Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
File: 9IFCCQRj_g9JoTDRUYZql3F9RCo.mft (raw, json)
Hash identifier: wCVv57ig9KT8l+HXVbqEl0eOmIWt2yoiwbf2SSvA1aE=
Subject key identifier: 3A:BB:1A:4A:4E:61:89:2B:12:18:5A:6F:6F:BB:85:96:0A:D4:2A:8E
Authority key identifier: F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A
Certificate issuer: /CN=f48142090463fe0f49a130d151866a97717d442a
Certificate serial: 0196BFA586DDD6332FC965E8B6AD42883632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
Manifest number: 0284
Signing time: Sun 11 May 2025 14:00:17 +0000
Manifest this update: Sun 11 May 2025 14:00:17 +0000
Manifest next update: Mon 12 May 2025 14:00:17 +0000
Files and hashes: 1: 9IFCCQRj_g9JoTDRUYZql3F9RCo.crl (hash: 4wouVt92CST+peMDnZFufNXRblNrlBKC4kksFx6qXxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:86:dd:d6:33:2f:c9:65:e8:b6:ad:42:88:36:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48142090463fe0f49a130d151866a97717d442a
Validity
Not Before: May 11 14:00:17 2025 GMT
Not After : May 12 14:00:17 2025 GMT
Subject: CN=3abb1a4a4e61892b12185a6f6fbb85960ad42a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:4d:73:23:93:f2:02:44:9b:af:87:9d:52:
45:62:3d:ca:f2:9a:1e:58:ce:b3:e0:09:9c:6d:69:
57:88:c7:49:51:f7:12:b9:ee:f7:69:1d:98:ad:de:
b9:21:c4:00:da:e4:4c:c2:d3:61:12:35:dd:08:d3:
47:4b:a1:fc:8c:84:20:5c:57:26:fe:98:58:ee:ed:
9d:36:5a:c9:c0:9f:e8:81:67:7b:24:61:81:b5:c3:
35:e7:40:47:d7:b0:38:a1:91:13:a1:bf:61:24:9c:
dc:7d:33:98:da:cc:a9:46:0b:3e:b2:af:55:30:8d:
05:a2:f7:30:43:5a:a1:00:94:fa:78:9c:f2:0f:d8:
d6:f5:9c:5a:4e:6c:80:e2:10:48:c4:90:97:0c:5c:
86:eb:5a:83:2e:21:7b:32:a6:74:b4:ef:41:1c:92:
02:73:2c:a1:fc:5a:f5:35:65:b1:89:f1:6e:b5:43:
de:3d:8a:15:ac:32:3a:0b:7c:9d:ee:b7:55:08:f9:
c2:fe:21:b9:4f:c8:06:35:08:6d:45:5a:50:1b:e2:
1d:99:34:e2:47:ef:26:1f:dc:e1:c7:73:71:2c:8e:
54:f9:eb:3f:f3:c6:4d:33:aa:84:ba:08:74:41:63:
75:84:c9:3b:78:ee:4c:13:14:0f:2a:e9:a9:f8:c6:
fc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BB:1A:4A:4E:61:89:2B:12:18:5A:6F:6F:BB:85:96:0A:D4:2A:8E
X509v3 Authority Key Identifier:
keyid:F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a7:3a:9b:95:2b:85:ae:84:1e:32:37:2a:20:b9:09:09:5f:
99:d6:da:36:f1:5a:9f:a0:de:18:cc:4b:d7:6e:d3:6c:a9:0e:
46:e3:e8:8d:b7:cd:b6:ac:1c:86:5d:8f:9c:98:e8:5b:69:af:
98:63:5c:aa:8f:ed:60:55:d7:45:69:8e:57:a6:31:56:57:91:
1b:b8:a2:71:9b:be:eb:fa:fc:1b:32:1e:ff:bc:c1:0a:db:f1:
cb:e4:49:04:eb:15:27:fb:e2:03:f2:cc:b3:d9:c3:50:ca:66:
5a:b9:16:4d:eb:72:ce:6d:c5:59:ba:9e:d5:dc:5d:82:84:fa:
26:74:d2:ad:e0:5f:7c:ae:6d:36:0c:61:ca:ac:92:3b:c3:d8:
c6:8c:cf:e5:fc:86:f9:49:61:2d:43:09:9f:9d:3a:26:a9:55:
ef:98:03:65:5d:1a:08:dc:04:69:57:8d:0b:71:09:4b:b8:98:
84:4d:eb:e7:26:5b:8c:f3:84:47:41:2e:d0:23:5d:6c:c0:8b:
21:44:ff:c0:a3:c6:b8:fb:89:fa:8a:40:0b:6c:cf:3e:69:a6:
55:98:34:b1:80:c2:41:20:63:81:d1:5f:61:22:41:47:63:5f:
db:99:93:71:53:a7:86:bb:e9:d2:a6:f5:73:33:d8:15:c2:e9:
13:ad:5d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:18:30 2025 by rpki-client