Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
File: 9jOGnDZCtefqAii_DgspXO_MTd8.mft (raw, json)
Hash identifier: iCPHNc9gVRJTzlDx7Z0Ijv7lXSiQMoFERDiZOPy07Jo=
Subject key identifier: 1C:93:42:09:5A:84:30:1B:3D:73:BF:83:B9:00:B7:10:5A:AC:C8:F4
Authority key identifier: F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF
Certificate issuer: /CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
Certificate serial: 0196C9BBA278CF748E8763DCB4B9B0E35A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
Manifest number: 0FB0
Signing time: Tue 13 May 2025 13:00:39 +0000
Manifest this update: Tue 13 May 2025 13:00:39 +0000
Manifest next update: Wed 14 May 2025 13:00:39 +0000
Files and hashes: 1: 9jOGnDZCtefqAii_DgspXO_MTd8.crl (hash: YDRs/e04OAHed8Yr2wzCOEjEZghADQ+w6EsWak42pnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:bb:a2:78:cf:74:8e:87:63:dc:b4:b9:b0:e3:5a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
Validity
Not Before: May 13 13:00:39 2025 GMT
Not After : May 14 13:00:39 2025 GMT
Subject: CN=1c9342095a84301b3d73bf83b900b7105aacc8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:bd:ee:28:28:3c:4d:66:67:29:e5:37:a6:
dd:dd:b0:db:cf:ed:39:97:c4:5b:bb:60:bb:2e:81:
5d:26:c6:df:bc:85:84:60:89:b9:a2:2f:b6:75:e8:
2e:ad:7c:a8:9d:e6:09:b4:f8:d5:18:59:0f:36:d0:
c2:22:49:d6:04:86:5b:87:bc:2f:6f:30:1c:88:8c:
8b:00:6f:42:6a:4b:c7:dc:8e:21:52:94:36:10:74:
45:bd:94:48:54:ef:f2:d5:42:11:ac:81:88:ed:50:
d9:90:88:48:e9:92:c0:13:f6:16:c7:2a:00:52:29:
66:ec:c2:de:49:c9:1e:9c:33:4b:df:40:55:71:a2:
8b:07:54:1b:2d:f0:2d:27:30:64:ee:b0:7d:f2:a8:
50:5c:77:a9:03:71:5d:7c:02:3f:f6:3a:03:66:33:
00:84:11:3d:57:65:d9:44:cd:86:01:8d:d9:0e:45:
63:ff:0d:06:5d:82:b0:a5:1b:b0:d7:39:7d:9a:28:
64:27:18:c4:a5:4f:cc:97:57:5e:0c:a0:4c:e7:74:
f7:45:a7:b3:5f:3d:3e:79:3b:a7:85:95:31:e9:f9:
87:1e:fe:f4:ae:b4:d6:72:4f:3a:77:05:a4:00:7e:
de:da:58:8c:6e:11:3f:91:65:e3:41:24:41:5f:ab:
74:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:93:42:09:5A:84:30:1B:3D:73:BF:83:B9:00:B7:10:5A:AC:C8:F4
X509v3 Authority Key Identifier:
keyid:F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c3:54:98:7b:17:03:d4:03:8c:8f:38:9f:95:32:69:cb:42:
9c:b2:c6:89:7e:ba:c4:0a:35:ce:4a:87:80:64:29:16:cb:9d:
82:e7:c6:14:9a:96:d6:41:8c:1b:48:a1:28:51:a2:19:48:e8:
90:5e:8d:62:90:d9:0d:f0:44:20:cf:b1:b3:6c:72:22:a7:e5:
38:a8:03:0f:6c:24:a9:cd:1b:c5:67:2d:f3:58:86:b3:50:44:
2c:3b:cf:f8:f3:96:d1:55:0f:74:a4:ed:97:26:52:eb:f5:dc:
00:e8:14:c3:fc:0f:ce:8a:59:54:ef:a8:01:ed:de:75:12:9c:
82:ae:43:a7:2f:e9:1b:2e:67:05:7d:d3:94:a0:65:26:10:a1:
05:38:4b:08:ec:7d:fb:6f:07:ad:02:07:d3:ba:cd:ac:8f:7b:
35:75:be:f4:e2:72:84:d7:46:f9:f0:f4:fd:71:51:5d:f9:84:
16:36:14:84:88:b5:c2:cd:98:00:0f:ff:6e:74:61:7a:68:12:
66:ff:8b:5b:7d:2d:88:4d:a2:3e:c1:97:05:81:31:39:fc:85:
00:a9:17:9d:96:2c:35:cf:0d:8e:d5:56:53:b0:eb:85:08:ef:
3a:48:4e:70:dc:09:a8:d8:e5:f3:8f:1a:e7:42:64:1b:9a:d2:
00:65:d8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:36:10 2025 by rpki-client