Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
File: m9bIYDQsx5nCgHT2mXaKjsvapS4.mft (raw, json)
Hash identifier: gnVs69rP0eNZEKbLOPN9mII1ElV5lZPeUWXJEzv1Jq4=
Subject key identifier: 1D:BE:BB:10:42:75:7D:53:0B:12:C7:B1:37:9E:94:EA:17:05:18:74
Authority key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
Certificate issuer: /CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Certificate serial: 0196BC6E3358244B1A6E50A59EFBC5F8E1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
Manifest number: 12DA
Signing time: Sat 10 May 2025 23:01:00 +0000
Manifest this update: Sat 10 May 2025 23:01:00 +0000
Manifest next update: Sun 11 May 2025 23:01:00 +0000
Files and hashes: 1: E9yjq7sNmTyPb-NC6kzqBRLzrkw.roa (hash: Fv8DNDjTn+xqZTnmPhsaO+M3G5osAwVvGy2YaFQtoP4=)
2: m9bIYDQsx5nCgHT2mXaKjsvapS4.crl (hash: iFu5pDHuas6fopOIqPyhpeNyGuAkWtXuD768JuoWKqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:33:58:24:4b:1a:6e:50:a5:9e:fb:c5:f8:e1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Validity
Not Before: May 10 23:01:00 2025 GMT
Not After : May 11 23:01:00 2025 GMT
Subject: CN=1dbebb1042757d530b12c7b1379e94ea17051874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:0a:49:64:35:f9:ac:33:9c:91:6c:6c:f2:
3f:19:6d:f0:a1:63:f5:10:02:15:89:2f:26:57:a5:
ff:bf:bc:7f:0d:89:be:75:2b:ae:62:b7:56:42:d7:
ce:b6:57:06:82:15:3c:f7:80:35:30:bb:2f:03:94:
6a:46:0a:68:8e:4f:71:5c:33:80:7e:a6:88:4f:ba:
4a:e3:37:f4:4b:48:5c:a7:64:3a:a3:f8:30:2e:cb:
b6:5d:25:1a:94:05:20:ae:73:4d:11:3b:b7:87:30:
fc:32:ea:38:f2:d3:d6:74:99:64:5c:cd:29:34:9f:
86:8f:40:6f:f4:cd:b2:1c:1b:5d:eb:bd:13:7d:19:
9e:cb:9f:15:41:99:ce:a1:81:43:3c:c1:ed:53:8e:
9c:db:11:f1:98:a2:81:87:48:b9:b8:43:6e:f0:34:
87:ec:c9:31:47:0d:04:c9:3f:bd:77:de:fe:3f:5e:
a8:68:fe:17:a1:f8:82:66:d2:fe:a1:4d:c0:f8:1a:
55:8c:53:a9:3b:8b:f0:af:5c:df:43:d3:c4:d1:32:
7e:10:26:21:dd:69:2a:d6:68:54:2b:16:c6:66:2e:
0d:da:9a:de:cf:89:d4:40:2b:cd:90:dd:c5:86:45:
12:37:12:31:89:b0:4f:a9:7c:41:bf:6f:ce:66:af:
8b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BE:BB:10:42:75:7D:53:0B:12:C7:B1:37:9E:94:EA:17:05:18:74
X509v3 Authority Key Identifier:
keyid:9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b8:21:cc:ee:5e:d7:15:91:a3:47:aa:aa:50:c2:d7:0d:ab:
3f:ba:1c:4a:10:54:cc:ba:83:13:c2:d3:01:09:53:ea:75:97:
26:0a:40:12:01:bb:e8:dc:5c:66:60:38:fb:37:23:1d:a6:1a:
b5:9e:04:e7:d3:f1:24:85:46:7a:9f:e8:6e:cf:b7:b2:26:70:
ce:36:3c:4a:f7:3a:6c:77:90:49:33:c9:aa:47:d2:e3:0e:fa:
3b:42:b3:d0:70:ed:0f:6c:13:98:a2:a5:a8:86:ca:6b:83:10:
05:a7:83:24:37:40:ec:91:ac:7e:f2:df:1f:4b:af:68:8b:f4:
66:fa:1e:17:24:a9:24:34:02:4e:eb:ab:fa:ff:9c:bf:6e:f0:
ba:c5:90:2e:ce:ff:e0:04:d2:6a:be:e8:e6:d3:b3:4a:2b:9f:
4a:3e:1c:25:87:65:1d:2c:88:46:b7:38:87:ee:53:ac:9e:85:
2f:9a:20:73:e7:1e:7f:45:9d:a1:16:db:8f:7e:bc:64:ee:12:
f3:33:ae:e4:8b:63:7d:10:dc:21:c1:eb:1e:68:e1:5b:62:ed:
a8:ca:e8:c4:05:ab:1a:3d:a4:54:66:c9:a8:89:bd:a4:40:69:
bc:09:9a:3a:80:01:70:36:fa:e4:74:60:fa:b1:3a:30:81:48:
1f:a4:d6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:47:31 2025 by rpki-client