Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
File: 9LndnjT-ZtdROJA3CPjOH700LWQ.mft (raw, json)
Hash identifier: CNLb92Yygc1zPiB/+U1RySh47Orv2rJteua0nLrgRrE=
Subject key identifier: E7:06:89:B2:B8:38:ED:AA:2B:6B:5C:EE:6D:7B:44:11:DD:CC:59:C8
Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Certificate serial: 0196C7286924E789E85136E6CA9D8C82FBFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
Manifest number: 153C
Signing time: Tue 13 May 2025 01:00:36 +0000
Manifest this update: Tue 13 May 2025 01:00:36 +0000
Manifest next update: Wed 14 May 2025 01:00:36 +0000
Files and hashes: 1: 9KjqbMoowr4zIwC0vIDCLJx3OPk.roa (hash: P/sEcAl8BwOGFXxtB8+HWMsFUjWpgx7ANde/4kLha4c=)
2: 9LndnjT-ZtdROJA3CPjOH700LWQ.crl (hash: RdaxTNp+638tUnf/7LAH3dvXi3+OwtIwEQuhhhVumTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:28:69:24:e7:89:e8:51:36:e6:ca:9d:8c:82:fb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Validity
Not Before: May 13 01:00:36 2025 GMT
Not After : May 14 01:00:36 2025 GMT
Subject: CN=e70689b2b838edaa2b6b5cee6d7b4411ddcc59c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:26:90:13:4a:ff:cb:8b:69:ee:c7:f5:12:6f:
fb:56:1a:21:32:1b:ad:63:df:2e:d6:09:d7:64:99:
d6:d2:bb:0e:72:ec:0b:e1:c4:b6:94:97:8e:0a:26:
da:2f:5e:6b:7c:f8:4e:e5:08:02:8b:71:1f:61:70:
74:97:44:b1:66:a7:d5:53:cf:de:be:99:80:47:5f:
bb:7d:b5:0c:13:6b:83:11:4d:f7:7a:ed:40:e9:c5:
17:f7:9c:73:d6:83:cc:a1:69:4b:99:5c:5b:4f:43:
91:c6:df:e9:0b:dc:50:39:51:28:55:9b:ac:ee:4d:
af:96:00:f5:06:58:0d:61:49:52:9d:f1:a2:2c:6e:
8a:40:a4:06:29:42:62:f0:a0:18:bc:fd:b4:86:fa:
a6:35:11:12:8c:f2:6f:3f:41:b2:60:75:48:f1:80:
73:0d:8f:6d:bd:85:78:42:f1:c5:ba:c5:61:22:7a:
06:6f:05:e3:50:63:d2:6d:2c:99:e1:4e:c4:39:6f:
97:71:42:31:39:f4:43:83:7b:0e:57:27:fd:82:6c:
a3:e5:f7:57:bc:f1:e3:26:6b:96:d6:76:48:7f:71:
f3:70:02:01:ee:f1:36:b1:9d:c3:52:92:72:65:67:
1b:6c:92:2b:a5:6f:42:13:a8:89:29:10:2a:cd:c0:
33:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:06:89:B2:B8:38:ED:AA:2B:6B:5C:EE:6D:7B:44:11:DD:CC:59:C8
X509v3 Authority Key Identifier:
keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:82:8b:ad:af:d3:da:cc:1f:ca:94:f8:62:60:aa:cd:41:54:
df:4d:fa:92:4d:b4:1b:d3:10:af:b1:c1:cf:0d:d1:73:f0:f4:
73:47:98:43:e1:d2:b8:4c:05:fe:de:bb:8b:cf:b0:87:73:99:
21:05:43:ef:9d:c9:be:dc:3d:31:f1:4f:2e:1e:6f:06:cb:9b:
4f:5a:e5:ad:f9:e3:4c:e6:c6:02:58:0d:3a:10:5b:20:47:ed:
9e:52:10:e9:08:01:7b:6d:6e:8e:dd:1b:68:44:bb:52:cb:1a:
dd:e7:6a:72:10:25:73:9e:b9:60:22:19:07:7a:4a:7f:58:9d:
a3:70:15:6f:6e:72:da:49:4e:98:db:40:fc:bc:27:95:50:44:
87:4c:e7:13:fe:88:eb:ce:81:85:e8:c2:71:ee:cd:1c:83:f8:
e9:e3:e2:9e:46:a6:22:7a:07:b8:ef:36:72:40:61:e7:98:dc:
e9:40:91:38:3a:4e:e4:ce:c8:1f:11:5c:56:2b:80:6a:ae:89:
35:c5:ac:74:13:93:9f:25:86:87:a7:d9:b0:bb:00:8b:ba:a3:
ed:73:6f:81:47:94:2f:d5:3c:22:ff:ee:75:03:a1:01:67:74:
1f:5e:7f:8c:2a:20:eb:93:09:35:01:b0:76:06:9b:06:13:65:
97:5b:df:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:05:07 2025 by rpki-client