Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
File: 9EufgJPdiJ5HfO-np1VjkqZrOHA.mft (raw, json)
Hash identifier: S3sfEJ7juurRKaGmjJMAijuIFb+dBAJgd/tvIlqTovI=
Subject key identifier: 24:31:A4:C5:2A:75:D8:E4:36:26:FE:36:E4:85:64:E9:36:74:F1:63
Authority key identifier: F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
Certificate issuer: /CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Certificate serial: 0196C15CFA258C442C6983D39648ABBF34AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
Manifest number: 0A55
Signing time: Sun 11 May 2025 22:00:18 +0000
Manifest this update: Sun 11 May 2025 22:00:18 +0000
Manifest next update: Mon 12 May 2025 22:00:18 +0000
Files and hashes: 1: 2iT_kM3PkUEf8NeJ29enDVY5XmM.roa (hash: Dzh4bklpE4pirUMSN3Hq/Ic2ypp5OVgKHU7vTB3ErEs=)
2: 9EufgJPdiJ5HfO-np1VjkqZrOHA.crl (hash: lIYYvrlRmSJTZ8YVni9FFyq7mUths7tx/5KHd5TFvyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5c:fa:25:8c:44:2c:69:83:d3:96:48:ab:bf:34:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Validity
Not Before: May 11 22:00:18 2025 GMT
Not After : May 12 22:00:18 2025 GMT
Subject: CN=2431a4c52a75d8e43626fe36e48564e93674f163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5a:9f:ae:c4:07:8c:14:a6:c0:2b:cb:d4:1d:
a9:80:8f:d8:3d:7d:f1:d1:03:62:cb:68:35:3d:af:
9a:08:0c:6a:f7:d7:83:3e:ba:0f:b4:00:58:a8:30:
15:97:48:f3:be:49:3d:b9:d9:a7:56:6d:c8:0c:34:
47:28:90:9b:af:11:be:c3:f9:e9:0a:96:91:dc:f0:
cd:5b:7b:a8:7f:72:e3:64:2b:a3:42:23:a8:5d:ab:
f9:4e:95:21:6f:74:5e:13:47:82:8f:a5:8f:0a:f0:
af:4a:a2:5a:bb:33:4a:8d:12:12:f1:5e:57:33:ba:
4b:02:55:10:f0:89:eb:aa:ca:57:69:7d:ec:bd:38:
ed:9d:26:3f:c6:06:0c:7c:b6:d1:ea:8c:a4:40:6f:
0f:f7:29:45:bb:14:d3:b4:0f:27:e7:cd:ed:fb:70:
b6:cd:ba:05:ca:9d:ea:7d:bb:90:d6:0a:95:43:5c:
a8:0a:7f:dd:97:9c:c5:9d:d0:30:2a:4a:74:67:d4:
22:c0:aa:c9:07:6a:a5:f2:c2:c8:d9:d9:55:4a:70:
61:b1:ed:91:ae:a9:cf:33:46:8a:88:0c:bc:87:4f:
be:26:10:bc:15:c7:64:8e:96:aa:14:9d:cd:33:68:
70:3b:af:5c:58:99:71:3a:21:31:7d:3e:56:36:a3:
0e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:31:A4:C5:2A:75:D8:E4:36:26:FE:36:E4:85:64:E9:36:74:F1:63
X509v3 Authority Key Identifier:
keyid:F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:08:22:98:70:a4:9d:18:51:16:26:7b:7b:a8:cc:df:57:47:
e4:9b:64:ac:04:d7:76:18:3f:1d:0d:85:17:ab:c7:37:03:51:
d9:5b:13:8a:d1:41:c9:ae:19:2c:97:4b:ed:33:88:38:07:58:
86:10:86:3f:e2:9a:52:a4:b4:c0:ed:27:a4:fe:7b:62:40:91:
7d:26:2c:dd:05:ed:00:06:14:e6:20:85:0f:f0:fb:d1:0f:2d:
d5:3c:e7:3a:60:24:a3:e9:2c:68:ae:b4:f7:0a:4f:8f:91:ef:
73:dc:bb:7c:00:88:d8:8b:0e:de:9b:56:cd:fe:68:df:cc:7d:
34:d8:da:9b:0d:bb:e0:2c:29:42:c6:bf:1b:35:23:b9:40:5c:
ca:63:88:b6:c8:07:37:8c:0c:e4:94:93:64:d7:8e:72:57:f9:
5f:67:e0:02:ff:72:92:47:47:a6:c7:c4:7a:c8:d9:2c:58:3c:
64:08:eb:c4:44:4c:e8:61:61:5b:f9:fd:8e:69:39:4a:7a:3e:
12:13:bb:d5:ec:05:33:74:a6:79:0d:32:ab:df:00:32:2d:bc:
f4:54:2f:5a:4c:64:ab:a7:01:e7:7b:da:39:7e:b6:ce:db:21:
5f:b6:74:15:d0:ee:3d:bb:66:01:77:a6:5a:49:21:27:0c:b8:
4c:a6:8d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:45:44 2025 by rpki-client