Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
File: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft (raw, json)
Hash identifier: mMiB2s+7km5QKVofuklftFct1GJbmzWQ3Mnhtd7zi40=
Subject key identifier: 89:2C:2C:E4:C4:B8:59:54:FB:D2:C4:50:04:8C:41:9E:01:84:1D:B4
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Certificate issuer: /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial: 0196BD81045223017F1640510F6451162D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
Manifest number: 151D
Signing time: Sun 11 May 2025 04:01:11 +0000
Manifest this update: Sun 11 May 2025 04:01:11 +0000
Manifest next update: Mon 12 May 2025 04:01:11 +0000
Files and hashes: 1: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl (hash: BUoTUkZtPDC25RTWsDDPAG55kmP+a2RgNRODRne9VHo=)
2: SJe0yiKrFFgre-LwlA373na16-M.roa (hash: W+lZ86QtGfH27JSeGBvOgaus0tZU6nh0IODmn6TYevo=)
3: rXYQihXZcHzDYDPfOCw2uf0QxOs.roa (hash: mgxpGPq3j8kcIVwK/lsmtpT+En8AA3E9GG8LueVY7g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:81:04:52:23:01:7f:16:40:51:0f:64:51:16:2d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Validity
Not Before: May 11 04:01:11 2025 GMT
Not After : May 12 04:01:11 2025 GMT
Subject: CN=892c2ce4c4b85954fbd2c450048c419e01841db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:c1:e6:57:ff:c5:c4:7b:ad:94:28:10:71:
84:67:13:19:78:f1:40:d5:54:75:f8:74:ff:35:28:
12:31:b0:a1:ef:23:bb:ab:69:9f:0e:37:56:43:15:
1f:7d:87:da:92:89:30:cd:0b:cc:f6:ec:9f:9a:1c:
ba:b7:8d:14:e3:c3:82:bb:c1:25:4a:3b:d5:5b:17:
d2:69:83:bc:ee:00:0c:50:72:70:b2:41:57:52:cd:
12:8f:ec:f4:12:ce:d1:cf:ec:92:17:80:c0:8d:cb:
3e:0d:0d:af:8a:20:ce:06:e3:54:04:b7:68:b0:1b:
5b:49:95:8f:c6:e5:75:13:91:bf:d6:c7:ea:4b:a3:
9b:a5:7c:99:f5:07:d3:d5:85:a4:3e:56:f3:99:fe:
9b:9f:21:65:4f:87:ec:6f:30:88:b1:0b:0b:ad:95:
fc:f7:ea:17:68:e8:3f:d3:e2:a8:35:36:27:b5:7e:
71:59:05:65:1a:27:7b:c2:c6:0b:8a:d5:64:89:7c:
0d:7d:95:77:04:7c:af:4b:96:54:0a:ca:14:b7:ac:
c2:74:d5:c9:16:c6:1d:6b:01:cd:7e:5c:70:69:24:
b6:ec:d3:bf:ec:13:90:46:eb:6b:56:eb:19:46:db:
f7:f8:b8:ee:28:6e:e3:5b:e2:c0:58:41:59:f2:0a:
f7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2C:2C:E4:C4:B8:59:54:FB:D2:C4:50:04:8C:41:9E:01:84:1D:B4
X509v3 Authority Key Identifier:
keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d8:12:c0:8f:b7:85:57:85:3d:9a:ac:a2:6e:b6:b6:74:33:
b3:a1:72:42:71:25:e1:6c:3e:6e:d8:bc:f3:ed:4f:21:91:fe:
36:85:50:de:77:7c:5c:60:d2:42:45:0f:cf:fb:b8:39:c6:6e:
b2:a5:f6:08:b6:e9:b9:c8:b6:bc:ad:ad:ab:a1:82:9a:81:d6:
61:10:40:e5:0c:38:40:ee:ac:e1:2c:24:3e:76:77:24:91:64:
b1:a1:93:5b:7c:35:c7:34:60:04:6b:be:3c:ff:39:30:37:7c:
ab:a9:6f:bb:0d:18:d8:73:8d:65:8c:a9:a7:a6:65:b9:69:47:
67:11:ab:b8:91:fe:0d:33:5b:34:37:b5:df:22:ab:5a:53:ed:
e7:e2:98:59:6c:5d:2b:01:ea:01:bd:b3:5f:77:2e:8b:2a:8e:
6d:63:ec:7a:f3:05:9b:23:57:46:42:04:93:a9:f2:aa:8c:9f:
56:eb:b9:8f:01:4d:ad:d6:b4:88:c6:90:f5:3a:5b:1d:b9:42:
27:c5:31:ac:81:c9:41:70:4a:5e:fe:38:31:38:66:77:98:4d:
c7:4d:b5:ab:cf:b0:57:4b:6f:54:a1:6d:84:05:1a:65:00:30:
22:0f:09:1a:53:c4:18:e3:10:14:82:a7:d0:e1:b7:3f:4d:a3:
ab:a7:a6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:34:29 2025 by rpki-client