Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
File: 9f3nK_WgC97E0e_dfQICnueeRyA.mft (raw, json)
Hash identifier: ReX/jOFQdlZtdJkJldrcMy4IdeIaT6Ph4oGCbnXijmI=
Subject key identifier: 39:02:00:CB:D3:32:D9:84:7A:52:51:08:03:AE:A8:15:FA:C3:C5:0E
Authority key identifier: F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
Certificate issuer: /CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Certificate serial: 0196C72843FDE17E4A8F10FF064EFEE2D131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
Manifest number: 0903
Signing time: Tue 13 May 2025 01:00:26 +0000
Manifest this update: Tue 13 May 2025 01:00:26 +0000
Manifest next update: Wed 14 May 2025 01:00:26 +0000
Files and hashes: 1: 9f3nK_WgC97E0e_dfQICnueeRyA.crl (hash: LwY7W0RBtJDU02bAUG1/2+DQBSYYUU86sV56MwAqBmE=)
2: VwdOphY_UgRaqYf3Kg3b6kzwRf0.roa (hash: RncMvUV6R6LkD/qjU1iWGPE4PHApbhUX2ZP/1640Hn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:28:43:fd:e1:7e:4a:8f:10:ff:06:4e:fe:e2:d1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Validity
Not Before: May 13 01:00:26 2025 GMT
Not After : May 14 01:00:26 2025 GMT
Subject: CN=390200cbd332d9847a52510803aea815fac3c50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:8c:07:3d:c0:69:ba:73:fd:92:5d:4c:7b:
c2:1b:d5:f7:3b:f2:b6:4c:fc:4b:1b:36:d2:34:74:
f4:4c:8d:63:b3:7c:4d:51:b0:b0:81:19:be:32:23:
46:7a:b2:08:e7:d9:3d:4c:5b:f3:5b:b5:c4:38:5d:
3a:27:f8:a3:16:d4:de:8f:c6:6b:79:bb:82:ce:68:
4c:93:79:f7:82:82:95:5a:c4:7e:80:d8:af:91:3b:
74:8e:89:11:01:2d:e8:35:79:27:69:82:53:85:80:
71:d3:46:9e:df:d0:85:4d:70:8b:92:a9:ca:4b:7e:
22:22:8a:9c:d4:68:af:f0:8f:c2:49:bb:89:06:07:
5d:93:f5:c2:40:03:a9:bd:e4:c0:b1:b2:15:27:c8:
fd:c1:19:38:3d:16:53:78:4f:b8:81:92:c3:b6:b7:
13:ed:5a:b8:21:aa:60:f1:47:59:0e:cf:24:28:f9:
14:e5:75:7b:b0:7a:9c:09:90:68:3a:d2:2e:2e:30:
22:ce:a3:af:ca:4a:08:88:c6:43:92:04:35:dd:bf:
62:4c:31:95:d3:85:8b:19:ce:dd:34:24:2c:28:71:
00:16:05:7c:16:a9:85:44:53:23:41:e5:03:5c:59:
71:49:2d:d6:01:fa:d3:4d:30:fa:ac:af:30:b4:12:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:02:00:CB:D3:32:D9:84:7A:52:51:08:03:AE:A8:15:FA:C3:C5:0E
X509v3 Authority Key Identifier:
keyid:F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:08:3c:e3:60:35:f5:4a:e0:8e:ce:40:86:6e:c1:8a:ba:15:
22:7a:77:2f:0f:62:1b:23:a7:64:a1:4e:a9:74:34:e1:e7:63:
b2:71:f3:0a:2c:a2:aa:0b:97:d6:4a:e3:90:51:06:5e:3a:b7:
27:15:a5:6b:77:68:01:30:a2:54:1f:a6:6d:5a:17:32:95:aa:
a8:d1:a5:97:b8:05:3e:ad:49:03:60:26:8c:8a:8d:27:78:58:
fc:de:a8:0a:8c:8d:2d:77:f8:b3:aa:e2:62:ca:ee:4f:cd:40:
a6:0c:7a:47:b5:4b:68:e5:0c:ac:c3:37:5c:0d:2a:2c:68:58:
42:f0:92:85:62:be:11:d8:7d:9b:1b:b3:e5:1d:f2:92:97:7f:
1d:9c:a4:cc:2c:97:fa:74:38:01:ac:c3:be:0e:b0:6d:a3:3f:
2a:60:0f:47:eb:89:8c:2a:23:b1:90:86:7a:f0:44:0f:c8:c6:
8a:b5:b5:8d:ec:b1:25:c0:59:b9:9b:89:e6:07:64:65:61:3b:
c4:a1:e6:ec:90:e5:93:70:8d:2d:59:83:6f:2c:e2:46:de:a1:
01:59:10:8e:5f:2e:af:ae:71:b7:f3:2c:2d:5e:1b:b1:aa:45:
51:33:87:d2:42:2c:c6:f6:6f:42:96:c9:7d:fd:c1:69:aa:94:
1b:36:5a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:36:13 2025 by rpki-client