Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
File: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft (raw, json)
Hash identifier: eQOdAw3e8gwTcdPmY1Ovkr+sS9YJjDD1vSXfYqwgi+g=
Subject key identifier: EC:94:37:1D:39:73:71:54:73:70:CC:2B:A4:C6:3B:03:82:C2:3A:62
Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
Certificate issuer: /CN=f4b207ef8024244bbb4a0106af19270150c9f624
Certificate serial: 0196BE934F2386357778C5648EFFBAB7184F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
Manifest number: 04AB
Signing time: Sun 11 May 2025 09:00:47 +0000
Manifest this update: Sun 11 May 2025 09:00:47 +0000
Manifest next update: Mon 12 May 2025 09:00:47 +0000
Files and hashes: 1: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl (hash: cUxoWS1x7EurnwkxZqOmY1KuO2R/KLgrbUWGsn1CA1E=)
2: zYg006i-1WUWweE30u-SYPbT9Pw.roa (hash: Z8k/zZnitgyMfHbzB0hfDTUSf1BlauNSPllDbsEjoIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:4f:23:86:35:77:78:c5:64:8e:ff:ba:b7:18:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624
Validity
Not Before: May 11 09:00:47 2025 GMT
Not After : May 12 09:00:47 2025 GMT
Subject: CN=ec94371d397371547370cc2ba4c63b0382c23a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d8:6b:e9:eb:26:e7:2c:0e:16:26:10:6a:26:
8c:f7:70:ba:fe:81:3e:5c:16:8a:d5:ac:85:fe:33:
24:07:e0:90:f3:0d:9b:84:88:c3:b8:94:ce:67:9e:
3c:fb:7a:d6:d9:be:06:4b:8e:c6:e9:7f:23:27:6d:
6b:6d:27:5c:9d:24:6d:84:d7:d7:c0:ca:c4:b5:f3:
f2:b3:17:8e:b5:72:54:72:c7:6c:11:e4:ce:dc:5a:
56:19:51:5d:cc:99:a2:da:28:66:44:fc:d8:7e:0b:
80:ab:e8:46:62:c0:4a:a6:1f:ca:d0:26:d4:a2:b3:
97:4c:f2:49:79:3f:da:8e:0d:a0:9d:0b:9d:f7:23:
d9:40:e1:6b:aa:d8:a6:1d:67:68:45:f3:83:be:97:
0b:d8:0b:22:4a:0c:99:a6:26:20:e1:92:b4:5e:51:
4b:3a:c6:07:73:0e:19:c7:d3:51:0f:12:19:05:a0:
97:32:3f:3b:fa:f2:7d:0f:98:0b:d9:9a:ec:5a:c3:
08:e7:3c:aa:d5:c3:ec:b8:c0:c5:c7:8d:99:04:44:
82:6a:9d:29:bd:af:c8:91:03:7c:a8:e6:fb:df:1d:
7a:d3:89:6f:79:54:5b:ab:ad:23:8d:7c:ca:a2:ff:
88:17:d8:b0:2c:1a:99:f3:f9:e3:c6:05:3f:91:72:
b8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:94:37:1D:39:73:71:54:73:70:CC:2B:A4:C6:3B:03:82:C2:3A:62
X509v3 Authority Key Identifier:
keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7b:bb:15:a6:77:1a:e6:4e:85:9e:e7:ef:87:b4:b1:af:b5:
6b:ec:37:f3:a2:43:f5:b9:90:53:33:85:14:9b:51:d7:cf:55:
12:96:91:6b:60:47:66:dc:72:8b:88:95:ed:12:ef:97:24:63:
05:08:7d:40:74:fe:be:6b:bf:1f:2f:f5:88:96:97:55:8a:e7:
da:4e:5d:7f:c2:ab:b6:f4:88:25:60:54:19:40:50:1e:01:b9:
5c:66:6a:f6:da:1d:33:34:7e:4f:8d:25:10:68:2c:00:7a:eb:
ac:2c:c2:dd:a1:66:61:21:46:57:06:6a:03:de:0a:6a:3d:bd:
23:25:66:26:be:b6:ba:5d:be:35:ee:d7:2a:39:9e:08:be:9d:
ba:32:4f:c5:cb:00:9d:66:6e:bf:83:27:4f:bd:7f:69:84:3a:
62:20:85:69:bd:28:cd:86:40:96:ee:23:c7:63:f6:6c:c2:1f:
09:66:e8:4e:3e:37:47:39:0f:dd:c5:f7:4e:40:4e:52:f6:bc:
b2:eb:30:14:2b:27:65:3b:60:d3:2e:79:52:8a:c9:58:e3:d6:
63:26:f8:6c:bc:da:6c:e0:7d:10:b5:43:c8:b0:1b:cb:60:f5:
82:ca:c8:fc:c1:a2:57:cf:4a:5c:5e:bb:49:42:d3:76:61:12:
8d:67:c0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:04:52 2025 by rpki-client