Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
File: 9XGHM6rUPvapm9jZUEog3YkCLo8.mft (raw, json)
Hash identifier: fhXbM3hnxZ8B3BK2rMULlVatG7O4VAgmME+F/d50fWM=
Subject key identifier: 62:B2:D7:C5:AB:00:1E:92:D2:80:45:E5:FA:EB:32:56:0B:69:D5:98
Authority key identifier: F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
Certificate issuer: /CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Certificate serial: 0196D02B6715CFC57F1B0EEC349BB003B072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
Manifest number: 123D
Signing time: Wed 14 May 2025 19:00:27 +0000
Manifest this update: Wed 14 May 2025 19:00:27 +0000
Manifest next update: Thu 15 May 2025 19:00:27 +0000
Files and hashes: 1: 9XGHM6rUPvapm9jZUEog3YkCLo8.crl (hash: Fm0MOHTgQ46MyDK/9bR6CF00DXWxl9yOZeHAcPde5mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:2b:67:15:cf:c5:7f:1b:0e:ec:34:9b:b0:03:b0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Validity
Not Before: May 14 19:00:27 2025 GMT
Not After : May 15 19:00:27 2025 GMT
Subject: CN=62b2d7c5ab001e92d28045e5faeb32560b69d598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:34:e6:8a:3f:5d:de:f0:49:30:91:a0:b4:
a2:5e:4a:17:8d:26:68:cf:84:39:21:50:5c:0e:d8:
5f:c3:a5:eb:51:ab:79:63:54:04:49:31:2b:14:2c:
98:59:4c:b7:1f:6f:d7:e8:00:b8:99:ce:dd:67:32:
34:1e:d4:5b:4e:ac:01:7a:e4:a5:36:1c:8a:a7:0b:
11:9f:d1:e9:47:68:c7:99:fd:a6:b6:bd:97:ac:13:
f3:97:0c:9a:11:65:b7:25:54:2c:ef:a1:ba:9a:16:
a6:81:da:24:c6:c3:5f:aa:25:31:84:40:eb:52:c4:
be:44:df:2c:ca:e4:73:d6:0d:c0:ea:bb:4c:1d:51:
a6:ba:4d:f0:1c:6b:af:4f:a2:4f:09:26:1c:2b:b2:
6b:d7:36:51:64:a6:a1:fa:46:42:14:6d:fa:66:26:
b8:d3:64:aa:4d:5d:4d:40:61:83:70:f6:1c:27:f2:
a5:17:aa:ac:34:c6:2d:0f:41:35:a6:48:97:43:bb:
42:94:30:b0:32:7c:39:14:e4:6c:55:88:11:f9:83:
3f:6a:ae:ce:41:33:50:3e:06:fc:83:63:ff:f5:29:
49:8d:4a:3c:14:50:21:cc:67:5f:9c:72:a7:bf:f4:
0c:77:72:90:f4:c1:66:2f:62:88:21:8c:c1:4c:a5:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B2:D7:C5:AB:00:1E:92:D2:80:45:E5:FA:EB:32:56:0B:69:D5:98
X509v3 Authority Key Identifier:
keyid:F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ec:19:fe:a7:82:27:1c:c8:f9:b5:06:06:8c:47:95:5f:97:
4d:b4:32:56:35:2c:23:7b:2e:88:64:6f:4a:64:4b:a1:d7:a9:
c4:1e:80:0d:ed:4d:96:7f:2a:71:43:b2:43:d4:94:63:a5:7e:
6c:29:97:26:1a:d2:38:d9:1b:bc:9f:b9:41:3d:fe:ac:c8:af:
b6:6f:d8:59:55:e6:8b:2a:5d:dd:f6:56:23:9f:61:5f:43:fd:
95:45:bf:88:24:30:33:e8:05:89:b2:8f:7b:90:c3:4d:ec:85:
72:82:db:8e:6f:27:34:95:aa:91:fa:78:7c:73:36:04:fe:5a:
ff:3f:f8:4b:92:a6:eb:c0:a8:65:da:50:4e:95:62:02:01:42:
7c:8c:cc:1e:1f:ea:d7:8c:34:c5:c4:64:50:cd:9f:9b:17:b1:
17:8f:e8:91:bb:af:22:c3:97:b8:81:22:ba:1b:46:33:0a:aa:
e0:69:f7:77:72:42:8d:be:c2:93:9e:f4:ea:28:ff:34:51:40:
df:52:d7:63:fc:87:e8:f0:79:43:e3:7c:98:3a:72:8e:9d:4a:
49:61:a6:f7:31:a3:37:82:e5:27:17:cd:fb:52:ee:6b:eb:39:
cd:22:2e:6c:b5:ad:66:62:f1:98:66:7e:57:c5:53:3a:8b:ef:
24:99:f3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 04:19:00 2025 by rpki-client