Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
File: S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft (raw, json)
Hash identifier: J9Bnoq9Xw4RJ9wt0jdeblWAK0VgHs2sr2Gh/vcy+z6I=
Subject key identifier: EC:F8:95:11:16:3E:4B:1E:65:A0:1F:06:37:C3:F4:3B:C3:D0:82:2F
Authority key identifier: 4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
Certificate issuer: /CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Certificate serial: 01969E9A611471030FC2878F9D3A4F85BD68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
Manifest number: 1093
Signing time: Mon 05 May 2025 04:00:39 +0000
Manifest this update: Mon 05 May 2025 04:00:39 +0000
Manifest next update: Tue 06 May 2025 04:00:39 +0000
Files and hashes: 1: S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl (hash: 3nNFaLV5MzxwdJCeb5BE+Cf7g5m16DwPm+nWaG4G76Y=)
2: ejjlASXkUcRdnr6-VdCF2Mgcm40.roa (hash: vzr2w6+iif68HBa0Udg4Ex8g0igxmMWxnsZRKLXilEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:61:14:71:03:0f:c2:87:8f:9d:3a:4f:85:bd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Validity
Not Before: May 5 04:00:39 2025 GMT
Not After : May 6 04:00:39 2025 GMT
Subject: CN=ecf89511163e4b1e65a01f0637c3f43bc3d0822f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:52:e6:3d:af:bd:f2:26:d7:cd:97:69:ce:bb:
1a:a6:1b:f0:5c:b7:d1:3d:1d:ef:e9:f4:2b:52:95:
a3:44:ae:f5:1d:b3:85:8d:c9:15:8f:8c:20:bd:70:
7a:bd:e0:ba:48:42:c2:1a:a9:62:3d:3d:c6:86:16:
bd:2b:5a:31:0a:bb:71:6f:2e:2a:7d:48:05:6c:2f:
f7:9f:fe:18:9f:07:94:48:fa:55:b0:24:2b:5c:2b:
56:fb:e0:28:03:81:a9:f9:e5:2a:1e:07:f1:2b:f7:
f5:85:87:47:2d:a1:c6:7a:03:d4:a3:da:27:ab:a0:
54:48:4b:c2:46:0a:e9:e4:4f:7d:7b:e3:03:83:86:
a7:76:5d:00:83:3a:05:c5:19:3c:3c:63:e8:ed:97:
65:fb:b1:f6:ba:be:2f:ef:c8:da:5a:bf:fb:bd:4d:
92:1c:fc:77:cd:a8:bc:8c:22:a4:0c:a6:7f:2a:a1:
f6:60:7d:12:6a:aa:88:0a:09:a5:6a:fd:2e:1e:47:
6d:1b:2f:93:f1:ec:2c:9d:17:48:7d:01:2c:97:9e:
7d:18:d0:95:76:0a:64:18:c2:de:7a:9e:65:b9:36:
38:34:36:2b:d4:9c:e0:06:f7:38:a2:b9:50:07:26:
35:1f:59:f8:e8:8f:e2:67:49:36:58:d4:3b:32:ec:
07:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F8:95:11:16:3E:4B:1E:65:A0:1F:06:37:C3:F4:3B:C3:D0:82:2F
X509v3 Authority Key Identifier:
keyid:4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:20:ba:e6:70:da:2b:13:05:04:30:5c:24:4c:4c:3b:38:26:
0d:2b:6c:a4:4f:c0:5f:ff:07:6a:77:c9:2d:1b:27:9e:36:82:
95:7d:68:8c:da:7e:7c:b1:5a:94:54:d3:30:1e:46:cf:9f:9c:
a4:b2:f0:95:a8:6d:db:e4:e5:2d:e3:f3:8e:e4:ae:f2:91:b6:
6b:00:45:05:c7:fa:ea:33:95:16:33:b7:9d:dd:58:2d:25:30:
d4:b6:67:b8:90:b4:0c:80:bb:0e:e6:5a:70:a8:d9:c5:9d:b4:
c1:e0:14:0d:21:83:40:6c:4f:d5:2d:9f:45:8a:ae:0e:5b:01:
89:7e:08:b0:27:da:eb:84:32:7a:bf:ef:a9:ba:0d:7c:6c:aa:
9e:ad:e1:03:03:3d:fc:72:37:e2:ab:82:9e:79:d6:ba:b9:67:
07:d5:c4:04:6d:20:fe:79:c0:44:41:a9:6a:f1:71:e6:2d:62:
b2:bd:e8:66:29:d4:00:92:a8:b9:37:39:17:e0:78:af:72:ee:
24:dd:29:42:88:9a:09:51:ad:69:97:fa:ef:a6:76:2e:bf:34:
bb:55:bb:5d:ba:ee:07:43:13:69:d2:ff:4f:42:55:61:bb:5d:
b6:15:10:12:38:bc:b6:c8:84:7b:e7:47:20:dc:91:6a:6f:9e:
bf:48:fe:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:45:21 2025 by rpki-client