Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
File: 9p8HIQsohLT-pQe94id5WyZAYu0.mft (raw, json)
Hash identifier: jpa2b64CQxMjPKDn5728+iFeUyOaHg1kfAJKq1D09EI=
Subject key identifier: 18:EC:C4:A1:F8:FB:E7:F6:E5:B0:8F:41:4D:74:E7:80:9A:DD:9B:49
Authority key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
Certificate issuer: /CN=f69f07210b2884b4fea507bde227795b264062ed
Certificate serial: 0196BDB75AC2F1ED2DEA0C5CFA09FE50C9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
Manifest number: 023F
Signing time: Sun 11 May 2025 05:00:31 +0000
Manifest this update: Sun 11 May 2025 05:00:31 +0000
Manifest next update: Mon 12 May 2025 05:00:31 +0000
Files and hashes: 1: 9p8HIQsohLT-pQe94id5WyZAYu0.crl (hash: OUvI1pWvtZR7KltUHM1H8sNdbqEX2O5bPn6MnNvnYGo=)
2: jYwiLy6C8PrH1zmVRebb5xoCcHg.roa (hash: B/91TwKxBsOKKHQE6s1Ydkjq/nj0hd3T+71Ppy1e7kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:5a:c2:f1:ed:2d:ea:0c:5c:fa:09:fe:50:c9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69f07210b2884b4fea507bde227795b264062ed
Validity
Not Before: May 11 05:00:31 2025 GMT
Not After : May 12 05:00:31 2025 GMT
Subject: CN=18ecc4a1f8fbe7f6e5b08f414d74e7809add9b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:87:b4:40:02:72:9b:11:c7:fe:ee:e6:7e:
0d:83:88:4d:b8:5a:87:97:60:e6:13:71:1b:e9:fb:
8a:3c:73:9d:60:da:1a:97:8b:53:c8:2f:94:d8:e3:
e9:a9:74:33:fb:bf:71:bf:1f:a9:e9:46:16:fb:c4:
ed:3d:86:42:01:a4:b4:db:64:80:e3:d0:7b:5c:f3:
1a:bf:0c:bb:61:eb:87:a3:36:b0:0c:70:4b:9c:25:
d1:db:0f:c1:a5:d6:67:ef:b0:e3:9c:da:4e:1e:56:
05:03:3f:29:ec:e7:05:10:b8:12:af:d9:c7:a1:49:
96:1f:21:0f:5f:da:a4:9f:05:3f:8e:e0:2e:c2:68:
af:bd:69:e7:c2:ef:b5:f1:a1:30:6e:b2:8f:14:60:
2f:8e:e1:9d:cd:50:69:e4:74:2b:74:d5:b5:f4:7d:
10:3f:9f:97:d2:01:b7:15:59:b8:d2:71:8b:1f:50:
5e:11:e8:3c:c0:c8:c7:ce:33:8a:47:17:b0:e3:4d:
38:29:be:a1:64:55:f5:10:22:04:1e:e8:52:b8:d8:
ed:02:f0:60:0f:de:9f:c2:cc:5a:86:12:92:58:92:
7c:ee:3d:6b:36:63:02:2c:f9:06:82:d8:be:0d:ca:
e0:28:47:2b:89:35:44:19:1b:8a:fd:50:68:59:f8:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EC:C4:A1:F8:FB:E7:F6:E5:B0:8F:41:4D:74:E7:80:9A:DD:9B:49
X509v3 Authority Key Identifier:
keyid:F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:7f:6c:cf:01:f8:95:57:ab:a4:d1:fe:15:ab:46:cd:f9:f3:
e7:10:6a:c3:40:a0:67:98:34:44:75:bf:37:39:05:b2:ce:dd:
43:86:cf:54:43:a1:81:d4:6d:38:68:16:a5:b6:2b:be:f6:b9:
f1:c6:d2:96:4a:64:cf:0c:f6:13:40:9d:35:78:26:1f:6a:fa:
fd:79:f2:0b:ac:ce:a0:63:c4:32:d0:b9:70:6e:fa:63:63:3d:
26:7d:7a:97:ca:eb:b5:cb:de:a9:5e:c5:ec:ed:c0:b9:fb:ce:
63:5b:0b:d2:15:4b:e0:36:c7:97:4a:9a:ba:64:a9:62:18:16:
c7:86:58:42:6e:1f:91:af:f8:d2:d8:2b:74:38:e1:28:a6:60:
a9:d9:ff:16:ff:b6:61:ac:b3:08:90:ff:00:81:1f:a3:e8:7c:
89:7d:ed:c9:57:42:1c:91:5e:b9:7f:fc:49:42:8c:a4:15:09:
9a:ef:d1:64:47:35:a4:db:74:4f:01:69:53:48:8d:3b:cf:79:
a1:3d:87:8d:fc:56:36:be:07:6c:20:16:8b:b0:6d:1f:ec:15:
7b:d4:89:e9:05:c4:36:2c:13:da:49:a9:9e:3e:05:ef:81:38:
48:b8:96:ba:8a:3b:28:11:3c:bc:61:d8:fc:51:e6:f0:7e:3b:
cd:3b:d0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:36:35 2025 by rpki-client