Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
File: 9wC7WRwCd4gZrqH1uPZEFns9fC4.mft (raw, json)
Hash identifier: a5f2RsOxmdZ5q6QbaPch+vxumyyZEPcMuDKEweJWajU=
Subject key identifier: 2A:AC:CD:87:C6:77:2D:B4:A4:37:89:9C:63:86:A6:EA:53:9B:4D:65
Authority key identifier: F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E
Certificate issuer: /CN=f700bb591c02778819aea1f5b8f644167b3d7c2e
Certificate serial: 0196DB1D1D01D856F9D4B9817902464B8615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
Manifest number: 0E43
Signing time: Fri 16 May 2025 22:00:40 +0000
Manifest this update: Fri 16 May 2025 22:00:40 +0000
Manifest next update: Sat 17 May 2025 22:00:40 +0000
Files and hashes: 1: 9wC7WRwCd4gZrqH1uPZEFns9fC4.crl (hash: 1nOVF4SsO7Q77N2Oq4KmscRtBF55DVdILcHpFiWwenY=)
2: K4Gb3AwaGq3gzkyO-1MyxTIk3gg.roa (hash: DCLfidqg0r72HrTsNGYvW13eljCKxYuCqdsXQsy2ahc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:db:1d:1d:01:d8:56:f9:d4:b9:81:79:02:46:4b:86:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f700bb591c02778819aea1f5b8f644167b3d7c2e
Validity
Not Before: May 16 22:00:40 2025 GMT
Not After : May 17 22:00:40 2025 GMT
Subject: CN=2aaccd87c6772db4a437899c6386a6ea539b4d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bd:3b:f9:75:9c:97:7b:8f:cc:bf:26:e0:9a:
91:8e:63:27:ca:90:66:5e:98:c1:2d:ad:a1:4e:bd:
2c:73:4f:f1:73:aa:f8:d8:10:36:d7:1c:51:5a:05:
76:1a:a8:48:bd:3d:24:ad:2d:98:4f:60:f4:9f:fd:
f8:ca:6d:9b:ec:1d:dc:82:e1:32:18:89:4f:5c:b6:
5b:bc:14:b8:26:dd:bb:a3:72:d1:31:ac:d7:a2:4a:
e0:42:89:78:e8:30:30:a3:b2:81:ce:99:54:9f:eb:
13:cc:b0:6a:cb:98:d4:88:50:66:ea:fc:39:6c:b3:
4c:a4:8e:c7:81:39:c8:de:a0:5c:c3:39:98:1e:e1:
09:9e:7b:b6:f6:4d:27:30:2f:ec:57:16:4e:38:36:
3b:a1:4c:d7:ca:14:f6:21:92:4b:7c:22:95:c1:ce:
74:70:33:45:9c:27:6b:dc:a6:3a:94:14:04:10:4a:
23:3f:08:b9:80:93:45:7d:ef:e2:57:3e:bf:e1:03:
c8:8c:98:00:10:53:69:eb:c9:90:a4:aa:93:0f:28:
26:24:ec:cf:24:aa:2f:86:54:c7:2e:29:11:35:7e:
5c:c3:17:db:4a:2b:c2:21:d2:bf:4d:1a:fa:9e:e1:
1a:ab:3d:9c:26:37:3e:05:c9:17:a8:53:a9:86:79:
74:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AC:CD:87:C6:77:2D:B4:A4:37:89:9C:63:86:A6:EA:53:9B:4D:65
X509v3 Authority Key Identifier:
keyid:F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1d:35:5b:59:5e:70:ed:e9:44:65:d6:0a:21:4e:27:07:11:
6c:8b:7b:ac:cb:8c:84:ed:1f:66:58:be:27:c3:94:ea:8e:74:
85:8e:98:81:1a:1f:99:47:a1:48:26:71:60:9e:56:d3:7a:ff:
e4:9d:0f:13:37:a8:cc:79:5e:00:4a:bd:74:95:86:b8:80:2f:
71:51:c7:7b:2a:92:3f:d3:a2:ed:e4:c4:fb:3b:98:2a:fb:75:
5c:29:19:51:90:de:41:b4:d4:19:f7:16:d4:63:8f:14:a3:89:
48:1d:fc:cb:bd:62:dd:c0:2f:02:f5:55:60:11:61:a3:ae:5d:
a9:5b:ff:c2:86:ba:67:51:b0:71:6c:9b:3c:c6:76:45:5d:6d:
3e:39:37:f4:fd:40:45:cc:65:a2:6a:1f:8c:81:2f:69:49:e6:
2a:6f:dc:18:3e:d3:a0:ce:9b:de:eb:7d:d8:89:ae:45:2c:f7:
5e:fb:1e:2a:cb:44:bc:cf:22:18:0e:45:fc:00:4d:09:06:ff:
0c:32:8e:1f:93:db:b4:03:0d:a8:74:f3:3a:8a:97:69:eb:bc:
dd:28:71:0e:1c:a9:68:42:18:18:b2:43:b2:d5:c0:fb:55:df:
8e:7d:13:c2:bc:d2:e9:7f:89:46:81:7f:9b:d0:86:b7:14:c3:
b3:4c:1b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:32:33 2025 by rpki-client