Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: H9Jm19LOuLTCCzh+a0ehVPkFV7WnYZFDl48wxPUPlkY=
Subject key identifier: 69:22:DF:0F:7F:93:21:DA:E9:35:EE:E1:BD:5A:23:9F:51:88:12:22
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 01969C75394F16CB8A00A3FBD4F43E2E05A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 1523
Signing time: Sun 04 May 2025 18:00:50 +0000
Manifest this update: Sun 04 May 2025 18:00:50 +0000
Manifest next update: Mon 05 May 2025 18:00:50 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: 3LvfgzijNQaXKzFIwPytAgDN+LPnZU4YpZspJafPApk=)
2: HmMkZMs_L5qVhevMb58XTv8ACos.roa (hash: p6Cspm4w36V6nse6CJ6sMJJCGrV41tHwZhdpXbj7GQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:75:39:4f:16:cb:8a:00:a3:fb:d4:f4:3e:2e:05:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: May 4 18:00:50 2025 GMT
Not After : May 5 18:00:50 2025 GMT
Subject: CN=6922df0f7f9321dae935eee1bd5a239f51881222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:0a:81:1c:8e:71:5d:3e:8b:23:90:31:df:
96:d9:b8:d9:1e:75:6c:6b:83:1e:4e:0a:7b:2b:e4:
b3:86:1f:59:cc:34:b1:de:7c:53:88:be:2e:c4:c8:
99:9a:ba:b0:1b:97:a5:d5:20:fa:a6:77:a2:0d:b2:
f2:e0:ad:d0:ad:91:6f:c3:8b:c1:7c:75:6e:76:85:
7f:7e:51:ec:32:58:31:82:ed:a2:61:51:bb:4d:6b:
b8:a2:60:c6:92:b4:fd:b1:a0:b8:d0:1c:4d:0b:22:
64:b1:74:c9:45:ec:2a:9f:e7:05:c9:b5:5b:b3:46:
9a:a3:f9:43:67:4a:23:89:a1:3a:3e:8d:02:14:48:
59:2a:9c:0d:be:5a:4e:df:de:af:29:10:b2:a7:14:
53:28:ad:ba:30:d8:21:5c:8f:f5:67:98:ba:b9:fb:
54:fe:18:d8:25:61:33:36:8e:a3:a6:5a:72:83:f9:
a6:9a:a5:1f:fa:aa:b3:f2:7a:2f:ec:f8:30:26:73:
7d:8f:3b:2b:04:53:64:e4:29:5d:cd:8f:14:1d:8a:
6e:9e:e7:1c:3c:59:f3:cb:22:19:05:5e:8a:80:84:
94:00:4c:56:2c:7e:a0:52:5d:cf:d6:8a:d4:1d:8e:
ca:d3:d6:7b:c0:e0:55:ed:92:d4:d5:61:1b:97:69:
07:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:22:DF:0F:7F:93:21:DA:E9:35:EE:E1:BD:5A:23:9F:51:88:12:22
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a6:22:06:19:e7:ba:1c:1a:72:f4:c3:e7:f8:37:c0:1e:17:
5d:0a:be:63:2d:ec:ba:f0:02:35:ca:91:d2:e8:41:b6:15:31:
86:0c:58:5e:81:36:77:95:f0:21:f9:08:01:ac:66:3b:21:a5:
0d:d0:85:5c:db:3f:b3:cb:a6:76:89:2c:b6:05:06:07:ad:bd:
e1:43:b8:4d:d1:1a:ab:c3:e3:74:23:f0:ff:75:f4:63:23:d9:
e6:dc:d0:3f:d9:61:3e:36:3a:2e:3e:35:72:78:f8:64:ea:3c:
24:70:ee:b3:f2:bc:1b:79:cd:e4:68:d0:03:3a:99:b5:d1:af:
9c:c8:7b:d9:97:51:a3:a0:24:fc:5f:30:3b:46:07:d7:fa:f0:
b7:c4:67:bc:48:0b:1a:46:08:4b:43:71:18:22:90:cb:16:a0:
45:ec:47:9b:7f:b7:5f:09:c9:84:8f:cd:80:dd:e3:5d:42:ec:
e9:a3:ba:85:94:9b:1a:0e:d5:4a:e7:8d:29:96:fe:26:71:b4:
60:57:f9:66:3d:19:51:e5:3b:2f:5d:06:fe:73:ec:60:7b:6a:
e9:72:59:10:2b:1c:b6:b0:0e:03:de:a5:5e:21:35:5e:0e:ce:
3e:5a:82:20:c7:66:32:19:4e:3d:3e:ca:a2:3f:0c:c1:ad:1a:
63:c9:84:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:00:53 2025 by rpki-client