Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
File: 9TNT82jdgBzWECIy36HOpp3Yy2w.mft (raw, json)
Hash identifier: mOJcxWQZ3j5iuP37GryqfPfYOQXh0tISLIc3Tw85m+A=
Subject key identifier: 67:2D:2C:A8:0F:82:17:35:F2:8D:53:34:47:E3:25:3E:D3:C5:52:ED
Authority key identifier: F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
Certificate issuer: /CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Certificate serial: 0196C3B9A296D79147FA70735AA74C67C671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 09:00:45 +0000
Manifest this update: Mon 12 May 2025 09:00:45 +0000
Manifest next update: Tue 13 May 2025 09:00:45 +0000
Files and hashes: 1: 9TNT82jdgBzWECIy36HOpp3Yy2w.crl (hash: pvmKQZbwLFOs4qGkno6ppAQYZouiGBBjZZ78pEMiiPE=)
2: KPjydIOJaGq7MrGDIyks0pG8OMc.roa (hash: EbMrbtdHkpWfjQpY4PIBNTo9mg3b+j3TofouOP6XhE4=)
3: j-eMIttscanFAqtICoI80Cr1JzI.roa (hash: 9wKinY0pxocac6rpiGpVi4F+dA87gof09Z9RuDhbY0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:a2:96:d7:91:47:fa:70:73:5a:a7:4c:67:c6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Validity
Not Before: May 12 09:00:45 2025 GMT
Not After : May 13 09:00:45 2025 GMT
Subject: CN=672d2ca80f821735f28d533447e3253ed3c552ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:a9:b6:f9:28:4d:df:36:c9:26:3f:01:5d:
26:af:69:7d:c4:d6:0d:c7:66:d3:62:10:fd:6c:60:
c0:de:98:7a:e3:de:c7:2d:65:88:0f:44:69:4a:c0:
3c:9c:db:4b:6c:6c:9c:20:58:7f:c9:6f:e0:a9:58:
9f:86:f8:ff:16:63:64:35:23:95:32:08:b9:4d:f3:
3b:42:79:a1:bd:18:7d:fd:d9:0e:5c:f2:75:f0:c9:
7c:1d:ad:95:f7:23:99:67:13:83:87:3c:9d:e0:b4:
d7:b5:3a:c1:0f:6e:d9:c5:70:5c:6a:ff:df:b4:9b:
5c:af:9a:70:74:5b:24:ec:39:31:c2:fd:ab:8a:e6:
e7:85:48:43:21:29:fb:30:3b:62:28:20:fd:f4:b3:
2c:b9:22:47:f0:4f:16:af:06:a9:32:e1:ae:93:e6:
d2:c5:5d:49:0f:e7:fe:6a:3d:96:f8:0e:dd:69:cc:
7e:95:a1:f1:32:57:1d:67:61:f9:7c:6a:f2:7a:7b:
f8:14:77:93:ad:b6:9d:74:0d:d9:a9:2f:cd:2b:6d:
58:81:08:6c:35:2e:83:72:a8:6b:c8:d9:4c:13:2a:
d9:9d:49:ba:f8:4d:76:85:bb:55:f7:37:2c:21:03:
62:10:fa:c0:b2:f5:a6:d6:33:2f:8f:27:e1:3a:44:
31:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2D:2C:A8:0F:82:17:35:F2:8D:53:34:47:E3:25:3E:D3:C5:52:ED
X509v3 Authority Key Identifier:
keyid:F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e9:b8:5c:7a:20:52:4c:fc:0e:2f:e9:71:de:92:5c:d4:f6:
c4:e3:ec:62:44:41:e8:e5:1f:ae:dd:3a:10:da:62:7f:9a:d1:
a3:1f:23:5b:7b:68:ef:71:26:0a:f7:c7:dd:52:28:f4:08:71:
5a:c4:a9:84:99:65:3e:87:ec:14:53:ee:27:83:ec:83:7c:22:
f3:ef:f5:77:84:32:3a:7d:04:89:98:d0:ec:1b:0f:ea:6b:49:
d7:8c:5e:4e:15:73:b4:ac:17:29:2e:d2:79:d3:58:47:7c:6f:
59:5f:6f:08:32:9e:f6:d6:8b:96:29:09:39:29:ca:de:62:07:
95:c6:aa:86:f3:63:95:da:82:a1:b6:39:04:d8:95:10:b5:9d:
b2:5e:37:3d:a2:76:58:15:d6:e9:48:e2:06:21:16:c9:c0:78:
72:44:97:45:29:3f:0e:5a:3c:0b:c9:8e:97:d4:ab:40:d8:2b:
bf:76:fb:25:79:c7:f8:54:45:a1:3a:dd:76:04:1a:43:f7:8a:
fa:5f:53:23:f1:d0:71:95:64:77:30:84:57:92:11:6f:2d:72:
0b:bc:0e:5b:69:ad:6b:61:fe:f2:0e:11:fc:78:f2:f3:ce:fa:
8c:4b:4d:ba:52:e0:d6:c2:f0:b6:0c:3b:45:3a:74:8b:37:66:
3f:40:75:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:57:44 2025 by rpki-client