Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
File: 9aKRIk-CvG0mtRntevviXLMsEVw.mft (raw, json)
Hash identifier: wFTKZYHuzay3FUKKlPk/ZGuHOoxaepji986SRfblqus=
Subject key identifier: 80:19:D7:FF:69:3B:77:1A:81:6A:B5:70:BB:C4:6F:66:E7:E0:A5:17
Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
Certificate issuer: /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Certificate serial: 0196A8E719C2A1BA1FF2DC837190048E5ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
Manifest number: 09FA
Signing time: Wed 07 May 2025 04:00:39 +0000
Manifest this update: Wed 07 May 2025 04:00:39 +0000
Manifest next update: Thu 08 May 2025 04:00:39 +0000
Files and hashes: 1: 9aKRIk-CvG0mtRntevviXLMsEVw.crl (hash: FBhgtbZQ6MqVBmxXA9Qy2b+QTrTjJkwTkEq8j2WRH84=)
2: TvqtU6kGEWNG1Cpdb9p7065y7Us.roa (hash: feIhe0HlEu5dhdmycewb1eBF/nryf3+/l635UbwMTEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:e7:19:c2:a1:ba:1f:f2:dc:83:71:90:04:8e:5a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Validity
Not Before: May 7 04:00:39 2025 GMT
Not After : May 8 04:00:39 2025 GMT
Subject: CN=8019d7ff693b771a816ab570bbc46f66e7e0a517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d0:8c:cc:86:f6:07:8f:4d:97:83:1e:67:d8:
cd:30:bf:df:13:b0:64:a6:8e:fc:da:35:ce:66:70:
7d:69:22:a9:63:59:ff:1f:56:b8:be:04:8b:2a:e7:
1e:e3:20:fb:3a:27:bf:10:68:c7:5b:b4:0f:d9:57:
79:66:7c:f8:5b:6c:55:87:1a:20:45:47:2e:d5:bd:
15:1e:00:67:2d:a6:02:4e:eb:06:41:9d:b0:04:44:
ee:a4:e4:50:f0:be:72:02:d2:71:f5:78:54:32:75:
c8:bb:47:a2:61:49:7b:f5:ab:11:0c:2a:d7:07:46:
a5:af:59:19:bf:74:80:3c:77:32:60:63:f7:b6:da:
6b:02:37:58:c3:04:7e:28:48:24:aa:4c:fd:8b:2f:
70:5a:1a:86:95:9b:e4:b1:81:27:6f:89:de:e9:c4:
b7:69:69:85:f0:a8:85:5f:77:3b:d8:83:2c:6f:4f:
93:73:86:4f:a9:54:48:62:a2:15:53:06:21:2a:61:
07:c4:7b:12:6e:9c:0d:5b:92:16:a6:b6:72:4f:c2:
d1:67:7d:66:e6:b3:c5:b3:a7:91:67:82:3f:a9:77:
6c:8a:de:4f:60:3e:60:0d:01:b7:ff:db:be:31:e3:
1f:c5:cd:e3:60:87:6e:8b:25:aa:6a:d6:8f:a4:d9:
91:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:19:D7:FF:69:3B:77:1A:81:6A:B5:70:BB:C4:6F:66:E7:E0:A5:17
X509v3 Authority Key Identifier:
keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:12:cf:f4:12:c1:e7:e6:b1:e6:bf:14:1b:75:8a:bf:7a:e5:
1d:61:0e:ed:05:70:9e:5e:5c:ce:cf:76:c1:d4:06:ba:04:ce:
3e:24:a3:77:67:6e:7f:f1:7a:b0:cd:bc:60:2a:cc:9c:46:da:
3d:3f:5c:4a:17:49:41:aa:88:f3:47:bc:8a:81:3e:31:57:89:
68:2a:ce:26:f1:13:14:eb:30:d2:03:eb:01:bf:03:e8:92:59:
d0:fd:d4:f0:a5:5b:72:9d:ea:ee:66:ed:bc:c5:ae:01:56:08:
e9:7f:a9:49:e6:8d:53:b7:63:08:e3:34:8d:6e:53:c7:2d:66:
db:25:6d:18:e5:16:ad:0c:2a:d9:4c:58:52:19:ae:08:3c:77:
e9:3e:ab:57:3c:20:ee:2d:d9:cd:c9:36:cd:b5:0c:6f:47:7f:
51:ef:16:62:8c:19:9b:e3:00:6c:fa:f2:c0:fe:2f:b5:66:59:
e9:f7:14:b2:4e:80:aa:df:93:eb:78:6c:d8:9e:aa:f3:98:74:
95:25:af:60:16:ee:0f:54:05:d3:dd:25:22:eb:cb:60:11:3b:
c8:a9:e8:a5:a6:da:73:10:5f:71:ae:2f:60:9c:03:fc:34:dd:
8a:6b:0f:6f:7b:93:ad:aa:69:79:3a:c4:d6:17:6d:65:f8:6b:
96:7e:91:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:04:34 2025 by rpki-client