Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
File: 9gcH8oeiMJvuy7hS7kCqgxueeGY.mft (raw, json)
Hash identifier: +RhKhQ8TQyi6Wl1Oya/4hxB6AS0nV09y86SA4vjcvSo=
Subject key identifier: 83:60:AA:82:15:42:D8:D5:68:90:2F:DE:53:5A:B9:8F:EB:6B:DB:1D
Authority key identifier: F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
Certificate issuer: /CN=f60707f287a2309beecbb852ee40aa831b9e7866
Certificate serial: 01969E2C6F51FD32AE0C022A4BD3BB649D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
Manifest number: 0BD1
Signing time: Mon 05 May 2025 02:00:34 +0000
Manifest this update: Mon 05 May 2025 02:00:34 +0000
Manifest next update: Tue 06 May 2025 02:00:34 +0000
Files and hashes: 1: 1qWzBwVhmQ6zdPJi5w7aMEYeKoc.roa (hash: QUUw5IgATMBX8godfHfSxzPR3Se/paZBDUtUUYMUESM=)
2: 9gcH8oeiMJvuy7hS7kCqgxueeGY.crl (hash: nfmkSqwfm+j6m0lkwbjZkCIv2iPXco/LkS0+0ptzev0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:6f:51:fd:32:ae:0c:02:2a:4b:d3:bb:64:9d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60707f287a2309beecbb852ee40aa831b9e7866
Validity
Not Before: May 5 02:00:34 2025 GMT
Not After : May 6 02:00:34 2025 GMT
Subject: CN=8360aa821542d8d568902fde535ab98feb6bdb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:8c:ea:7b:21:00:45:6e:0e:83:be:70:c4:
3f:2e:c8:b3:5b:60:32:59:78:56:26:dd:59:a8:3b:
f1:5f:ea:93:e0:93:7f:2a:65:d2:a1:b3:5a:9d:e4:
08:2a:1a:70:fb:95:4d:f3:43:cd:87:52:05:75:49:
0c:b1:7b:11:40:3c:fb:e6:8f:e0:ba:3a:73:07:4d:
4b:69:66:aa:cc:21:50:41:4b:f6:a7:24:49:99:e8:
51:d4:0c:3c:2e:ad:c4:be:c4:1c:bf:80:ba:f9:a6:
94:0e:da:07:24:1e:40:e9:df:bc:c8:80:3c:7d:37:
45:49:98:94:1f:e7:35:58:5b:9b:ee:c5:73:9e:12:
8f:00:9a:10:7e:cd:06:db:49:4f:43:80:f3:a4:87:
c7:7f:d7:f3:4c:14:f5:04:c5:75:f3:56:ce:4a:60:
c0:fd:5f:bd:3d:9a:80:56:ab:cf:42:f3:53:97:85:
52:ad:7c:0d:3a:be:34:1e:0f:ac:ba:ce:ca:88:2d:
12:5d:ae:1b:bd:2c:61:50:97:34:4b:84:f0:d6:3f:
51:0d:d9:52:46:40:51:43:e5:47:fd:b4:11:b9:90:
ff:54:e7:8b:cc:88:bb:2d:b9:33:16:2a:76:fd:29:
02:f8:c6:a6:00:9c:67:6d:dc:17:28:31:72:f3:a7:
bc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:60:AA:82:15:42:D8:D5:68:90:2F:DE:53:5A:B9:8F:EB:6B:DB:1D
X509v3 Authority Key Identifier:
keyid:F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ca:b1:a3:92:27:88:b0:33:dd:c5:19:27:fa:08:15:37:61:
82:fb:c7:dc:6d:9a:b9:3e:f9:d3:8c:44:b6:c5:ae:c7:9c:10:
6b:22:ae:bd:0a:a2:1c:ca:55:7f:a5:2b:22:67:94:19:ea:9b:
dc:e3:89:cd:d1:55:32:dd:b4:b6:df:11:15:00:d5:93:19:91:
b9:d8:96:72:80:36:3d:89:cd:ed:8a:9e:d6:ba:3a:dd:72:72:
cf:19:b5:7f:5f:bd:af:c5:e9:a0:70:a5:15:58:49:01:13:a3:
c7:fa:09:d9:78:8c:70:2f:72:2d:a8:92:98:62:43:44:46:44:
ea:46:36:89:f7:19:51:2c:89:c4:38:b2:ae:57:0b:5b:5e:f8:
fe:14:d1:68:3b:02:9c:c6:db:73:a2:a5:9c:3e:aa:c3:e2:2f:
5b:86:cb:d6:3a:c0:77:28:84:2f:32:72:bc:56:84:f9:20:58:
30:be:3d:40:65:b9:a5:b1:f2:96:e9:35:9e:58:16:c8:c0:d3:
fd:63:ec:50:05:b7:c6:31:13:3a:eb:c0:27:05:36:c8:c7:ef:
b5:ba:bb:39:a1:39:48:f6:3e:51:36:15:ba:d8:9b:d7:02:08:
0b:57:14:e5:41:93:c2:d1:b8:ac:e6:b5:70:86:d9:81:90:2d:
b6:2f:93:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:35:24 2025 by rpki-client