Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
File: 9-CSr_r5tUhOAJmap_HO8ax7QJM.mft (raw, json)
Hash identifier: l2ItV60MAeICIl6Slu3HHTNhmz9CxaiKAk1h2g7kO4w=
Subject key identifier: A4:44:CD:AB:94:3F:3A:7D:D9:67:7E:5B:75:54:DF:EB:F3:4C:A0:49
Authority key identifier: F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
Certificate issuer: /CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Certificate serial: 0196A49C078E64F83945387F01F7DD2DFCC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
Manifest number: 1528
Signing time: Tue 06 May 2025 08:00:11 +0000
Manifest this update: Tue 06 May 2025 08:00:11 +0000
Manifest next update: Wed 07 May 2025 08:00:11 +0000
Files and hashes: 1: 9-CSr_r5tUhOAJmap_HO8ax7QJM.crl (hash: 0+Bd3sKRXZsFbyOHe2xg4EazgOkZpauBABOfD96vNAw=)
2: heOGsEgwvnx0rV_PQ-KerQ9C-CY.roa (hash: sP+8nNNKaPD0x4Bknlm6WIvlRad2W4u8N2Xxii0xN0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:9c:07:8e:64:f8:39:45:38:7f:01:f7:dd:2d:fc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Validity
Not Before: May 6 08:00:11 2025 GMT
Not After : May 7 08:00:11 2025 GMT
Subject: CN=a444cdab943f3a7dd9677e5b7554dfebf34ca049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:37:13:34:20:47:3b:0d:26:2a:6b:58:28:
84:5e:3b:49:b7:d5:1b:5d:31:92:19:7f:9d:30:b2:
e5:ed:8b:f2:56:48:2e:82:ff:34:aa:8c:15:98:a7:
26:e9:42:2d:de:88:13:e3:78:ca:b5:1e:32:b8:f4:
22:05:02:80:1e:16:41:a7:6c:0b:64:e5:3f:9b:b5:
16:4c:e3:27:20:5c:64:5b:4f:f2:73:eb:41:28:a6:
fe:6a:54:ab:e8:88:3e:27:17:e0:36:67:b3:de:02:
c5:4e:af:a9:cb:7b:e7:02:ca:83:3b:a5:ae:13:18:
b9:e5:a0:ba:9e:15:f6:55:54:cd:a3:75:98:44:db:
9e:e9:3f:b0:2b:2a:9b:fc:c7:66:05:b2:6e:32:c3:
4a:a7:fc:79:09:b5:f5:6f:b8:9b:cb:5e:cc:78:b0:
62:52:be:23:26:f8:19:84:d2:e7:f5:59:91:ac:83:
a9:77:bd:e9:75:69:67:8d:6a:a0:6e:81:c5:96:a2:
e4:d0:9d:25:a2:b9:df:63:69:e3:7d:97:24:19:e6:
f4:43:8d:83:29:54:6f:fa:ec:86:82:df:a9:ed:0e:
70:b9:63:aa:8b:fd:86:fd:1c:5f:41:ca:0c:82:0f:
7a:fe:81:56:d6:6a:2f:2b:b6:e3:e1:f0:80:99:ba:
ec:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:44:CD:AB:94:3F:3A:7D:D9:67:7E:5B:75:54:DF:EB:F3:4C:A0:49
X509v3 Authority Key Identifier:
keyid:F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:01:e2:c9:36:6a:c5:90:c1:1a:8b:23:0d:cf:43:02:08:a3:
6c:42:ea:a0:00:ec:97:f7:ab:22:3e:d0:f2:f2:b4:e7:a2:f7:
b5:5c:a9:fc:33:eb:99:9b:bf:4f:99:61:ab:98:64:93:f3:13:
db:1c:55:06:11:47:b3:b8:8a:d9:1d:37:d4:36:d7:fc:dd:00:
ca:99:f1:ae:9b:71:ca:d0:57:46:15:93:ac:6a:b3:80:e9:16:
12:a5:05:c4:98:90:51:4a:19:43:45:ec:fe:e8:97:e4:86:93:
49:a2:b3:3b:8d:04:ae:3a:e4:03:a8:bd:f6:9e:38:41:4d:da:
77:2e:f9:a0:e5:d8:78:08:80:19:ef:66:40:a0:db:63:b2:34:
7a:56:fd:e9:4f:24:69:ad:33:24:d3:56:d9:14:cd:52:08:07:
e4:0f:bb:db:49:85:53:df:a9:ba:67:b3:15:4b:97:ef:ba:23:
79:84:49:53:9d:fe:3d:56:47:79:e3:bc:cb:57:b9:f5:03:93:
c6:59:29:07:2e:5e:bd:e4:ec:2f:a7:fd:57:7b:1e:e6:f8:37:
e5:d0:45:dd:95:be:09:1d:e2:17:dd:e4:54:4a:aa:5c:55:8b:
17:65:b8:16:11:12:fd:9c:c9:cc:0b:2b:8d:b5:c8:c0:af:e8:
16:b1:47:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:22:21 2025 by rpki-client