Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
File: 4koyJ4zntMsgXfzK14YBSjsK4yM.mft (raw, json)
Hash identifier: hled7GwqDpLPF0lxSDC5Xo41P43ZwULzSvv8exyQU2c=
Subject key identifier: B9:21:8F:B3:0D:72:EB:E9:75:34:09:71:DF:79:55:E9:87:0B:28:70
Authority key identifier: E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
Certificate issuer: /CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Certificate serial: 0196B6A2D3D4F13C1C3C913F4E375A408A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
Manifest number: 0CC9
Signing time: Fri 09 May 2025 20:00:46 +0000
Manifest this update: Fri 09 May 2025 20:00:46 +0000
Manifest next update: Sat 10 May 2025 20:00:46 +0000
Files and hashes: 1: 4koyJ4zntMsgXfzK14YBSjsK4yM.crl (hash: RrycgRHXcNcieufOtacU3vbg7Zum0HGSGxDfL5LHIoU=)
2: Fl9jCud-UU_nsltrgxF4woEzDPA.roa (hash: t0KQ+pJmnr1NHNCgrJUYJH3j4t5bgDietQ+c+4tjYIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:d3:d4:f1:3c:1c:3c:91:3f:4e:37:5a:40:8a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Validity
Not Before: May 9 20:00:46 2025 GMT
Not After : May 10 20:00:46 2025 GMT
Subject: CN=b9218fb30d72ebe975340971df7955e9870b2870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:26:7b:a1:2a:81:40:57:5a:80:ed:03:ec:
62:12:f6:e8:cd:c3:57:8a:44:c1:fb:dd:15:7c:c8:
ef:90:1b:c9:76:a1:e8:5a:4c:f3:2c:d1:8c:03:8e:
01:ba:d4:2b:5f:b6:96:10:3e:b4:1e:9b:12:1f:17:
d5:9a:0e:4e:47:fa:a5:40:b2:d7:2d:c9:c3:f3:76:
02:63:69:29:5f:b0:14:22:86:cb:6c:1b:84:75:bd:
be:db:6d:c0:f6:84:4e:44:c2:96:51:c2:04:cb:4e:
80:8d:ca:b6:01:54:0b:69:3b:59:49:f2:b7:75:67:
f6:19:ec:8c:14:48:92:64:42:6f:b0:82:2e:cb:4f:
1e:dc:e5:03:05:bd:7a:68:81:56:3e:93:fe:68:3c:
f0:1b:95:41:0c:35:ab:f9:8f:7a:d5:0e:d2:5f:58:
55:2a:fa:08:8a:c3:c0:a8:68:7e:8e:69:e2:ae:58:
f4:c6:e1:1c:ad:e2:55:d8:f9:47:c2:e0:50:8f:cc:
00:75:25:bb:23:ec:de:63:1f:d0:f1:23:c6:ab:c0:
1c:d7:b8:3f:15:8c:58:ae:a5:2f:98:cc:d0:f6:99:
fb:cd:c2:7a:f0:b8:c8:16:1b:0e:8d:79:76:67:d5:
df:d7:bd:af:cc:f5:35:44:ca:d8:5f:0e:90:86:3a:
d2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:21:8F:B3:0D:72:EB:E9:75:34:09:71:DF:79:55:E9:87:0B:28:70
X509v3 Authority Key Identifier:
keyid:E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fa:0d:72:f7:97:64:f1:7e:be:e7:e1:8b:11:9e:2b:5b:fc:
ff:e0:26:ba:8a:1e:7c:ce:4a:5e:6d:bd:7a:40:1f:73:1f:8e:
49:2f:0c:e6:ad:8a:85:51:24:46:51:2f:15:f9:0b:b2:a0:fa:
4f:df:9f:6d:a2:83:01:6b:37:40:0a:82:96:a0:54:52:f9:ed:
21:3f:fc:69:1a:3b:65:41:0b:02:a5:b3:e9:b0:af:e6:f1:27:
9e:68:d3:52:f7:e0:41:ef:35:a2:6d:6a:81:58:5e:27:e5:26:
56:45:5d:f4:09:91:2d:cd:c3:40:87:b0:19:17:4a:7a:98:75:
ce:c2:76:46:28:a3:62:3e:92:67:7f:59:c2:cf:23:a5:d1:74:
7e:bb:6a:e6:cc:c2:2e:06:aa:eb:78:da:8b:3f:71:62:50:a7:
f7:bd:08:03:49:a4:ee:59:63:60:21:6f:5d:e6:b3:e5:1f:e4:
08:50:98:31:ab:eb:3f:8f:34:b0:c5:82:ea:1f:46:63:b2:b1:
39:78:93:5f:60:9a:8b:dc:44:2a:d4:ff:df:c7:05:93:02:1e:
d5:8f:f2:58:39:25:42:33:0f:e0:91:64:16:7f:08:dc:dd:d2:
74:c5:83:0e:74:eb:c9:d1:45:89:d4:8f:11:a7:be:0c:e6:bb:
52:b5:19:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:02:55 2025 by rpki-client