Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json)
Hash identifier: JeDIpIyql3A/pbenVaiVGX11wI0Ub78aNmyMQc+mAds=
Subject key identifier: F3:17:81:93:D2:BA:AD:44:5E:74:27:0C:8C:4F:DC:C0:41:63:AA:3F
Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Certificate serial: 0196B7B56656B1C8A4A308DF52B26843833A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
Manifest number: 152F
Signing time: Sat 10 May 2025 01:00:40 +0000
Manifest this update: Sat 10 May 2025 01:00:40 +0000
Manifest next update: Sun 11 May 2025 01:00:40 +0000
Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: E40GJJfnksb+olsYe1r7fSDHeDZE9579CnV5XJZYV8E=)
2: KALMVhqVFo0O99VrdECDqSH5Z6g.roa (hash: vjDA6l8MH7MrWb72G2c81lHoX5Ci2HwmnVXmzEUbWMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:66:56:b1:c8:a4:a3:08:df:52:b2:68:43:83:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Validity
Not Before: May 10 01:00:40 2025 GMT
Not After : May 11 01:00:40 2025 GMT
Subject: CN=f3178193d2baad445e74270c8c4fdcc04163aa3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4f:1a:49:8b:37:e9:e0:38:44:7c:98:c9:d8:
14:47:2d:32:81:8f:2e:e7:bf:38:7b:c4:33:10:2f:
dd:47:a8:2f:92:12:81:8c:79:7c:e9:d3:ae:8c:2c:
ad:f2:a0:d4:cf:41:cc:f4:9a:b6:ad:9d:99:fa:f5:
dc:91:d7:1f:14:a7:fa:43:b5:c1:c6:68:51:fe:08:
32:8d:0d:f3:e3:0c:6a:4f:1d:a7:5d:8b:27:41:97:
84:61:03:02:73:7a:c9:af:37:89:b2:47:b3:0c:65:
cb:d8:b3:23:e2:ad:e1:e8:e3:3f:b0:55:07:3e:46:
b2:ef:cd:88:02:bc:69:39:26:28:a4:75:e7:28:5b:
31:06:44:22:58:ce:11:36:97:4c:81:06:35:b2:f9:
ad:5d:73:6b:1e:5c:dd:02:f2:e6:4e:77:27:3a:4a:
99:66:c3:98:98:a7:cf:45:9b:06:25:a6:a3:16:cd:
49:2b:27:b8:ce:9f:10:cd:b2:f7:0a:fb:78:5a:89:
50:53:fc:0a:a5:8e:d6:03:a8:99:5a:d1:62:aa:b5:
81:63:aa:c6:97:a2:00:19:ab:d2:33:aa:60:4e:52:
a6:7c:7e:38:2e:a2:3f:ca:c4:c9:ca:1b:04:79:2c:
bf:e9:9f:c8:4e:b4:1e:fe:fb:d6:5e:56:7f:86:d4:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:17:81:93:D2:BA:AD:44:5E:74:27:0C:8C:4F:DC:C0:41:63:AA:3F
X509v3 Authority Key Identifier:
keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:46:8f:94:7a:38:df:8c:6f:0e:4b:21:aa:a5:d6:21:63:5f:
f1:17:29:b8:a4:32:cf:2f:d8:f9:da:98:64:8b:0d:16:2b:ad:
a1:23:ab:9d:01:42:19:8a:06:ac:8b:17:e7:95:24:5e:66:03:
05:4b:a0:54:e4:ac:7f:7e:5b:fa:b5:15:26:22:91:48:3d:b7:
92:26:29:ff:26:00:85:86:86:da:60:19:c3:a2:73:42:3b:1e:
0a:45:e0:e8:d1:0b:92:b7:77:7e:66:21:88:2b:1d:76:57:82:
61:41:86:01:53:8b:58:c6:5f:5a:81:96:7f:c1:74:bb:50:ff:
c8:c3:14:78:93:f9:39:37:91:f8:37:9c:9e:99:90:b7:8d:70:
70:0a:3a:68:2a:a4:5d:1c:81:72:f7:de:f2:99:58:c3:56:17:
5b:e0:54:84:e9:64:6c:51:c6:9f:44:df:84:e2:00:3d:e8:a5:
f4:6a:8d:e1:08:af:b4:e4:dc:14:b9:4b:8c:77:53:18:f0:6d:
8f:72:9c:64:a2:87:c6:36:f1:6d:0d:71:4e:54:12:15:5b:a1:
55:72:e0:10:64:20:63:12:cd:78:45:8e:25:cd:a6:34:e6:0a:
9c:71:45:c0:4b:9d:4f:f4:e4:2e:5e:98:93:3a:49:60:7a:7a:
56:f4:f7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:29:37 2025 by rpki-client