Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
File: 9RKnWcZemEm7fFMtXrtESZpRW_8.mft (raw, json)
Hash identifier: 9w8gHyP+tQ0eOzVjAxZLAZuoHW1K05xcwXjImtgxyfk=
Subject key identifier: 06:CC:8D:4D:A2:1F:71:DA:83:55:E8:19:08:58:43:A1:84:A2:CF:E9
Authority key identifier: F5:12:A7:59:C6:5E:98:49:BB:7C:53:2D:5E:BB:44:49:9A:51:5B:FF
Certificate issuer: /CN=f512a759c65e9849bb7c532d5ebb44499a515bff
Certificate serial: 0196A209531208E48362B81821A9F875337D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
Manifest number: 04F3
Signing time: Mon 05 May 2025 20:00:42 +0000
Manifest this update: Mon 05 May 2025 20:00:42 +0000
Manifest next update: Tue 06 May 2025 20:00:42 +0000
Files and hashes: 1: 9RKnWcZemEm7fFMtXrtESZpRW_8.crl (hash: e0+9/v85jBMdz2o7Ftg56bzoPRo9aTwFiwh++RUOKYk=)
2: PHx_cn3cwOP0zIbd-tSOarri2jU.roa (hash: jvXJa9wGshKFR0UvbJd8wg24Fv3g0IRm/OGSnIujd88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:09:53:12:08:e4:83:62:b8:18:21:a9:f8:75:33:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f512a759c65e9849bb7c532d5ebb44499a515bff
Validity
Not Before: May 5 20:00:42 2025 GMT
Not After : May 6 20:00:42 2025 GMT
Subject: CN=06cc8d4da21f71da8355e819085843a184a2cfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cb:6b:44:36:02:32:ba:76:e5:66:5c:dd:72:
92:83:02:71:c4:93:f5:f4:1b:5c:64:26:bc:65:20:
13:3e:5b:cf:9a:6e:c3:6c:43:5b:ba:3f:ed:8c:1a:
76:d7:16:0f:10:4e:c7:a3:35:05:7b:65:31:95:a3:
45:8f:f7:06:b0:8a:55:22:1c:12:c4:11:e6:df:e1:
53:6b:1b:93:c5:2a:02:bc:aa:16:5a:a0:b5:26:20:
ed:70:45:9e:75:86:47:33:70:18:02:57:f5:a2:32:
01:b9:3a:06:15:fd:4c:52:5d:df:83:df:68:d0:c1:
96:c6:46:22:93:a6:81:da:72:a4:22:85:96:39:eb:
bb:5d:bc:96:79:ec:47:24:59:b4:ed:e2:e4:35:c8:
0d:cf:32:52:29:80:f8:d9:fb:6a:fd:80:9c:63:d2:
35:6f:bf:40:d8:86:38:d0:2b:5d:24:5a:8e:c4:c9:
cd:c9:1f:3a:8f:eb:11:84:ed:2e:65:52:5f:6f:09:
47:62:57:b1:3b:f6:40:a7:ed:f2:e6:97:70:6f:dd:
86:aa:a7:79:82:6e:fa:0b:1c:0b:97:c0:b4:69:c8:
7f:b6:ba:c6:46:a7:be:1e:6b:c2:1f:b4:91:7a:f2:
b3:82:ee:4a:4a:ba:bb:90:9d:e4:ec:70:bb:e5:e9:
e3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CC:8D:4D:A2:1F:71:DA:83:55:E8:19:08:58:43:A1:84:A2:CF:E9
X509v3 Authority Key Identifier:
keyid:F5:12:A7:59:C6:5E:98:49:BB:7C:53:2D:5E:BB:44:49:9A:51:5B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:97:27:e0:2b:79:48:3b:d3:f2:e9:3c:e3:dc:b7:d8:95:17:
9c:83:94:2d:96:11:9b:ba:55:0c:48:f8:6a:77:21:db:ba:85:
da:7f:16:f9:39:f2:0a:cc:93:44:26:87:9f:11:0b:e5:15:e6:
7c:28:40:ca:a9:55:8e:0a:0d:6b:27:5d:a7:18:b4:1d:3c:20:
86:2f:c3:8a:48:a7:73:26:16:59:a0:8a:f1:bf:b4:ca:18:b9:
88:02:47:ec:78:f3:e0:8c:a2:69:54:82:22:3b:7f:cd:21:d1:
f3:b4:40:c8:63:63:54:24:c0:e8:b7:1a:9e:d5:cc:12:e4:65:
e2:b7:b5:50:5f:e9:59:f0:5d:a6:23:ed:5a:55:85:cd:9b:de:
a4:28:92:99:3a:5f:b1:8c:6c:f7:35:96:94:cc:d3:f8:84:59:
fd:2c:c4:80:5c:e5:b7:39:37:71:6d:44:0c:d0:53:02:84:18:
4f:39:e1:21:32:f6:03:dd:d4:fd:65:96:8f:d8:10:3f:e3:3a:
c2:95:27:ce:45:de:6d:d9:e5:4d:01:17:b6:d6:6f:c4:fc:74:
b9:b0:19:ea:35:de:0b:5c:78:00:83:3b:1f:ce:33:a0:c7:47:
36:38:89:7f:b2:09:9e:40:ab:bb:35:ba:b2:3e:54:05:c2:3b:
21:b4:d0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:29:42 2025 by rpki-client