Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json)
Hash identifier: A7gI1KzhCAJJ6VoqPlxqnJXt8t9tHWAIc8kmjAtk/4o=
Subject key identifier: 72:B4:AD:F2:6D:52:63:21:36:DF:94:A5:C4:99:01:12:FC:71:21:BC
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 0196BDEE71B37990D7D309A1419417400141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
Manifest number: 04EB
Signing time: Sun 11 May 2025 06:00:42 +0000
Manifest this update: Sun 11 May 2025 06:00:42 +0000
Manifest next update: Mon 12 May 2025 06:00:42 +0000
Files and hashes: 1: 67zW8t21om1pTXvyuagS0QWX12s.roa (hash: arwG9XkQ/+2dVagELL/zq8/mCR4dYaym8bqyA1sBk4A=)
2: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: 7cs87J/Ie2p1fXp1f1QSy0Gl+RmSvUJnCM7Tg9VRksQ=)
3: cCgr35XwpirOi5T2NC-QhUoK0mY.roa (hash: aPFc2y18XhdFxhdVyRug+HbV1BK/ZT7q4hdqYZuvICQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:71:b3:79:90:d7:d3:09:a1:41:94:17:40:01:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: May 11 06:00:42 2025 GMT
Not After : May 12 06:00:42 2025 GMT
Subject: CN=72b4adf26d52632136df94a5c4990112fc7121bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5c:27:eb:b9:06:2b:d9:a9:7f:e9:5b:58:73:
94:39:50:b8:09:f2:58:ae:5f:7e:fe:28:95:49:92:
85:8f:45:76:68:6b:f9:45:c5:6b:a8:96:6f:ae:76:
7d:8e:9d:53:a7:23:78:0e:9f:20:21:22:df:66:e2:
ce:a8:ee:79:ba:c6:a2:fd:77:83:1e:d1:eb:a2:83:
cd:a7:50:1f:2f:73:bb:03:eb:50:d6:3b:cd:54:1b:
54:f3:09:7d:b9:1e:c5:75:d5:e0:e2:13:2d:8c:b9:
d5:b5:48:47:8e:7c:88:09:1a:50:4b:fb:a3:b7:34:
32:93:2f:2e:f6:4b:04:5a:7c:38:3d:a8:7e:85:4d:
a4:bc:52:51:ee:2a:a2:f7:68:e4:ff:4c:66:34:9e:
ea:24:46:28:b4:ec:89:4c:b4:0a:31:52:7a:6c:e5:
c8:8f:71:c9:8b:5a:f6:f3:d6:c4:d2:32:57:ef:88:
03:cd:e6:04:81:98:2a:4d:73:dc:14:19:d4:fb:0b:
7a:d6:9d:b6:02:12:0c:b1:53:fc:16:76:21:74:2a:
6f:fb:5a:b1:2a:87:87:16:50:29:70:7a:64:d1:cf:
da:91:95:46:b3:81:23:4a:f5:7b:32:76:f1:40:f9:
64:d2:54:84:13:68:f7:ce:6e:34:e1:12:e8:80:25:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B4:AD:F2:6D:52:63:21:36:DF:94:A5:C4:99:01:12:FC:71:21:BC
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:55:34:f9:7a:b9:8b:25:dd:40:ed:7a:be:41:59:84:33:fd:
9f:9e:b4:f0:02:54:3e:f9:42:3d:6b:fb:96:b1:f6:6a:a2:fa:
76:d5:3f:b1:ca:1c:45:c0:6b:9e:2a:08:86:f5:48:6f:06:6a:
01:dd:30:49:76:4c:8c:27:20:28:5a:c5:ba:dd:92:3b:74:f2:
de:ac:71:d7:5e:26:eb:65:9c:0d:59:7a:75:73:e2:e3:4f:92:
21:3d:b1:ec:6e:d4:d2:b5:3c:78:f6:03:cc:a9:60:f0:a4:97:
82:7a:fa:66:08:98:42:d3:ee:a8:d7:79:fe:4b:42:9d:6e:45:
b1:be:1f:ed:ac:40:88:28:5c:61:61:4d:10:cc:e8:6f:7c:b6:
84:32:29:2a:c0:31:75:cb:b1:33:23:2b:5f:e0:7f:7f:fc:f7:
63:1b:a0:59:37:8d:64:6d:9b:68:ca:47:fe:fc:7d:ee:1c:e8:
ca:e6:05:73:90:14:c9:af:a8:98:7a:a8:5d:66:df:cb:4e:28:
66:b0:00:6d:46:c4:ee:58:6d:83:36:a0:15:ba:68:11:5f:b6:
8a:2f:8f:c2:14:fd:51:78:f6:04:6e:82:c1:fb:ff:94:58:9c:
41:0d:0b:c7:34:ce:7e:d6:27:3f:61:3a:92:dd:6e:42:63:0f:
53:ef:30:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:36:58 2025 by rpki-client