Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: 6fHk1G01Ust2tFQnSVACBUZzzyPVR+U3VZj75wL6J7M=
Subject key identifier: 38:73:74:82:41:61:1C:4F:ED:5C:BD:1C:91:3B:72:2A:3A:02:3E:AC
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 01969ED0F9243FBA62224140ED1D1DEED643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 05:00:17 +0000
Manifest this update: Mon 05 May 2025 05:00:17 +0000
Manifest next update: Tue 06 May 2025 05:00:17 +0000
Files and hashes: 1: 1-q7Os-ag3LFo7MgF8ZfJghgVfgc.roa (hash: AkqR6A52qHHQpKh+paJEwg0UF7zLNR6BUjxPJEPXBuc=)
2: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: 6AY3DkMgNsA9DUMvBEkSaaZCPp3MXr7Cqt7Iog0Ccv0=)
3: X2IXuMlNGoAcrvL_ko43_QrEupI.roa (hash: tb+ePbzsjMAZQXem+oOzrudhMucziUuIqtpyErKmVRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d0:f9:24:3f:ba:62:22:41:40:ed:1d:1d:ee:d6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: May 5 05:00:17 2025 GMT
Not After : May 6 05:00:17 2025 GMT
Subject: CN=3873748241611c4fed5cbd1c913b722a3a023eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:17:e5:be:37:e1:44:15:88:55:48:92:de:
28:bc:20:86:f4:5c:48:3e:57:7f:dc:54:15:83:25:
27:82:df:87:11:ce:70:1b:a6:df:a3:1d:57:b7:a5:
48:3c:e6:3c:c8:90:33:1f:37:b5:79:ae:11:df:fb:
6d:6f:38:20:4d:9d:ae:94:0d:09:ec:a5:70:3f:e9:
ee:ce:2a:47:2b:15:9e:84:11:57:6e:66:7c:0e:34:
ba:f0:71:8c:20:09:20:25:19:42:c4:11:ee:78:86:
15:f3:3e:f4:3b:77:8a:b2:40:d2:23:71:1a:45:00:
7b:18:c6:56:50:31:d1:5a:34:94:93:7b:27:cf:30:
94:d1:69:92:5e:3b:71:96:a0:80:9b:87:2b:88:85:
50:33:58:54:54:0b:5b:4e:c7:de:fd:b1:90:65:9b:
dc:29:5f:84:b4:a6:16:2a:18:df:0c:b2:30:12:8d:
b0:08:43:60:13:ef:79:b3:39:01:a4:25:df:bd:fe:
35:f7:fe:15:63:f1:fd:2b:fd:30:e0:73:5d:c9:23:
7c:37:32:73:ec:07:9e:56:4e:da:75:9a:3c:54:84:
4b:ab:68:9a:40:d5:ca:f1:66:4b:18:5b:e8:94:44:
2e:1a:f5:84:79:52:96:4c:d5:5a:40:05:91:9d:91:
19:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:73:74:82:41:61:1C:4F:ED:5C:BD:1C:91:3B:72:2A:3A:02:3E:AC
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fb:61:b6:64:14:ee:54:13:dc:9a:d4:ab:31:f5:0b:4d:7c:
5c:15:f4:fc:5c:5c:e8:14:54:62:49:ba:fa:82:34:ec:66:0e:
82:1e:39:43:09:7e:d3:5d:3c:52:d8:74:82:4f:51:8b:56:45:
bb:67:b9:a3:af:dc:1f:2c:c3:1c:8c:06:1c:dc:c5:b9:f7:9c:
c3:f9:bd:69:60:c7:34:f4:a6:3e:88:54:e3:83:5e:08:81:da:
6e:d9:da:ba:f3:31:75:b2:9d:9d:51:2a:9f:18:f7:fc:5c:ff:
9a:28:cb:98:0d:a1:08:50:ac:c2:f7:f9:2c:3a:d3:b0:c7:f9:
bc:0b:70:06:52:4e:85:17:2e:33:72:0c:a0:a4:5b:70:8e:f8:
b7:9d:d7:ea:88:a8:83:b3:25:83:5d:53:a3:de:a5:02:2d:1a:
81:12:21:b2:07:6d:d6:a8:a1:62:19:7c:b4:39:66:24:21:0a:
5e:0f:59:44:6b:99:a9:3b:ae:14:09:0e:02:32:e3:04:b3:ed:
c8:c7:18:24:ec:c0:0f:4a:42:23:37:68:94:4e:da:5f:f3:bd:
3b:fb:d1:06:86:b6:a1:f9:00:61:88:dc:51:5b:c8:c5:28:47:
45:7a:ee:23:5c:67:21:1f:87:c6:08:99:6b:0a:4b:4b:86:99:
b2:d7:0a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:01:34 2025 by rpki-client