Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File: 9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier: 4IbH2fUKjFs9HZFSoV+mshMSBlFOZ53ZI6L7c70tIaY=
Subject key identifier: 11:2D:76:9E:AF:D2:AA:8C:06:BD:06:97:F0:9A:8D:22:06:A6:6E:C9
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer: /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial: 0196C2A6CAACD2E7F2B72E7B49E51EB2BA01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 04:00:32 +0000
Manifest this update: Mon 12 May 2025 04:00:32 +0000
Manifest next update: Tue 13 May 2025 04:00:32 +0000
Files and hashes: 1: 3gQqwuDknMD1by1_10QyLFjqTSQ.roa (hash: 7rS6ATpFIQATm/1nB63KRTZ9v2IEBgVrsScfZWZHuYo=)
2: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: X3Xy2uKPQIoiD7pkKW+4GqMZXSFjkpnU8lGQCmGSJXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:ca:ac:d2:e7:f2:b7:2e:7b:49:e5:1e:b2:ba:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
Validity
Not Before: May 12 04:00:32 2025 GMT
Not After : May 13 04:00:32 2025 GMT
Subject: CN=112d769eafd2aa8c06bd0697f09a8d2206a66ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:06:27:e3:95:b1:d4:5e:8b:90:0d:66:97:
29:f5:70:ef:7f:f6:b9:0f:ca:0e:49:6a:c7:8a:39:
d8:f8:d2:0e:64:b0:20:30:9e:79:11:e6:ea:05:3c:
a9:22:54:ab:41:3b:10:f3:86:e8:5a:0a:91:c9:07:
17:c0:df:60:1c:55:1a:93:a6:8d:21:99:93:6b:dc:
71:f9:a8:8e:b1:0d:13:36:04:9e:75:0a:0e:f7:5c:
a5:1c:74:c7:50:b5:bf:e2:aa:0d:db:c5:6f:de:26:
f6:32:34:cf:79:da:0b:c2:21:ed:0d:33:61:53:32:
78:71:71:35:0f:d7:4b:b3:16:4d:98:c9:fe:a5:48:
93:aa:75:8f:44:c7:e2:74:62:f4:f3:20:eb:36:a1:
90:8b:5c:9b:0d:98:d4:22:17:d0:bd:d8:ed:62:34:
8a:05:58:cc:0e:52:bc:30:70:36:d1:2c:bb:48:52:
3b:e6:61:58:9c:fb:3b:c0:7f:b1:45:75:cd:ed:3f:
71:db:9d:43:a8:77:1f:2e:fc:61:07:f7:b9:bc:5b:
83:7e:45:df:ac:59:8c:2d:4c:73:85:4b:4a:0d:f7:
29:dc:a3:30:86:67:01:0f:6e:8c:aa:8d:85:2b:8c:
58:05:ae:8c:4b:f0:ff:26:6d:d8:d6:99:3e:0d:54:
0c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2D:76:9E:AF:D2:AA:8C:06:BD:06:97:F0:9A:8D:22:06:A6:6E:C9
X509v3 Authority Key Identifier:
keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:98:ed:2c:5a:02:e2:bb:5a:f9:22:5f:43:a3:6a:93:08:9f:
4d:a6:ba:bf:7d:f8:fb:16:fd:c4:a4:d7:28:e7:95:4b:89:f5:
00:7a:39:fd:97:d6:7b:2b:68:01:ba:4a:bb:c1:d9:c2:fc:33:
86:f4:2f:9f:94:27:d4:51:77:09:98:bb:63:07:b9:b6:e1:93:
c7:5c:41:f3:9f:e8:b6:a7:a3:70:22:7a:79:40:c8:20:93:ce:
a1:50:c8:cb:36:63:ae:d3:b5:7d:01:21:d7:d1:06:db:df:bc:
b7:c2:26:99:fb:2e:fe:09:82:7a:e2:a5:46:27:da:3d:62:1a:
4b:4a:a1:97:f4:5c:e3:99:84:2b:6b:bc:2d:75:48:45:24:af:
13:98:9b:32:db:6c:5b:9b:89:a6:28:5b:a1:9c:16:d9:b9:b2:
d3:a3:3b:2e:10:df:81:41:6e:2b:12:00:9c:cd:09:04:85:1d:
19:4e:2e:74:50:12:53:3a:74:cb:eb:bd:2d:33:b1:d9:cd:c3:
88:21:5e:7f:8c:ee:0a:8c:90:6a:e3:c9:f1:66:37:83:59:98:
4d:75:9d:d0:b4:a8:88:4b:1c:87:ad:68:c9:50:fa:65:21:dd:
10:e1:b4:04:90:d3:d2:92:8a:27:96:28:50:fe:5f:22:c6:00:
da:18:6d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:59:38 2025 by rpki-client