Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
File: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft (raw, json)
Hash identifier: D/LcdvKJbbrjPPTFU1eyq5mevijJXdpxx4e1EtZsdSU=
Subject key identifier: A3:A3:2E:BE:31:C6:07:83:7E:79:9E:23:DD:99:D6:0D:B0:EB:A4:1E
Authority key identifier: F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
Certificate issuer: /CN=f50e225bfb45218b997719804ea287f1751cf20e
Certificate serial: 0196BE25B29AF596301EF53DD97A633FDCF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 07:01:03 +0000
Manifest this update: Sun 11 May 2025 07:01:03 +0000
Manifest next update: Mon 12 May 2025 07:01:03 +0000
Files and hashes: 1: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl (hash: 6GRDdGfprUOzZNZJwNQ3FUa8RPdjzHdRr6N3ckdByEk=)
2: tCReBQEfist-xvNAig7wcNT_kFY.roa (hash: eAnNRfWeMAKf3K2opw1l/ihLmhFWT1Klsp1nr6sdAiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:b2:9a:f5:96:30:1e:f5:3d:d9:7a:63:3f:dc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50e225bfb45218b997719804ea287f1751cf20e
Validity
Not Before: May 11 07:01:03 2025 GMT
Not After : May 12 07:01:03 2025 GMT
Subject: CN=a3a32ebe31c607837e799e23dd99d60db0eba41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4b:13:44:e4:05:61:fc:cd:5e:a5:95:61:86:
4d:05:f7:e4:f4:94:14:0c:16:bf:99:fa:2b:3b:bc:
de:b7:ef:96:81:78:6f:ba:c7:5f:e4:44:30:78:8e:
b7:1a:ee:00:24:84:4f:91:f7:f1:c7:4e:8c:f8:07:
d0:d9:ec:25:95:e2:f5:d0:db:a8:ea:09:e0:4a:c9:
e7:23:2b:bf:85:75:e8:dd:cd:6d:42:b9:0f:9b:e7:
8b:94:f1:05:c1:eb:05:5f:4d:08:fc:9f:f4:97:eb:
fe:b4:6a:71:74:86:6e:bd:5e:a2:7e:01:53:a5:54:
84:c9:48:74:fa:7b:4f:05:0b:b3:07:0d:e0:2d:f2:
c8:ac:7c:32:90:2d:92:97:10:e8:91:e3:63:a1:77:
8d:ce:bf:4e:f0:27:19:b5:82:81:1f:2b:4a:65:d7:
34:f9:60:a1:3d:d2:7e:d8:44:bd:57:e1:77:34:43:
ba:94:44:6e:3c:43:4f:02:2e:fc:a1:0a:ae:25:0c:
75:d8:56:b3:68:6b:de:27:be:77:0e:22:c1:ca:c0:
41:6a:1e:88:13:1e:2c:0f:1f:98:8c:54:e3:f6:a4:
6f:25:8f:49:3b:4d:24:56:2a:28:b0:17:e9:47:a6:
8b:0e:43:b5:ab:8e:1f:0a:d7:6b:87:ba:d0:e4:b2:
7d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A3:2E:BE:31:C6:07:83:7E:79:9E:23:DD:99:D6:0D:B0:EB:A4:1E
X509v3 Authority Key Identifier:
keyid:F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:be:d0:62:08:8b:d8:23:d3:01:ea:c2:5a:d1:48:da:4f:4b:
f6:a4:6a:d5:e3:a2:c3:86:41:d4:7f:72:7a:ec:ec:9d:ab:5f:
b0:7f:11:2e:55:f7:f9:a5:e0:d9:f0:a1:75:d5:71:0d:29:e4:
84:23:85:36:7f:6f:a4:90:c4:c5:a0:41:b6:16:23:f3:6a:28:
81:5c:68:86:26:ba:ce:78:42:07:58:ac:e9:26:05:70:60:60:
a0:9e:1b:f9:00:c3:35:e8:aa:c2:7c:b1:1a:31:53:fb:1a:fe:
ec:8a:78:ed:9d:14:71:d5:b8:3c:c1:b2:f1:f8:74:bd:17:25:
c7:5f:9a:17:28:b5:42:db:cb:9f:de:bf:3c:08:41:05:26:1d:
c6:17:91:39:51:fc:48:2b:6b:93:4d:8f:f2:50:c3:22:98:ff:
33:8d:7f:9f:e0:90:49:eb:cf:66:12:d5:96:96:55:36:f9:33:
8b:d2:ec:39:80:d4:01:95:76:8e:66:6f:03:f6:42:52:3b:c2:
72:92:a5:15:dd:9e:30:c4:f8:68:97:dc:f5:e1:7d:be:eb:5c:
5b:c4:13:28:0d:19:c8:f6:4e:8d:35:32:3b:fa:58:8f:08:f6:
18:48:9c:22:c7:6a:fc:09:09:0a:62:78:dc:7b:9a:bd:f3:1c:
22:e8:93:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:30:06 2025 by rpki-client