Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
File: 9XpIEqFZ72qekpcudXKtZi1yIVo.mft (raw, json)
Hash identifier: fecb4HbbWqMx23zBbtsLaqJe/5mVvW0oeJ4lTlp+4D0=
Subject key identifier: 45:F9:D0:2C:6D:9D:7D:37:57:C8:96:7F:D9:F6:9F:33:D7:75:70:8F
Authority key identifier: F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
Certificate issuer: /CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Certificate serial: 0196D69C04242DE5939B573D7094C44DAD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
Manifest number: 0E29
Signing time: Fri 16 May 2025 01:01:11 +0000
Manifest this update: Fri 16 May 2025 01:01:11 +0000
Manifest next update: Sat 17 May 2025 01:01:11 +0000
Files and hashes: 1: 9XpIEqFZ72qekpcudXKtZi1yIVo.crl (hash: mkLcj4E2oegyBfmnY/PFJ6KHFuz7JHKKwiLNsqLeuaM=)
2: rsfWL4ne_IO-bw3hiD_1W0HWkNY.roa (hash: zqnrJ6HitRbslJtaa/MioT9cGJCTTWr6OsfLiIDmwLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d6:9c:04:24:2d:e5:93:9b:57:3d:70:94:c4:4d:ad:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Validity
Not Before: May 16 01:01:11 2025 GMT
Not After : May 17 01:01:11 2025 GMT
Subject: CN=45f9d02c6d9d7d3757c8967fd9f69f33d775708f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:cb:11:1e:89:be:dc:38:9c:aa:df:5a:a0:
a8:b4:69:67:32:9c:ba:c9:00:fa:70:d5:50:e6:4c:
fe:8e:24:0e:9f:1a:96:f4:6f:55:1b:00:a6:bf:d3:
11:8d:b4:5d:e0:22:a8:70:f9:31:2f:d0:da:45:fa:
80:0f:be:84:bb:bf:9b:6f:3d:80:58:37:2e:89:59:
37:c7:33:b9:74:82:e9:91:f0:f9:94:50:98:82:05:
3d:7d:a4:72:e5:df:d8:37:73:d7:03:61:0f:fc:f8:
89:18:76:2b:b2:c5:3d:1d:ec:2d:43:00:ef:fe:c3:
ab:3a:05:5e:15:5f:65:a0:82:25:9a:2c:94:61:2b:
98:89:9d:e1:4d:1e:62:a3:dd:57:50:0d:86:a2:65:
54:e3:81:1d:dc:09:36:dd:a8:7c:ee:47:c3:f6:65:
d6:1c:ec:fd:79:3b:04:72:4e:db:79:f1:fe:ba:02:
3f:b2:13:e1:ae:18:e2:30:4c:b5:3d:e3:d6:f1:2a:
8b:d1:bf:c7:13:6f:fd:2d:12:26:48:d7:1a:f6:4b:
15:a4:c2:c8:45:5b:ff:64:cd:a3:d3:50:55:c1:2c:
f2:25:cd:e3:fd:89:2c:23:d2:3b:9f:93:63:cf:c2:
22:3a:9a:83:b9:1b:26:cd:df:a7:40:5b:89:52:03:
2d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F9:D0:2C:6D:9D:7D:37:57:C8:96:7F:D9:F6:9F:33:D7:75:70:8F
X509v3 Authority Key Identifier:
keyid:F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7f:4c:25:70:96:74:12:dc:e9:86:60:bb:2f:11:b5:b3:fb:
70:8a:f5:85:78:d7:d5:71:58:5e:58:9a:54:a5:f5:84:2a:60:
79:5d:6f:9d:2a:2d:05:fb:22:3e:3c:dd:69:70:70:b2:c5:1a:
2c:55:b4:67:7a:46:1e:12:d4:2e:df:be:3a:dd:bd:fb:57:f0:
46:7e:ea:88:55:d8:be:ff:c9:47:e3:54:49:80:64:a9:c1:9b:
c1:19:77:40:db:26:1d:3d:e0:0f:d2:b3:2b:11:b1:7c:49:39:
6a:d9:01:9c:d3:9e:24:0d:77:62:1b:ab:f4:50:e6:ee:5d:26:
c0:e5:a1:53:bd:b9:a9:70:40:38:b9:ba:00:a4:7b:f3:1c:c7:
c1:7d:14:69:af:24:fd:2e:f5:fc:4f:0c:a0:f7:9b:ff:77:4b:
82:68:d5:db:f5:24:c2:f1:92:bc:c2:e5:a9:b0:7f:cf:25:e8:
fe:03:3c:c6:26:5b:14:f9:f8:4f:40:88:a2:40:b1:96:f3:e3:
cf:a9:04:2f:0e:b9:e1:38:0e:68:f0:74:32:f4:1b:6f:fa:f7:
bc:44:8a:cc:a3:56:11:cd:5a:94:94:59:d8:a7:13:3e:3b:2d:
0c:b1:20:e8:2c:de:87:fb:98:18:de:c5:e5:6f:fc:eb:ae:9e:
bf:f2:02:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 03:07:08 2025 by rpki-client