Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
File: 9rA2a7rqx7WITkJt-ACewnosYC4.mft (raw, json)
Hash identifier: O5ceu2XyuPx3CJnA5NMNwHNsvbeFxFlObnvbce6ZTQA=
Subject key identifier: 81:90:CA:EF:BA:19:15:66:26:BC:92:FC:BA:AF:D2:43:C5:15:53:75
Authority key identifier: F6:B0:36:6B:BA:EA:C7:B5:88:4E:42:6D:F8:00:9E:C2:7A:2C:60:2E
Certificate issuer: /CN=f6b0366bbaeac7b5884e426df8009ec27a2c602e
Certificate serial: 0196BCA4E7DD75F17921A76F17DC0C6C0067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
Manifest number: 0429
Signing time: Sun 11 May 2025 00:00:45 +0000
Manifest this update: Sun 11 May 2025 00:00:45 +0000
Manifest next update: Mon 12 May 2025 00:00:45 +0000
Files and hashes: 1: 9rA2a7rqx7WITkJt-ACewnosYC4.crl (hash: w1ylCgvprrLDlvLSw2fs1Bw+4o/pMuyIsuq1iDfjzSA=)
2: izm1O4S-x2UDeNY6fo1YhqW7N8g.roa (hash: tl5IuNJmLiqZ3agDxn5CXFUtrHRHejemwivyEs6+MfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:e7:dd:75:f1:79:21:a7:6f:17:dc:0c:6c:00:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b0366bbaeac7b5884e426df8009ec27a2c602e
Validity
Not Before: May 11 00:00:45 2025 GMT
Not After : May 12 00:00:45 2025 GMT
Subject: CN=8190caefba19156626bc92fcbaafd243c5155375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:58:ed:63:69:b3:85:3a:24:aa:b8:95:fc:cb:
a8:e5:aa:c5:c8:c9:7f:3a:06:3d:43:ac:88:4c:a5:
03:72:07:90:45:3d:c1:fe:ac:b7:db:7b:f6:c1:4c:
a2:bb:d1:66:f6:7f:62:62:1c:73:94:a9:37:05:15:
a8:30:d6:3a:dd:ca:21:56:ce:cf:f0:01:f1:ec:2a:
b0:98:a8:d9:51:9a:01:8c:6b:4d:88:fb:16:3b:e6:
2e:c1:4e:46:d2:21:71:6d:56:47:59:05:c5:01:c2:
74:3b:ed:45:dd:cd:5a:eb:50:bc:ea:0f:1a:d4:3c:
46:19:31:0f:8c:5a:fc:5e:68:33:7b:05:d4:42:c7:
57:e6:ce:45:2e:91:0c:4a:6e:95:7a:ab:0d:75:b3:
a7:10:b9:21:0b:7c:98:a9:0e:eb:b3:96:23:08:94:
c0:fe:3c:06:63:80:69:df:f1:21:5a:99:9f:64:e0:
81:b9:df:f5:42:c4:27:a3:1e:78:20:38:57:ba:e4:
4c:32:e2:a0:6b:ac:41:d8:3e:d2:14:2b:b7:12:44:
53:28:d6:49:47:91:4d:35:df:c0:34:a4:2f:86:39:
c0:9c:0a:65:3f:ad:2c:e4:da:d8:c8:61:3c:c3:7a:
3f:57:91:e1:e7:f7:bf:67:7e:a9:df:45:d2:51:b4:
c8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:90:CA:EF:BA:19:15:66:26:BC:92:FC:BA:AF:D2:43:C5:15:53:75
X509v3 Authority Key Identifier:
keyid:F6:B0:36:6B:BA:EA:C7:B5:88:4E:42:6D:F8:00:9E:C2:7A:2C:60:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c3:fb:ec:d5:e6:8a:fa:43:98:41:b1:b9:04:e8:22:d2:d8:
12:42:c7:7d:b3:ae:e0:22:ab:94:1f:04:55:47:4a:09:94:77:
75:b9:f6:3c:8c:e0:74:86:39:6c:41:5a:67:63:eb:f7:56:91:
a4:39:70:ae:8e:aa:ce:45:5d:5a:cb:95:77:9f:d1:65:50:f6:
33:22:3f:38:7e:ea:53:87:86:66:7f:4b:74:b0:6f:3b:40:28:
89:37:1c:8e:0c:89:5c:a3:f1:84:92:8c:52:08:96:7a:22:45:
fd:2e:35:cb:2c:d0:9e:ca:44:35:f6:a0:4e:80:bc:e2:25:05:
0b:58:1b:bc:3d:04:d5:d6:29:f0:00:4a:87:4a:e7:fd:69:62:
0a:7b:19:d7:0e:61:44:31:5b:0c:21:a0:f5:ef:62:2f:9c:72:
26:ad:8b:91:3f:5c:6b:ed:ba:d6:3a:ac:8e:46:ad:e5:ef:5b:
50:5a:e0:aa:de:77:ad:c0:b0:40:65:a0:be:77:fa:0a:30:83:
da:26:69:f5:1f:b6:4d:01:12:e4:e8:c5:80:78:00:ab:ac:ec:
68:12:d4:ef:48:8d:25:32:f1:6b:75:31:d4:29:fd:87:64:be:
5b:3d:53:4d:2f:9b:00:5e:cf:b8:4a:09:db:9f:b4:29:a1:4d:
50:13:2f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:35:24 2025 by rpki-client