Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
File: g9gpJjs8X2OWgDf56GP9D9AeeGk.mft (raw, json)
Hash identifier: wkCZ0ppDjEMMEyzf25ay41OdlhXlEaZE1XXZXkiwBDc=
Subject key identifier: DC:66:C3:99:EA:09:2F:CC:8B:FB:28:11:5E:7C:5B:41:A7:46:7D:60
Authority key identifier: 83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
Certificate issuer: /CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Certificate serial: 01969D19F5717E9F684E1425CE66BD6FD8CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
Manifest number: 10E4
Signing time: Sun 04 May 2025 21:00:46 +0000
Manifest this update: Sun 04 May 2025 21:00:46 +0000
Manifest next update: Mon 05 May 2025 21:00:46 +0000
Files and hashes: 1: KyWdAlshbj0x1AA1uUx-ZQPp9Zk.roa (hash: WDABDJxxu4elmiEAWMv89c2ma+ic8Jsi7E3Q6vmgEYc=)
2: g9gpJjs8X2OWgDf56GP9D9AeeGk.crl (hash: hpckOm9o4qDelcFuVxNgUgFziDHmMf9nW9njM0eFG4o=)
3: hkjDx-2GOhGp7IPuQmrLBkkB_0U.roa (hash: 4gfS7chtfvvAEHSEdJQzQiuhcE63Qr3QGw7uAtNLDMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:19:f5:71:7e:9f:68:4e:14:25:ce:66:bd:6f:d8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Validity
Not Before: May 4 21:00:46 2025 GMT
Not After : May 5 21:00:46 2025 GMT
Subject: CN=dc66c399ea092fcc8bfb28115e7c5b41a7467d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:5e:49:73:8d:b2:8e:f7:b9:25:04:8c:ea:
ce:25:7e:ba:b0:61:74:a2:b4:22:c8:0f:cc:79:cc:
83:04:e9:77:3d:3c:c0:d4:db:bc:e1:37:e3:b0:d0:
ff:78:a7:a5:21:38:e2:c4:72:cc:d9:ee:73:5d:5c:
25:00:19:c1:af:e2:1f:68:38:9f:f1:fa:f2:81:00:
c9:d6:e9:dd:63:3b:8c:9e:8e:9e:03:ad:48:e2:d4:
23:44:2d:7d:69:14:be:e6:e7:08:35:bb:9b:e9:5c:
94:e2:c5:66:e4:f4:8d:59:88:be:57:b3:ed:0a:01:
a9:89:9d:41:f9:c8:c1:16:49:ec:08:2a:8d:10:e8:
81:04:d0:2a:63:6e:b6:11:8d:fc:7e:fd:81:68:07:
ec:66:0e:8c:8d:50:b5:fd:e2:47:c8:da:c6:98:40:
b7:30:53:a6:8e:c3:bb:2d:2d:02:23:cc:93:2f:69:
60:6b:04:01:69:ed:f0:ba:d4:b7:a4:6b:fa:a7:91:
82:98:75:a8:26:a1:0e:36:89:9f:2c:c9:96:61:10:
c7:4f:45:d6:ef:95:15:d2:6a:6e:f2:83:08:da:44:
b7:f4:fe:94:e8:b1:2b:95:02:ff:c9:ba:e5:c4:f1:
96:30:90:71:82:50:71:12:39:8a:45:06:11:16:42:
b7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:66:C3:99:EA:09:2F:CC:8B:FB:28:11:5E:7C:5B:41:A7:46:7D:60
X509v3 Authority Key Identifier:
keyid:83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e4:a5:ec:5e:b7:00:a8:fd:31:31:51:4f:d9:5e:07:57:71:
8c:fd:86:53:23:3c:ec:f8:c3:24:40:0b:85:a3:11:64:e5:45:
1f:c4:15:e4:84:24:eb:bc:9e:2d:8f:0a:f2:1b:2d:1a:e0:9f:
ad:5a:89:0a:26:ae:46:0d:e8:e9:2e:cc:9a:78:fa:54:0a:d9:
be:48:a1:cd:ee:5e:ff:fb:58:65:86:7e:12:a1:4a:14:20:c2:
a2:06:a9:1b:8a:b4:8f:9b:39:d2:d4:3e:a6:0a:bd:1f:28:cd:
70:66:f7:ec:c1:9e:72:fe:00:cd:9e:f6:e5:4e:b7:f3:61:36:
cf:de:42:25:bd:60:45:57:c1:6a:60:42:ff:e3:ec:17:90:9d:
23:f4:cb:8b:4f:46:ed:e4:d5:2b:cb:43:fa:b8:b9:3b:28:99:
f8:cb:23:98:7f:3d:ef:bf:ba:8c:0f:4c:83:f2:c1:be:d0:01:
b4:ed:f6:69:a3:6d:14:f9:07:05:50:06:cc:ef:c7:9d:a3:97:
7d:9b:25:79:18:3a:56:99:4f:ac:92:d2:72:73:26:f2:30:86:
c2:7e:67:f1:cc:2d:4d:1f:92:a3:13:6f:6a:fd:08:7c:af:cb:
6b:9e:6f:18:91:2a:65:41:ac:4f:89:53:49:f2:7a:07:8e:30:
83:b4:42:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:41:55 2025 by rpki-client