Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
File: 9Is_DGqHwEW9z_q9kA24iSvnAuE.mft (raw, json)
Hash identifier: Jx6vWXBnnmY5L1VDNO6rV6Aww17Izq36VTAR5Ng1N/Q=
Subject key identifier: 14:21:B2:95:E1:8C:A7:0D:5F:F1:A7:30:DC:5F:A8:1E:1E:83:13:06
Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
Certificate issuer: /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Certificate serial: 0196C984A68DC43F282A8CA7786669FF0166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
Manifest number: 153F
Signing time: Tue 13 May 2025 12:00:35 +0000
Manifest this update: Tue 13 May 2025 12:00:35 +0000
Manifest next update: Wed 14 May 2025 12:00:35 +0000
Files and hashes: 1: 9Is_DGqHwEW9z_q9kA24iSvnAuE.crl (hash: Bvk2qV9CR12loLS2s+lIHwq5/7B9rCFT8BMZcJ1NnTA=)
2: AMZNY2ioL1FdTxYpQ_5_vn5xae4.roa (hash: FA95yICxP5LnzLz5ZPaXdyIPM3T30+TR7VWXzTyf+X0=)
3: Hg9ZafaXQ8rLTSt-HMnDH0lT2yU.roa (hash: 0HTHXkqvlWJxm74CgwKZLUkDjsOUoGNMgHyD7nKaILk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:a6:8d:c4:3f:28:2a:8c:a7:78:66:69:ff:01:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Validity
Not Before: May 13 12:00:35 2025 GMT
Not After : May 14 12:00:35 2025 GMT
Subject: CN=1421b295e18ca70d5ff1a730dc5fa81e1e831306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:03:04:a9:d3:b3:48:d3:0b:54:06:1f:79:a2:
03:70:bc:e6:dc:3f:bb:cd:44:61:90:4f:78:3e:ca:
23:01:2b:f1:87:b9:76:cf:60:85:7b:03:cb:ed:99:
08:ad:ee:bf:14:73:9b:80:4c:de:59:95:3f:45:ca:
5d:8d:fb:84:e1:5a:17:dc:bb:0f:d1:69:56:19:6e:
9a:ef:d7:0b:4d:54:e8:8c:3e:c5:af:1f:47:26:b8:
e4:ee:2f:e2:10:72:48:ad:7a:40:ed:ab:76:92:91:
50:e7:67:30:ea:f4:c5:1c:e2:af:30:f9:3a:03:52:
d8:f7:77:64:e7:0d:2e:92:71:cf:be:aa:c4:e6:ce:
6b:0f:54:87:aa:d3:db:2d:86:83:98:99:37:73:3f:
54:39:7b:23:c6:28:35:1b:b2:b9:27:d4:f9:fe:a2:
ba:f6:a1:0f:3d:1e:96:a2:b1:24:e2:ba:94:55:9c:
e2:ae:ea:a8:e6:8e:b2:eb:32:09:13:6d:10:46:43:
79:2a:8d:84:54:23:d7:43:7c:68:3d:c7:5d:2e:ff:
2e:48:9d:bc:05:4c:d8:ac:98:9f:3e:4f:59:56:6b:
ba:ff:31:20:ab:31:1e:3e:bd:21:8d:f0:66:b5:ff:
23:fe:4a:b0:ef:24:80:fd:b5:ec:29:ad:5e:c8:6a:
2e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:21:B2:95:E1:8C:A7:0D:5F:F1:A7:30:DC:5F:A8:1E:1E:83:13:06
X509v3 Authority Key Identifier:
keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e0:e4:67:98:9b:6d:d0:14:d1:e4:4b:30:b5:f7:0d:4a:25:
83:f3:b9:43:f0:ad:da:dd:a6:3c:2f:c0:45:a1:68:49:d6:9a:
85:b4:b1:19:d4:01:7a:89:64:a3:ec:d2:3b:66:0f:b5:0f:78:
7b:4f:6d:c8:b2:72:75:0c:98:74:4d:cb:ef:43:85:d1:98:c3:
9a:a4:28:20:39:78:68:d0:22:dd:bb:f3:f8:eb:86:b2:36:56:
7a:81:03:2c:4b:ca:66:3d:36:73:9a:45:38:c1:8e:14:b3:2b:
a1:5f:e2:39:2d:b1:55:84:82:39:55:fb:71:1a:d1:29:0e:20:
9e:29:80:9a:b3:d1:8c:ff:6f:18:e4:97:e4:da:f7:75:76:02:
43:11:00:4b:91:a8:75:08:d8:06:ff:02:e2:b4:e9:05:8b:bb:
44:12:4d:84:38:da:82:62:87:49:95:ed:3d:3e:f2:e2:e6:eb:
25:53:1f:7d:8f:0a:9a:28:ed:be:df:df:c7:71:a7:1f:c5:e1:
0a:50:24:95:c9:e7:15:3f:5f:2e:0e:4a:0f:ac:82:24:8d:7c:
32:fe:6a:c8:d6:77:c6:da:f7:a4:c7:4a:b3:35:f1:3d:96:33:
0b:9a:1d:f7:5e:73:3f:2c:de:1e:ad:10:87:06:b7:02:8d:7d:
b1:56:c8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:57:35 2025 by rpki-client