Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
File: 9OcXTG90-poisK3uJRqNZDEjE_I.mft (raw, json)
Hash identifier: vn2gkqHlonILAIc1vcnLLZTnaqXnB3ekr8cy6pNJvxM=
Subject key identifier: B0:FD:0C:21:00:DD:D3:A0:03:D5:0B:BA:0E:FA:34:47:23:B6:8D:5D
Authority key identifier: F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
Certificate issuer: /CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Certificate serial: 0196D0D116BC9D4A29CDB950853EE962CBFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
Manifest number: 14CF
Signing time: Wed 14 May 2025 22:01:25 +0000
Manifest this update: Wed 14 May 2025 22:01:25 +0000
Manifest next update: Thu 15 May 2025 22:01:25 +0000
Files and hashes: 1: 9OcXTG90-poisK3uJRqNZDEjE_I.crl (hash: +sGb7KFFqmD0K7KFbcTavZefg4Y1aLEvvnCDBYZ9SkE=)
2: DSwyNAuAz2bJdfrLonxlYBob04I.roa (hash: 3+/CvQ/0iqsF5SqvqkyipksHlcWBh/rqDJFf0zM3tC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:d1:16:bc:9d:4a:29:cd:b9:50:85:3e:e9:62:cb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Validity
Not Before: May 14 22:01:25 2025 GMT
Not After : May 15 22:01:25 2025 GMT
Subject: CN=b0fd0c2100ddd3a003d50bba0efa344723b68d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:60:6b:e6:0c:0c:0a:0f:18:35:ae:59:6f:
2f:53:a1:58:d2:4b:54:3b:a7:94:50:a3:da:bc:f5:
55:1f:ef:c7:7a:af:fe:58:c6:0b:48:d4:83:31:38:
80:9b:d6:af:57:97:59:8a:1c:97:c3:4f:05:a6:18:
ba:35:2a:ea:61:7b:a4:6f:47:84:9c:8c:a1:f5:a0:
93:78:6b:69:75:33:6c:eb:6a:70:c5:11:1a:ec:19:
d1:8f:40:4b:d3:90:e9:46:de:fa:ca:38:8f:6e:77:
d4:c5:25:a8:8a:b1:17:c7:85:f1:2c:ed:ad:ff:2f:
d3:36:76:93:d2:35:21:5e:37:41:e8:96:1d:58:b8:
05:87:0d:85:11:db:c2:37:8c:e7:6f:33:ce:40:89:
9b:e7:70:4b:9d:70:7e:72:91:fd:33:25:95:ed:fd:
cc:c3:05:8d:91:84:09:16:f8:8e:31:07:9f:6c:15:
71:be:1b:fd:41:6e:c4:6b:86:c8:a1:fc:d1:72:ee:
ba:a2:96:41:7f:be:4c:18:bd:15:1d:cf:a5:f1:70:
58:a1:6e:f8:15:de:8d:92:0b:a4:29:f9:83:0c:14:
ee:de:81:0c:dc:af:2d:b9:17:c0:1c:7b:6d:5d:67:
98:f8:45:78:60:b4:35:66:49:ea:d3:9b:7c:6c:42:
22:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FD:0C:21:00:DD:D3:A0:03:D5:0B:BA:0E:FA:34:47:23:B6:8D:5D
X509v3 Authority Key Identifier:
keyid:F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f4:dd:4d:5e:ae:fa:30:30:de:d1:04:4c:8e:5c:3b:77:95:
de:95:6b:3a:bd:b6:e1:41:c9:b9:96:41:61:2e:2b:78:56:47:
1c:9d:7e:a9:63:dc:90:49:17:a9:13:d3:cb:86:4c:6e:5a:fc:
b2:88:8c:d8:0d:91:3e:d6:60:45:f9:08:73:85:10:42:cc:41:
74:92:d7:f7:3b:84:e6:8f:7f:07:6f:fb:a4:d0:94:0f:28:95:
20:fd:53:a8:49:6b:d9:19:ad:bd:e5:7e:f4:a2:be:0b:81:89:
80:f0:89:16:52:03:d4:0d:2e:ff:0e:58:53:65:b1:d7:e4:2b:
0e:79:cc:8e:40:58:b0:0d:60:57:df:89:05:a3:6b:83:ea:49:
e5:e5:4c:2a:46:e2:61:f7:49:0e:0c:5c:67:10:ea:cb:9a:90:
63:28:4d:11:c6:28:55:11:c9:36:a4:a7:65:c9:9b:f3:b5:36:
b8:14:54:8c:ac:52:cd:93:91:03:3d:db:15:ef:f1:8e:26:12:
91:c0:e6:b5:56:ee:b3:8c:1d:6c:aa:2c:98:fe:7d:54:f7:6b:
5c:9a:1d:5a:76:5f:77:0b:8a:30:04:47:df:fa:c4:15:d0:a7:
3e:8a:e4:4f:db:b0:04:10:a9:b4:84:50:4a:00:50:dd:bc:20:
36:19:30:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:14:48 2025 by rpki-client