Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier: XbTEkNE+UTSZsYMOP99oXtCZxyYq5+tqEWcEv6B/7s8=
Subject key identifier: 9C:01:3D:3B:33:0E:1E:35:23:98:9A:CA:49:EC:E1:79:85:03:3C:10
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer: /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial: 0196BDEEC9D1427BC8AEFF47F3CD6C7C8B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number: 0C15
Signing time: Sun 11 May 2025 06:01:05 +0000
Manifest this update: Sun 11 May 2025 06:01:05 +0000
Manifest next update: Mon 12 May 2025 06:01:05 +0000
Files and hashes: 1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: m/ey6O3M776VFOWcEqHVf6pknshbfVWyJKAQcelN+So=)
2: lTwG7fexEhfG1KlVMWVQwuwbbtc.roa (hash: bfD7+ofvPCOaA8CmUpbLhJtSVYv9giSBukJUfQkg6wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:c9:d1:42:7b:c8:ae:ff:47:f3:cd:6c:7c:8b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Validity
Not Before: May 11 06:01:05 2025 GMT
Not After : May 12 06:01:05 2025 GMT
Subject: CN=9c013d3b330e1e3523989aca49ece17985033c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:88:f1:e8:84:ed:9d:12:5d:27:17:cf:b6:f6:
e7:4a:3d:68:a8:dc:c1:ed:e1:0d:3b:7d:f8:08:c8:
f8:fe:f5:d1:a9:8f:ca:38:03:1b:28:e4:7e:d2:25:
d5:fb:8e:d0:94:f8:fa:cd:64:72:d6:0e:d0:b1:32:
5a:09:59:66:ca:ae:d3:c4:92:be:13:82:a8:fe:84:
25:0a:ab:50:fa:8e:b3:bb:ac:f8:ad:6c:d1:9b:e9:
c7:9b:93:d5:38:a5:41:8a:0c:5a:d4:05:c3:05:7f:
bc:17:d2:b6:4f:50:79:50:70:3f:61:93:e3:78:ac:
90:9e:b1:21:60:43:79:6e:aa:ac:d7:81:1e:af:e7:
ad:4d:22:35:95:d6:69:2f:aa:49:62:e2:3f:9b:36:
6f:f5:a0:1e:17:b2:d1:8c:98:ef:ae:32:f5:a4:47:
a3:93:db:27:d6:c8:5f:38:ed:db:02:aa:89:15:74:
c7:1c:f6:dd:c4:55:71:98:c2:a2:21:36:fc:d8:2a:
b8:0c:91:90:32:ab:d8:00:26:f8:59:cc:6d:17:09:
56:cd:52:45:22:a7:0b:45:55:52:7f:f7:57:ba:cd:
22:b2:36:6a:6b:d0:7f:82:d3:9f:10:bc:fc:e2:3a:
d9:22:4c:b8:7e:a7:41:83:65:bc:40:f7:1e:91:07:
e9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:01:3D:3B:33:0E:1E:35:23:98:9A:CA:49:EC:E1:79:85:03:3C:10
X509v3 Authority Key Identifier:
keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e7:ce:9b:63:48:6d:86:81:68:1b:e3:17:09:20:1b:04:41:
d0:f5:ed:99:9e:4d:3b:87:5c:3f:95:19:07:5c:07:50:5c:8d:
e3:f4:a0:86:92:57:46:00:f6:77:00:2d:9d:a4:8a:08:42:a1:
58:92:71:6c:84:22:eb:ce:25:d9:db:aa:0e:22:66:84:49:30:
d1:8e:f7:b3:78:ff:89:d1:67:d1:ad:c1:77:f0:ee:35:88:53:
81:c0:fa:5b:fa:2d:ea:ea:e3:e7:7e:b5:f6:13:f4:82:69:bb:
c7:bc:54:43:f5:06:c4:55:97:a3:98:46:ac:a0:38:9d:25:98:
28:a8:0a:73:20:16:e2:a4:a4:16:1d:6e:41:8b:5f:e4:42:97:
69:ac:d7:f5:d2:2a:62:35:8a:34:8c:68:c6:0c:84:f0:7e:e5:
a5:77:8c:f3:56:81:a5:6e:dc:1b:15:d8:18:b5:7f:41:61:6a:
a3:9b:dc:be:1f:89:01:9e:77:07:2e:52:92:4c:98:da:5a:e6:
70:f4:61:9a:e7:36:eb:47:f5:39:c8:b6:70:35:a8:ae:f2:69:
0f:29:32:eb:90:bb:e1:3f:67:e8:ff:35:6b:5d:44:71:41:3c:
3d:19:ca:f0:77:12:f2:96:c5:e6:bc:3d:0a:79:e1:fa:28:68:
c0:a1:6d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:34:21 2025 by rpki-client