Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
File: m9upUpCphaaXdj0wq0L5w3hAeLI.mft (raw, json)
Hash identifier: Lx5lz319JsG8Z0gFoC+OEpXHEKXpFwhPDcRNzUqBEZw=
Subject key identifier: BB:AE:D7:43:D0:FD:02:52:ED:CF:8B:A8:AB:8E:0B:45:8B:2E:21:29
Authority key identifier: 9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
Certificate issuer: /CN=9bdba95290a985a697763d30ab42f9c3784078b2
Certificate serial: 0196BA113C9A575E0B78272D8A93456BCB8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
Manifest number: 0BAD
Signing time: Sat 10 May 2025 12:00:13 +0000
Manifest this update: Sat 10 May 2025 12:00:13 +0000
Manifest next update: Sun 11 May 2025 12:00:13 +0000
Files and hashes: 1: CYD_Z2qF6mHZ92tY0ftxYfveSAQ.roa (hash: IVgjWp28wTnlbtVuEQ1FT4HkeEGAz5yGW6fM8IpM3RI=)
2: m9upUpCphaaXdj0wq0L5w3hAeLI.crl (hash: DieWsfXasWjaeDFIwCIgHpWooTUGg2R4oStd5rYOpb0=)
3: tLilW5BDEJTEzIEDh8KmIyaiPZU.roa (hash: vFC4JGd2bQPNjS7TqFQa5G/kgv43UH1kGodWdHda2yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:3c:9a:57:5e:0b:78:27:2d:8a:93:45:6b:cb:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdba95290a985a697763d30ab42f9c3784078b2
Validity
Not Before: May 10 12:00:13 2025 GMT
Not After : May 11 12:00:13 2025 GMT
Subject: CN=bbaed743d0fd0252edcf8ba8ab8e0b458b2e2129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ef:78:2d:f4:d5:74:d3:51:f0:f7:ba:3b:bb:
51:a1:f3:6b:79:ba:9b:ed:40:3a:a3:0c:e8:b0:e3:
83:56:8e:f5:dc:9a:53:ae:d3:35:8c:dd:16:cf:80:
16:6e:33:d7:bb:2b:66:70:f2:de:6d:c3:74:13:f1:
8e:47:bc:8c:d7:fa:e2:8d:df:25:11:95:56:c5:2a:
2a:0a:ee:ed:b3:31:92:76:a6:51:1f:32:5e:0a:62:
96:36:70:b4:95:b4:12:90:ad:25:9b:2c:36:01:d3:
e0:42:c8:40:02:85:23:07:47:df:51:af:e6:01:58:
2e:4b:78:34:13:c6:7a:5c:9a:8f:3b:a9:0e:2a:91:
c8:38:66:3c:a5:30:b0:79:fe:d1:57:59:3a:26:64:
75:57:17:53:4d:ee:84:f8:73:29:76:99:35:f6:1b:
fe:c5:46:9a:09:3c:6c:a7:dc:84:41:c2:84:82:aa:
c8:5b:6e:74:1d:af:24:10:52:5e:bc:7e:be:b9:85:
23:87:51:be:c5:d9:a2:ba:e8:1e:46:76:59:33:3e:
9c:96:ae:ac:37:8a:4c:ea:a8:b5:19:3d:41:61:03:
3b:09:df:ba:cf:39:ab:09:10:33:cf:da:e0:ec:c1:
75:39:91:b5:04:fd:21:a8:80:d4:d8:e2:be:7f:e6:
b9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AE:D7:43:D0:FD:02:52:ED:CF:8B:A8:AB:8E:0B:45:8B:2E:21:29
X509v3 Authority Key Identifier:
keyid:9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fb:a6:9c:08:d3:16:6d:32:db:28:c0:6f:08:e2:d7:bc:94:
7e:ad:bd:08:1a:c2:c3:2f:e7:ff:f9:b2:14:e5:7e:24:90:ee:
05:06:9e:c6:a6:de:46:cb:8b:80:ee:2c:38:47:91:6a:a2:7e:
e3:58:8b:89:b6:ce:98:5b:1b:57:8d:21:c0:1a:88:99:59:05:
8c:b1:37:b6:41:2d:ed:67:c6:39:63:c3:6e:84:99:70:d6:f7:
37:09:de:a8:66:e8:76:f9:c1:6d:bc:10:d5:ee:ca:3c:d9:de:
ff:c5:5a:b7:28:26:54:50:06:52:15:31:31:6e:d5:8f:07:ba:
d2:13:3f:9e:5f:08:c0:60:69:73:77:c1:28:62:c5:cc:59:35:
dc:4d:df:80:a0:c0:41:68:d0:ae:9a:de:20:0c:3c:08:bc:61:
40:28:69:c6:6b:b9:0b:de:e0:ed:d7:fb:07:b4:9c:97:aa:c6:
8f:68:9d:9f:d4:c1:1a:b5:ae:6a:68:7c:53:fa:aa:95:de:ce:
76:78:5c:00:05:95:34:72:95:b7:cd:e3:c9:29:76:76:48:d3:
ea:ae:36:f5:9a:b6:88:88:d5:c0:64:95:e7:40:d9:72:6d:99:
47:6d:07:37:bc:d0:8a:6f:6c:ff:94:03:e9:db:87:0d:d5:4d:
5b:c7:13:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:39:07 2025 by rpki-client