Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
File: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft (raw, json)
Hash identifier: kOqi1DRETxZ+ksCUy94SHIunAnsBAQw5NCcuWhu6Yz4=
Subject key identifier: B4:A4:A4:A4:B5:03:B8:EC:52:46:5C:41:22:01:BC:0E:35:78:43:3F
Authority key identifier: F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
Certificate issuer: /CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Certificate serial: 0196A6F8A670FE943C0B58EC82E651298706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
Manifest number: 1534
Signing time: Tue 06 May 2025 19:00:35 +0000
Manifest this update: Tue 06 May 2025 19:00:35 +0000
Manifest next update: Wed 07 May 2025 19:00:35 +0000
Files and hashes: 1: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl (hash: Eaerg/xZYaPgezzz21cnOSvm7eUcLbxfyv+3FZ1MNsE=)
2: ZSBBy6W5L8TTtnlSf_uUrt4Z7AI.roa (hash: jFdtASpUm3buRvq9o0f0zIeX/wlw5jgk9wy5omlh1/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:f8:a6:70:fe:94:3c:0b:58:ec:82:e6:51:29:87:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Validity
Not Before: May 6 19:00:35 2025 GMT
Not After : May 7 19:00:35 2025 GMT
Subject: CN=b4a4a4a4b503b8ec52465c412201bc0e3578433f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4f:a9:c1:20:df:9b:0d:9c:2f:f2:f1:0d:14:
7f:c5:5c:eb:dd:69:da:9f:ac:d5:8c:b4:d3:17:12:
85:1d:26:0a:67:c2:6e:a4:9b:f9:30:b0:21:bc:91:
4a:82:82:14:7a:08:ae:b0:71:32:06:46:4c:39:f2:
29:07:ec:6e:e7:c5:08:43:70:99:18:e2:34:81:4f:
37:fa:6b:71:ad:66:01:45:b7:6d:d5:39:07:2b:d7:
74:b1:bc:7b:b8:cd:ee:a1:dc:7b:86:f6:3c:23:18:
c8:69:5d:94:5d:a0:ca:e8:15:40:ea:5f:59:ad:5f:
b6:2b:98:8d:4a:46:c6:bf:7d:dd:6b:68:d5:a4:3f:
fa:3a:ec:bd:5c:a9:af:f1:6d:1d:ac:f7:de:d4:c4:
f4:9c:4b:60:b8:55:3d:30:98:ad:8d:d0:71:1e:39:
42:3a:76:14:eb:20:7f:95:57:93:57:5d:e9:15:59:
8e:a8:10:a7:71:6a:c7:22:3e:b8:d8:99:41:6e:d0:
21:fc:00:3c:18:70:99:89:bd:69:0c:37:3c:37:87:
02:c0:d8:10:0d:23:da:f5:0d:e2:3c:21:9e:11:a8:
3d:78:e4:b2:54:c3:7c:04:e7:ed:f9:9f:d2:74:e6:
8b:72:8a:4e:f6:e1:cb:28:4b:02:8e:44:f2:8c:f8:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A4:A4:A4:B5:03:B8:EC:52:46:5C:41:22:01:BC:0E:35:78:43:3F
X509v3 Authority Key Identifier:
keyid:F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:57:ad:92:ae:be:53:73:ad:ed:c0:50:bd:ea:c8:bf:c5:0b:
53:5c:08:b1:a1:51:4e:28:e6:d8:6f:b0:d1:d2:be:a8:bd:0a:
9b:1a:c7:bf:19:e1:36:30:a5:93:80:0a:22:cd:63:15:11:af:
06:96:fa:3a:49:37:d0:44:1d:a7:74:63:fe:39:82:72:64:57:
b3:62:6c:9f:f1:27:65:f8:bb:70:eb:80:16:b8:10:d0:41:44:
fb:9e:5e:95:ab:14:dc:c7:57:b6:52:b2:c0:f4:da:24:d8:b1:
84:d4:7a:55:c8:f6:c5:e3:3d:52:69:7c:21:28:8c:dd:6c:23:
d2:5c:69:f4:dc:d3:47:26:9e:b7:bd:57:57:12:b0:90:53:b1:
ff:fd:84:97:86:2c:25:d5:e1:62:76:7f:e8:92:3d:ac:d9:1b:
e0:53:10:ee:f9:9e:56:3a:07:d9:2e:7b:00:d9:14:52:26:f3:
25:e3:e6:26:8a:e6:f7:8e:9b:fd:1c:b1:e9:1d:ec:6a:1a:c5:
cd:8a:8e:13:b7:46:e9:62:a9:7b:24:ae:1a:24:49:67:d6:b6:
ea:de:ed:3e:38:c2:83:01:ca:b7:a5:6a:7a:61:4e:6d:21:91:
7a:33:af:6b:7e:d8:e5:16:7e:64:f3:ed:cf:aa:2b:5d:ce:89:
a3:83:f5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:22:11 2025 by rpki-client