Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: PeQfbrrR0nvngTH9HX6BEx/xGq2vxN7lj8HBIY86Q2o=
Subject key identifier: 52:6C:C4:D6:CC:03:6C:24:30:04:CC:3D:02:48:27:97:6B:D6:FA:53
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 0196B7472F24896F5BE8D9002F4BC3FD8CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 09AB
Signing time: Fri 09 May 2025 23:00:17 +0000
Manifest this update: Fri 09 May 2025 23:00:17 +0000
Manifest next update: Sat 10 May 2025 23:00:17 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: v7QppHQXHk70AdNNn6j64u56DGUhyN4+jWPlidgW6/s=)
2: KtAzNYXVImWMGMH8A6HLsIQbFYc.roa (hash: ltDvt7Ps4IWIzfc/uVIIbjH4kHjztdeIqznwfwNq8iY=)
3: X7mQYJCLCkSBMPn_lrSoI8KIXAY.roa (hash: qkjXPDtCPdPuWts7n2uaYetfDj2xIXD2HuaNsodcZ5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:2f:24:89:6f:5b:e8:d9:00:2f:4b:c3:fd:8c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: May 9 23:00:17 2025 GMT
Not After : May 10 23:00:17 2025 GMT
Subject: CN=526cc4d6cc036c243004cc3d024827976bd6fa53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3d:fa:ea:fd:ad:b9:60:df:d2:81:df:20:05:
2c:c2:fb:24:ec:cf:43:4d:29:60:43:59:0c:1b:93:
b7:85:ee:9a:54:a2:03:3b:f5:0e:31:eb:f0:12:62:
68:cc:be:63:aa:69:97:e9:c9:ea:7b:8a:0e:06:df:
f1:76:75:23:3e:f8:b5:d9:0a:3a:a4:84:75:ca:21:
b3:73:4e:70:83:cd:6a:65:d2:a6:a0:1f:a5:65:1c:
08:a7:42:64:d0:83:a2:61:0f:77:0d:14:d4:52:a2:
51:18:e7:41:7e:37:c0:ee:30:35:86:0c:bc:78:8b:
4a:60:71:21:28:50:1d:ff:57:80:b2:df:2d:c0:86:
96:2d:59:9b:be:7e:d7:19:af:9a:1e:d4:f0:c7:00:
ff:ac:f0:5f:d7:70:2a:dd:4f:77:5b:0c:e7:5e:3f:
97:d7:1b:29:af:63:a8:83:46:f0:f6:ad:d9:8f:60:
02:0c:17:f2:44:39:48:8f:55:20:dd:bf:b5:64:48:
d1:1a:61:20:e3:31:cd:30:0f:32:be:77:b8:4f:90:
17:ef:92:6e:6c:86:eb:50:3a:60:cc:9d:aa:ac:95:
f6:1a:1f:70:49:73:45:25:39:39:6d:66:cb:76:c9:
61:98:72:03:bf:ff:59:e7:59:01:e5:68:e7:f0:05:
52:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6C:C4:D6:CC:03:6C:24:30:04:CC:3D:02:48:27:97:6B:D6:FA:53
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0e:02:ea:39:7a:18:47:0a:cd:b2:c7:5f:ec:aa:eb:a2:48:
ab:93:b5:a0:ce:1f:09:5b:99:c7:a3:ff:d5:d3:70:60:8a:5d:
bd:d0:78:0c:83:39:3e:06:ec:dd:9f:a1:5e:6b:5a:54:a9:26:
f8:f2:54:6c:12:b6:2e:c8:d9:0c:ee:7e:21:60:d9:9a:a0:22:
ca:e9:3c:f0:61:63:66:ca:bc:95:56:b3:eb:24:b6:ac:47:d3:
16:3f:ec:98:b2:8d:fa:20:53:ed:2c:29:0c:97:75:08:c3:47:
64:af:00:93:92:be:53:62:f8:49:70:57:41:f1:15:e0:b2:42:
43:b4:54:e1:bd:ba:7c:89:d7:e0:eb:1c:37:44:b5:e5:75:85:
37:7f:cf:91:69:1a:9c:dc:6f:c1:ed:08:91:9b:89:4c:82:19:
82:84:8f:41:6e:eb:c8:bd:e3:7a:0c:bf:01:7f:7f:d9:3d:d9:
e7:64:cb:8f:ad:15:7d:54:cc:f0:b7:27:b8:db:44:5d:3f:a6:
dc:92:58:32:06:43:04:38:13:92:d2:60:ea:63:69:31:cb:0e:
49:87:98:99:86:15:fb:5c:81:5a:9b:63:16:e5:24:cd:cf:90:
cb:30:26:8a:55:97:63:60:bc:f0:7f:24:55:85:b7:e9:5c:da:
11:b4:4b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:34:14 2025 by rpki-client