Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
File: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft (raw, json)
Hash identifier: AmUC29tgQXSK19NYDnLNg0s6rJrnlFUAlL1QxxCtW/0=
Subject key identifier: 20:AC:7B:C3:E2:6D:E2:81:9B:45:14:8A:35:66:E9:3E:95:50:CD:AA
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Certificate issuer: /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial: 0196A0BFAE1F7B8ED14083CA1D4899EB091C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
Manifest number: 0A41
Signing time: Mon 05 May 2025 14:00:38 +0000
Manifest this update: Mon 05 May 2025 14:00:38 +0000
Manifest next update: Tue 06 May 2025 14:00:38 +0000
Files and hashes: 1: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl (hash: Gx1aTb2rbJ/UtRujvpKQhs0ihSUbg3O/UP8DjiAW5H4=)
2: cQb4a56386hwKkX2XTV23EzTpVI.roa (hash: T6mT7SHm8VLGp8LXtDhfbm2F1razovLuYTeTLKEqGFE=)
3: gQRYgjDqN747YcFSZ_0L7G8Y0Qw.roa (hash: knELgWCfA/Sf8Z/AQKl4MF48MxHULiqnBptb464jAhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:ae:1f:7b:8e:d1:40:83:ca:1d:48:99:eb:09:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Validity
Not Before: May 5 14:00:38 2025 GMT
Not After : May 6 14:00:38 2025 GMT
Subject: CN=20ac7bc3e26de2819b45148a3566e93e9550cdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:ea:99:30:34:85:e8:b2:87:d1:60:f6:47:
b6:e8:66:c6:a6:b6:98:e8:ba:76:02:88:df:36:cc:
dd:1f:0c:1e:03:58:d3:f9:0f:92:c8:82:dd:55:26:
2c:37:62:29:4a:bc:c2:32:03:ad:9e:3f:b1:05:3f:
38:4d:f0:6c:6a:51:a7:e9:0b:32:04:1f:2b:3f:d7:
8b:d8:a2:1d:9c:8e:c2:ce:6b:28:9d:b8:4e:0f:ba:
7e:ec:84:2d:51:aa:3f:13:88:a4:29:95:98:05:0b:
63:f2:53:46:1e:19:f2:e8:aa:ff:11:da:cf:dc:dc:
74:2b:59:41:c7:2d:c8:44:26:e2:9d:05:e2:62:98:
df:71:ff:33:5b:50:54:d5:02:86:98:5c:7a:b0:ec:
38:12:f3:4b:6d:49:8a:f7:e7:9a:2e:40:ff:4f:90:
b8:45:87:48:93:2b:26:13:15:ba:8e:3c:31:55:4d:
17:2b:12:79:e3:65:ac:ee:05:d6:31:4e:00:ee:e8:
2f:4b:df:f4:91:75:63:f1:86:f0:58:36:d8:4e:cd:
ff:cc:c9:2c:b7:00:57:9f:be:a7:0a:b5:c8:ee:81:
57:b6:41:9f:a9:d9:14:6e:0d:93:2e:e6:db:ac:62:
f5:c5:49:f2:b7:3a:ba:97:e9:91:b7:26:25:f7:4a:
8d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AC:7B:C3:E2:6D:E2:81:9B:45:14:8A:35:66:E9:3E:95:50:CD:AA
X509v3 Authority Key Identifier:
keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:65:0a:93:6a:8b:ab:06:26:c9:fb:95:70:cc:bb:3f:67:1c:
93:a0:4b:ba:ea:f9:08:d9:b5:1d:a2:27:81:e5:53:5c:ba:e6:
e2:71:2a:cd:8f:0c:50:47:13:39:5a:2c:99:ca:a2:fb:c9:ca:
d1:0f:62:ba:1c:83:97:5d:61:17:0f:69:03:5a:fa:31:31:18:
45:c5:b0:0e:f1:9b:83:a6:98:1c:3e:44:94:c0:85:4e:f1:70:
e8:f2:51:e5:db:aa:ff:db:69:01:52:d1:d8:ba:32:e5:6c:f5:
da:70:33:db:27:27:a6:65:52:cb:c0:ce:c0:c0:4d:4c:ac:0f:
71:51:58:c5:0c:f9:86:a0:cf:ef:3e:f7:6e:af:e4:05:e8:21:
e7:9f:13:ff:73:36:e7:45:b8:a9:c3:57:c2:5c:ec:84:ac:1d:
67:6c:81:2d:3a:8c:e9:14:5c:1f:51:1e:30:bc:42:11:92:99:
c2:b2:39:b4:38:81:d5:39:ca:b9:ca:cc:1b:bc:06:4d:67:28:
02:6e:e9:9e:51:6d:67:b5:93:87:1e:50:5d:3f:a4:d9:52:9b:
22:50:08:bc:fe:6e:3a:c8:74:13:d8:d6:c6:c2:6d:94:2a:54:
ac:53:f5:c5:a6:90:2d:a9:d0:ed:36:00:b7:a2:ed:56:19:e5:
62:f2:70:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:50:44 2025 by rpki-client