Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
File: d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft (raw, json)
Hash identifier: V0JtYb7hRBciv4Y8tcho1Rcdhw47SlWtco7kr5+Xv7o=
Subject key identifier: 7E:53:38:87:3B:69:91:B9:4B:AA:09:5E:06:81:AD:75:3E:6A:B0:20
Authority key identifier: 77:DF:CF:09:82:48:68:69:B7:1D:BD:B7:CC:61:3C:4B:38:13:67:C4
Certificate issuer: /CN=77dfcf0982486869b71dbdb7cc613c4b381367c4
Certificate serial: 0196C19450E9C5D1B6476C19EA3BDCCDF7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
Manifest number: 0CB3
Signing time: Sun 11 May 2025 23:00:44 +0000
Manifest this update: Sun 11 May 2025 23:00:44 +0000
Manifest next update: Mon 12 May 2025 23:00:44 +0000
Files and hashes: 1: DaccjHojB95-TCoADZK32YMFyKo.roa (hash: ihqtrBhocSRh86RahK6DG9qn8vgDTCS7AhN7/gul0Fs=)
2: d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl (hash: pC1CxQBKjSWMBH1Nq70pT3cabXqtdYcRYq20T8XNbgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:50:e9:c5:d1:b6:47:6c:19:ea:3b:dc:cd:f7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dfcf0982486869b71dbdb7cc613c4b381367c4
Validity
Not Before: May 11 23:00:44 2025 GMT
Not After : May 12 23:00:44 2025 GMT
Subject: CN=7e5338873b6991b94baa095e0681ad753e6ab020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:cd:c2:a9:9b:8a:14:e6:06:5e:db:bc:87:
33:cf:5d:f9:23:51:26:fa:9b:25:95:9b:91:8c:92:
58:15:0e:e1:87:f8:5f:4c:a2:92:2b:b4:62:24:30:
57:f7:9d:0b:a9:3b:c6:e2:aa:25:4c:33:13:1a:f4:
58:0d:2c:89:c7:25:f9:87:ad:22:08:25:e2:7e:76:
5f:ad:f6:64:b2:58:d4:52:fb:30:ea:3e:34:98:dd:
ad:90:df:b5:70:45:af:aa:25:f3:24:d8:85:08:76:
36:73:71:f8:a7:3c:a5:6f:b1:d9:a6:d2:81:e8:43:
ae:8b:41:69:61:09:c8:c4:79:b0:92:c3:6f:21:a4:
9c:41:1d:72:8d:3d:4b:97:75:19:18:75:7d:67:95:
89:e5:90:f5:7e:17:6c:4c:e7:4e:a5:72:04:ed:64:
75:68:c0:43:96:d6:9c:99:a1:52:60:0e:f3:83:fb:
c8:21:cf:25:69:92:64:ae:b3:13:58:02:e3:e2:87:
98:e3:47:06:6f:ee:a5:9e:dc:38:da:17:44:e4:91:
38:e7:09:fa:53:fb:4b:4e:7f:a1:35:22:fb:da:10:
a3:09:b3:39:41:4e:63:bf:c5:eb:f6:ed:58:ba:28:
18:a9:07:26:9d:d1:76:42:6e:2b:99:bb:bc:54:f4:
e4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:53:38:87:3B:69:91:B9:4B:AA:09:5E:06:81:AD:75:3E:6A:B0:20
X509v3 Authority Key Identifier:
keyid:77:DF:CF:09:82:48:68:69:B7:1D:BD:B7:CC:61:3C:4B:38:13:67:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f0:6d:53:e6:0e:65:79:e0:d7:cf:57:06:92:8f:6b:7f:bf:
04:dc:48:4e:c3:a4:10:f1:5e:81:36:85:07:96:40:b3:e4:16:
32:a3:ce:9c:c5:78:01:7e:3f:07:e1:87:d4:33:4a:f1:86:cd:
99:c9:e8:71:c9:a8:c8:a0:c9:84:5c:bb:af:fb:87:88:40:f2:
40:14:d6:95:f9:e2:3a:00:98:05:8a:06:52:ac:f7:2f:ea:5f:
0a:fd:ea:e8:30:4b:ed:f7:0d:79:1f:a4:c5:cc:59:de:97:12:
2e:5b:05:54:79:97:77:47:18:5d:67:e4:be:53:ce:9b:1a:4d:
a2:d3:b7:7f:c1:50:34:10:a6:29:34:f5:94:b8:26:b0:9b:18:
67:03:49:cf:98:77:62:dc:59:9a:7b:57:82:3e:0c:a4:5d:65:
6a:27:1f:71:58:0a:33:cc:f4:b5:a9:03:a2:52:c4:b0:cc:4c:
4f:3b:91:34:17:88:bf:dc:d1:91:81:32:59:cf:2d:2b:46:b4:
38:35:66:28:f3:51:67:52:5e:a4:15:e1:80:26:28:0a:33:5e:
c2:3e:af:5c:7e:b2:36:2c:f5:8f:32:61:3d:b1:39:10:25:89:
8c:32:c4:9a:49:02:1a:b7:41:97:b3:c0:fa:5c:b4:58:54:93:
7a:6e:8e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:36:05 2025 by rpki-client