:6e:3e:d3:0e:32:7e:72:ac:b4:86:58:
ad:55:b0:9c:80:f0:d0:33:1c:70:89:f6:d4:ca:d3:
43:04:b4:87:f6:1c:1e:89:7e:ed:74:12:44:54:9f:
d9:ec:cf:9f:d9:1b:e4:c4:79:45:76:75:46:eb:ca:
4d:e6:15:39:a0:3a:43:14:1c:0f:f5:09:05:20:16:
7e:0d:26:4b:cc:3b:5f:22:02:87:d2:76:99:8b:5a:
f3:99:ef:f3:7d:ee:18:82:6e:9a:5d:74:f0:49:38:
c1:84:fb:35:2a:49:2a:04:97:7f:5e:5d:c8:3d:da:
89:80:64:2a:ed:d3:a5:4c:3d:22:2f:8a:9b:e8:5a:
cd:e2:57:71:3d:e1:c0:68:f7:f9:ea:b9:c1:b8:cc:
51:f5:b3:79:d1:75:f6:a2:c4:ff:6b:86:fb:0c:a8:
98:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B3:9F:C4:01:BF:29:AB:11:BD:CE:55:0F:2B:97:F6:6A:42:9C:E3
X509v3 Authority Key Identifier:
keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:09:6e:b8:58:ab:41:35:9b:a9:3d:17:e0:b1:24:48:5d:bb:
84:0e:96:6a:fd:99:d4:cb:55:cf:fc:42:4b:c0:cd:7e:d5:02:
c5:b2:31:d2:5d:16:4d:ab:cf:4b:de:d6:8f:66:27:24:a6:9d:
05:b9:7b:e7:be:75:ee:1f:f1:11:ed:12:78:87:b7:cd:22:af:
5f:03:8a:8e:81:57:1b:8b:24:34:03:9b:ea:0f:01:43:c7:ab:
9f:44:1d:bd:50:28:df:ce:30:3c:b1:30:ae:94:f7:58:ac:1e:
d8:a5:54:9b:d5:7a:1b:37:6d:2b:0d:19:6b:30:d1:7c:d4:80:
b8:b2:2e:83:9a:69:06:e7:72:14:28:ae:9b:9e:1d:c3:9d:74:
3e:43:dc:53:bd:a2:b7:6a:8f:81:d4:07:b0:ba:51:2e:83:ff:
d5:8e:07:95:bd:cd:fc:7c:50:24:ab:1e:4b:e2:a4:c6:b6:22:
51:2b:26:b8:b8:6f:70:8d:07:6e:59:e2:f5:41:6f:82:f1:b8:
0a:4d:33:8d:de:18:8b:6b:df:bf:9b:bc:4e:0e:41:85:72:b7:
02:9a:f7:5a:2c:ac:5a:37:4b:26:3e:5a:96:88:b2:f1:c3:dc:
4e:7d:6d:1b:b7:75:67:10:05:3b:23:81:71:28:86:dd:3d:f2:
b5:4d:88:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 05:26:11 2025 by rpki-client