Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
File: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft (raw, json)
Hash identifier: u1qvNxfIsw6nhLJwZG3BWJuA+l0xJsj/U28WWVoc818=
Subject key identifier: 6D:70:41:25:70:5D:9E:FE:E1:9B:83:82:3F:27:2A:09:7E:71:C3:C3
Authority key identifier: F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
Certificate issuer: /CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Certificate serial: 0196BD8063B51FF65AD65B4A2D92D4708294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
Manifest number: 0232
Signing time: Sun 11 May 2025 04:00:30 +0000
Manifest this update: Sun 11 May 2025 04:00:30 +0000
Manifest next update: Mon 12 May 2025 04:00:30 +0000
Files and hashes: 1: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl (hash: eCqGrugfCF7LD7gveV/XN/1u7XyB6NexRkcb/58tCQk=)
2: OHGF750j4DJGNc1Oe80dc-FWYaY.roa (hash: h+xssOn739NLfAUDZmv5GlRt0V3PO+xTJdzfH9zAWE8=)
3: _HF2gqhC9uCDDnAOpKs3WUfmbDo.roa (hash: QhESuMW1F4EzEaEsL+0TS0hEypm5aO6tHQYl52gTh58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:63:b5:1f:f6:5a:d6:5b:4a:2d:92:d4:70:82:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Validity
Not Before: May 11 04:00:30 2025 GMT
Not After : May 12 04:00:30 2025 GMT
Subject: CN=6d704125705d9efee19b83823f272a097e71c3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:94:d8:3d:31:1c:85:e2:5c:df:00:40:c3:88:
a4:aa:1d:05:0f:73:f4:7d:c1:3a:95:68:00:f0:22:
d5:84:93:d3:fc:6c:f0:c1:6d:4f:b7:a5:38:a8:84:
71:ba:1d:d7:b1:fe:db:fc:28:8a:28:73:85:12:9b:
fa:cd:7a:e4:ca:82:3d:98:73:83:97:73:e7:f0:c0:
29:f2:75:b7:07:3a:39:f1:09:70:b0:bb:ef:72:3a:
74:6e:2d:37:dd:23:9d:f1:23:6f:41:fb:4a:c2:2c:
7f:2c:12:31:d1:bb:f5:8b:54:69:94:93:69:bc:33:
46:a6:c5:fc:35:33:28:ca:cf:8a:a3:f8:4e:17:c7:
fd:f7:e9:ae:f7:05:df:18:9a:5a:ba:db:38:75:bc:
84:7b:f5:06:b9:71:a5:10:f6:c7:24:f6:73:0f:05:
a6:30:ba:12:2b:3d:3a:34:e3:25:5d:a6:06:2c:f1:
91:41:d6:2e:fd:33:3c:13:23:5f:20:05:a1:ad:1b:
1c:5e:a5:ff:aa:f6:65:0a:9c:d3:d8:ff:0e:35:8e:
bb:8f:5c:bb:ce:e9:45:4c:fd:7e:5d:f9:d5:90:9b:
97:dc:d4:eb:40:ee:44:aa:f9:0a:a9:20:5d:da:df:
54:9f:49:e6:8f:79:ce:81:ac:9d:21:ae:14:76:53:
32:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:70:41:25:70:5D:9E:FE:E1:9B:83:82:3F:27:2A:09:7E:71:C3:C3
X509v3 Authority Key Identifier:
keyid:F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1c:c6:ed:74:d1:5e:fd:e5:9c:f4:7e:17:e6:ab:c1:95:a6:
9e:f9:25:05:84:d2:50:73:8a:bb:6f:c9:6f:14:f5:ad:3b:9c:
e2:b3:94:f8:93:14:9c:11:54:c0:bd:14:1a:34:e5:19:82:6c:
87:57:4c:d1:ae:42:d4:0e:1f:2c:df:e8:b1:8b:1b:ff:ee:ed:
c3:7a:2e:89:21:7d:2a:e9:b0:83:b9:a3:e4:ff:95:b8:af:de:
65:21:cb:45:1b:f6:06:2b:84:d0:ba:14:9f:07:67:6b:d5:b3:
30:6c:dd:ee:5e:e1:ba:cc:0e:1a:2f:b4:58:c2:89:6e:5d:c2:
78:8f:82:39:21:d5:d5:a3:bb:04:81:b2:26:17:3f:f2:a0:c0:
e4:fe:f8:c2:b6:dd:7b:bf:7f:de:50:79:65:b0:4e:11:54:22:
d4:ef:25:4c:da:86:3b:f2:25:06:17:30:f2:88:c0:73:7e:cb:
60:9b:81:46:2c:4d:c0:1c:17:14:8d:00:d6:3b:34:b1:16:1f:
28:bc:30:fc:5e:58:f8:7a:c3:ac:d1:e4:ad:57:0c:d5:44:b8:
80:c9:9f:b8:54:3c:d8:a0:f8:43:db:05:8c:18:95:1c:1e:60:
e0:23:ca:36:b9:f4:0b:7f:7a:a2:24:80:02:6a:d7:85:42:e2:
1b:34:57:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:38:53 2025 by rpki-client