Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
File: 9rLInTH2F1Fqhgp4IrumgkinaaA.mft (raw, json)
Hash identifier: Tv/KBSzFZIUC7PLimdsbGIpJEQsHKWoKzv74+5aat94=
Subject key identifier: D5:BE:5F:20:47:33:5B:E8:34:39:44:81:31:2F:1A:EA:7A:D4:DE:51
Authority key identifier: F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
Certificate issuer: /CN=f6b2c89d31f617516a860a7822bba68248a769a0
Certificate serial: 0196BD814672ACDDDDD9B55B71D6D44C0A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
Manifest number: 0722
Signing time: Sun 11 May 2025 04:01:27 +0000
Manifest this update: Sun 11 May 2025 04:01:27 +0000
Manifest next update: Mon 12 May 2025 04:01:27 +0000
Files and hashes: 1: 0iYjHA4kyW6qTATWGW_TDJUOsEk.roa (hash: EaJ38giyluinl93rwFdYFKbOjiJmuj1tUHU09V9bmYM=)
2: 9rLInTH2F1Fqhgp4IrumgkinaaA.crl (hash: DH2G72n7nUUODDwbOWdzTYJ+zeznTK/pXcxnqHquwAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:81:46:72:ac:dd:dd:d9:b5:5b:71:d6:d4:4c:0a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b2c89d31f617516a860a7822bba68248a769a0
Validity
Not Before: May 11 04:01:27 2025 GMT
Not After : May 12 04:01:27 2025 GMT
Subject: CN=d5be5f2047335be834394481312f1aea7ad4de51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e0:08:a8:e6:09:7d:69:50:ac:f7:98:f0:33:
dc:83:c6:e3:6f:da:d5:ad:6d:7b:02:57:f8:46:30:
45:09:21:a2:86:1d:e0:35:9f:bd:5b:1c:fa:7a:3b:
63:de:d8:9c:96:4c:37:83:c1:c3:5f:17:aa:81:09:
2f:e9:6d:c8:81:e8:d0:f5:0a:3b:c9:b7:00:74:39:
6b:80:ce:ea:1e:0b:1a:59:0c:d5:1d:f0:bd:66:be:
db:b1:af:92:66:8c:03:0a:a7:11:3f:13:dc:ee:dc:
97:0f:9d:91:cd:fe:db:d3:33:65:21:62:e0:7e:e5:
65:6e:61:7d:e4:e2:a8:b4:ac:44:a7:09:bf:37:aa:
08:0c:00:f1:88:6a:4a:58:ef:4d:82:2a:ad:f8:28:
dc:ea:80:a0:a5:6d:e1:e7:b7:85:75:29:50:8b:c1:
6e:52:ed:82:b8:0a:ba:42:6b:da:80:fb:e3:16:10:
22:fb:eb:94:2c:cb:91:26:33:e8:3e:6a:94:f6:f5:
8d:c1:a3:ec:06:ff:64:0a:81:4d:f1:fb:11:69:bc:
75:d3:ff:2b:4d:4e:c9:bb:fc:7e:e5:b0:ef:ec:2e:
a2:ac:39:d7:26:e2:3d:fb:43:aa:f1:db:03:83:3b:
8a:64:00:d8:89:7c:ce:f1:5b:39:97:2d:c2:90:19:
3b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BE:5F:20:47:33:5B:E8:34:39:44:81:31:2F:1A:EA:7A:D4:DE:51
X509v3 Authority Key Identifier:
keyid:F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:66:57:36:10:a3:20:44:85:0d:d1:d8:21:d1:7a:ce:ed:70:
c2:94:54:ab:f7:f6:d9:1b:b4:90:61:60:54:8a:23:51:b6:1b:
dc:f5:ad:95:59:88:f6:fa:1d:63:af:9e:c3:d7:3e:c3:63:0f:
68:98:ce:7d:d8:96:42:e6:00:2e:e4:b5:ee:33:dd:dc:06:4e:
19:77:89:70:4b:be:58:c7:61:95:99:36:2e:85:1b:84:74:d8:
bd:a4:82:9c:ce:63:da:8b:00:dd:5f:b5:01:c6:ba:2c:c0:64:
8f:97:90:6d:c2:a5:d2:61:e8:e2:ac:be:06:b3:7a:a0:40:34:
38:a6:18:f3:c2:d1:a8:f9:b8:98:7f:02:24:cf:53:2a:fa:63:
85:84:b6:96:1f:05:a4:fa:1f:b0:6b:d2:f5:f9:18:0a:68:57:
bd:64:50:1f:d7:58:1c:61:d0:8e:be:18:57:c3:b4:57:bb:1d:
20:f5:10:87:b2:af:3b:80:e8:b8:3c:bc:79:6c:b2:79:bc:f5:
b6:38:dc:07:e4:ac:6c:59:54:09:59:c9:b4:ff:7b:4f:b6:9a:
a6:84:a2:ef:24:34:7b:50:e5:5a:f3:3c:8e:b9:53:38:46:f6:
cb:cb:8c:bb:ef:db:6b:97:e5:71:a2:67:82:68:8a:a1:75:6b:
6e:4f:a4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:48:52 2025 by rpki-client