Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
File: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft (raw, json)
Hash identifier: Kzh7IhmZeRnreMRc131DvtZtsQ6DyMWdFsGsb5owKd8=
Subject key identifier: 9B:99:DF:A0:77:B1:7B:70:B0:2E:16:00:16:7E:25:01:FC:9F:69:61
Authority key identifier: 6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
Certificate issuer: /CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Certificate serial: 0196B1EAD89B44E01F5D4EE08C9B732F34A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
Manifest number: 0664
Signing time: Thu 08 May 2025 22:01:20 +0000
Manifest this update: Thu 08 May 2025 22:01:20 +0000
Manifest next update: Fri 09 May 2025 22:01:20 +0000
Files and hashes: 1: NaKshVhSKaYmb3Sdi3LLJdyjmds.roa (hash: d86txPLHJOy87A3pf1/eOV7404HvHGLlpkkFt/51J1U=)
2: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl (hash: vxv1QSeJOC5IxWf5MW48fQTmqcKQ5gBprgE4hNVQePw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:ea:d8:9b:44:e0:1f:5d:4e:e0:8c:9b:73:2f:34:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Validity
Not Before: May 8 22:01:20 2025 GMT
Not After : May 9 22:01:20 2025 GMT
Subject: CN=9b99dfa077b17b70b02e1600167e2501fc9f6961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:43:ee:d9:5c:20:1e:91:a3:38:7a:88:d8:56:
44:e3:e3:b7:3c:d1:01:b2:80:de:96:c0:df:27:f7:
77:c5:3f:e4:aa:da:bb:eb:93:94:76:88:7d:e0:63:
1d:ce:7b:ff:8a:cc:f6:1c:7b:85:c0:2c:58:e7:ae:
a1:9d:d6:20:51:a2:74:12:47:52:98:80:49:e5:a5:
0e:e4:1f:26:13:09:d9:f1:45:f4:ea:c1:8e:77:2b:
4f:6f:30:e5:63:86:2a:21:59:89:1c:a7:9d:09:90:
54:4b:59:8b:15:b8:65:73:56:62:6e:fb:06:8a:91:
eb:4e:c4:90:a2:15:89:2d:47:a6:a5:c2:96:4a:ff:
9a:d8:78:62:58:b0:68:45:13:5c:d1:0d:f3:67:5c:
17:51:5e:63:59:10:69:f1:30:a5:91:37:7d:82:3b:
01:06:c6:2d:a3:27:f7:0e:5b:80:c7:9e:2e:4b:ed:
b7:d3:d1:38:30:a1:28:20:17:49:85:01:c5:8d:2e:
b0:44:3f:4b:c6:79:34:2c:a3:62:be:5d:08:7f:88:
55:f2:21:df:e6:40:cd:75:9b:85:69:e9:4b:48:93:
13:ec:47:6b:d3:5d:56:d7:7b:37:3a:d7:24:89:45:
ca:96:7d:b8:06:60:eb:66:a9:d3:8c:64:b5:e4:f9:
f0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:99:DF:A0:77:B1:7B:70:B0:2E:16:00:16:7E:25:01:FC:9F:69:61
X509v3 Authority Key Identifier:
keyid:6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e1:a0:08:24:58:00:b8:e0:22:36:d8:3a:0d:77:68:ab:77:
85:7a:fc:ca:f4:66:3d:68:d5:42:1e:50:0b:5d:6c:61:9f:68:
e4:15:72:47:6d:5e:52:19:52:a8:3c:c0:6e:0f:5e:11:04:03:
cd:85:18:70:86:bf:c0:70:a6:b8:84:bf:56:0a:bb:7e:23:9a:
e5:2b:04:b0:5b:20:80:be:47:ca:c2:04:e1:ec:aa:c3:35:38:
f8:ef:0e:d6:e0:4c:92:be:d7:2a:0b:8a:fd:bf:ac:7a:c6:ca:
f8:46:60:38:0e:ef:26:03:2e:49:a5:46:05:f7:4c:84:2d:5f:
bf:3d:21:e6:4a:b7:ad:ee:d1:ed:a6:d2:77:58:10:8e:7b:4a:
2c:f4:f2:50:12:f1:5b:15:7b:cd:c1:97:c6:f6:95:3f:31:85:
0a:2d:58:af:c9:fc:6c:ce:47:32:32:e9:6f:23:b4:a8:92:e8:
9f:0b:9c:3d:41:1e:0c:86:cd:4d:55:df:87:24:09:11:f3:87:
ae:84:7d:ca:4e:96:70:7b:9c:14:ef:b0:2a:a2:b9:95:1c:24:
03:0c:20:29:fd:92:42:86:63:72:43:b1:06:43:8f:7b:06:f6:
f3:d2:15:d3:55:8b:88:d0:1d:4b:f9:43:25:61:f9:32:5c:76:
ce:2e:17:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:45:55 2025 by rpki-client