Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
File: 9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json)
Hash identifier: v+os2QKAw2A2QAlQtdXsLu+BH6ryBe/+J8M1w/LNDIY=
Subject key identifier: 75:9F:8F:9F:9C:7F:28:BB:18:A1:17:87:59:9D:9A:F6:39:23:B1:F3
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial: 0196C8DFE4F32A05C9EB284C76EE38617516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
Manifest number: 0C55
Signing time: Tue 13 May 2025 09:00:38 +0000
Manifest this update: Tue 13 May 2025 09:00:38 +0000
Manifest next update: Wed 14 May 2025 09:00:38 +0000
Files and hashes: 1: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: QCK3lcNiFUCyhochWSX70LOB0RgxuJUFZpvZvEgfo9U=)
2: khAk69GaviX3ISVPskdgmXYxHg0.roa (hash: iZg+JNU8yAUj+GbVfYYrGDVbFREqgvj716gjoOSNlMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:df:e4:f3:2a:05:c9:eb:28:4c:76:ee:38:61:75:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Validity
Not Before: May 13 09:00:38 2025 GMT
Not After : May 14 09:00:38 2025 GMT
Subject: CN=759f8f9f9c7f28bb18a11787599d9af63923b1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:25:fc:12:51:d0:4a:a4:78:38:13:ea:d9:a4:
92:29:52:de:51:70:45:07:7c:a4:ed:58:8c:73:5b:
7d:30:2d:d6:77:50:ad:dd:b7:00:5d:a6:b2:45:45:
2c:25:61:d9:b2:cb:ae:04:cf:d5:ef:50:b9:16:1a:
55:1d:65:af:c1:15:7f:91:63:06:ae:a0:21:3a:f4:
b8:4e:37:d0:74:44:85:34:67:80:73:ed:1c:11:62:
ea:dd:53:8f:b8:08:c7:ec:00:e4:e5:9b:38:f2:18:
98:95:84:30:bb:ef:d1:85:8d:fe:e7:ef:a4:7b:6b:
b4:16:ed:39:91:2e:98:da:05:dc:9f:f4:7f:a8:d2:
7f:13:a4:f0:1e:e7:77:c8:a0:30:48:d6:a3:51:6e:
b5:21:f4:48:67:b3:29:85:01:2b:fc:94:47:10:25:
2e:a0:90:de:23:7f:3f:2d:2d:06:3c:1e:7b:14:68:
f8:e4:94:5d:2e:62:b4:22:32:e1:e8:d9:c2:13:74:
57:4a:06:5b:6b:8c:0b:02:b3:12:af:9c:de:73:27:
e7:1d:46:ac:92:8a:e9:b9:70:bd:ac:4a:28:57:9f:
26:0d:62:6f:6b:c4:a8:7e:4c:24:07:ca:06:60:11:
e5:21:01:7c:c1:d8:ab:cc:ed:ab:6a:3b:f3:69:43:
6d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9F:8F:9F:9C:7F:28:BB:18:A1:17:87:59:9D:9A:F6:39:23:B1:F3
X509v3 Authority Key Identifier:
keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:bf:10:cb:0d:ec:b9:f3:11:b7:36:f1:b0:77:5f:2e:89:1d:
0d:1f:88:47:42:33:a9:e7:9d:8b:61:ec:58:71:f3:79:6c:1c:
1d:15:e7:9a:c7:be:b4:71:64:0e:08:0f:1d:58:2d:45:2e:aa:
0c:ef:13:92:d1:b1:18:7e:71:1a:ec:1a:a7:e9:17:07:3c:09:
6e:c4:f7:ad:b0:fa:6a:b9:d2:f2:11:25:4e:31:5c:dd:d2:a8:
a7:c6:f8:12:73:30:09:7c:78:a4:d5:61:24:b5:6c:8f:e2:85:
59:8a:47:06:c7:7f:b1:af:dc:d3:b7:71:15:79:fc:ab:1d:a1:
07:58:f1:6e:11:68:31:cc:cc:30:67:e2:5f:5e:dd:80:5c:c4:
56:f9:1e:47:dd:27:ec:e8:6d:78:61:ee:7b:8b:d3:b0:90:c6:
d8:59:ed:73:fa:1a:1c:f3:a7:25:27:4f:a0:47:4f:46:01:44:
30:fa:83:57:0a:ee:c5:0c:3d:80:99:d4:a3:7c:0b:f7:72:eb:
c8:ea:f8:f5:73:34:4b:bc:db:2e:71:d2:8b:2f:2f:4c:ed:8e:
b7:c7:85:7f:4d:77:da:50:98:42:c1:6b:fb:8e:e8:6a:ec:e4:
64:0c:92:50:59:da:2c:11:c9:6c:4f:17:be:8a:04:a4:8e:2d:
8a:e4:03:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:34:46 2025 by rpki-client