Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier: sRQLq/M1ME+agE8XLY12OzW859WAEI4ysYV+1C7UT4g=
Subject key identifier: BF:DF:4C:03:07:47:73:69:ED:29:FD:58:04:3C:0D:3F:D8:20:9E:26
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial: 0197703EF4D3D14EA3CB9F2BC9168CCC04E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number: 09BA
Signing time: Sat 14 Jun 2025 21:01:03 +0000
Manifest this update: Sat 14 Jun 2025 21:01:03 +0000
Manifest next update: Sun 15 Jun 2025 21:01:03 +0000
Files and hashes: 1: 9jRjdTO7fBkjcFHt1fnUnaX_T3k.roa (hash: 3WY7AgxSwDZyrJrZX0H0mFMYrwb18tzFjzAuAbCSY+Q=)
2: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: wSolp2naskdWTeCeJ2rhjZ11hNupVILUGhzWwsyk4Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:f4:d3:d1:4e:a3:cb:9f:2b:c9:16:8c:cc:04:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Validity
Not Before: Jun 14 21:01:03 2025 GMT
Not After : Jun 15 21:01:03 2025 GMT
Subject: CN=bfdf4c0307477369ed29fd58043c0d3fd8209e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:04:a2:8a:2b:5b:ba:39:58:7c:2f:c0:a9:ab:
44:d5:09:dc:16:b9:e1:8c:f7:8b:aa:ba:34:12:d9:
5f:be:fe:76:70:f1:9b:ea:ca:40:a9:29:56:42:e1:
cb:ab:b8:4b:07:32:8d:b0:bc:49:f0:a9:2c:ff:60:
fd:51:e8:e0:ff:6a:68:68:13:5c:a4:3e:26:ac:5c:
c3:8c:21:d3:3f:ec:73:87:20:1e:e1:08:80:0c:24:
bd:8f:32:cc:0a:be:cb:54:c3:a9:89:25:d8:ba:20:
50:ed:1d:1a:41:64:43:6d:c6:e2:81:6f:9b:dd:9d:
cd:42:f0:a4:1c:fa:a3:cf:4c:67:0b:c2:02:3e:c4:
4d:48:df:94:06:94:d9:66:bc:84:b9:0d:b8:d7:f9:
cf:66:c2:0d:43:47:69:9e:cb:d0:20:d1:fe:7d:9a:
04:1e:5f:f5:54:3d:25:f1:f5:bb:b7:e2:12:54:03:
f6:5c:23:af:40:8e:9a:54:e7:04:43:08:ef:5c:91:
8f:bd:8b:b5:ce:63:b9:c8:28:10:d5:1e:58:ca:1f:
36:45:a1:8b:71:71:c7:52:be:d4:76:0b:37:e7:67:
92:08:ba:5e:34:b0:76:39:0a:92:bf:63:96:c3:54:
5f:97:e3:32:b1:58:41:8d:9d:79:4f:97:52:32:c7:
6c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DF:4C:03:07:47:73:69:ED:29:FD:58:04:3C:0D:3F:D8:20:9E:26
X509v3 Authority Key Identifier:
keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6f:98:03:77:2e:fe:16:ad:11:2c:f6:a8:fc:fa:d1:8e:35:
0b:04:66:87:6d:ad:e5:ac:46:3a:fd:e0:86:93:f9:f9:a7:8d:
2e:ab:b3:d8:64:ff:5d:83:b3:d4:c3:e8:eb:8a:ca:c6:58:4e:
f3:f8:9c:c5:3d:71:ce:8a:7e:05:d7:a9:53:af:0a:ac:e2:0f:
f4:27:e6:4e:b5:40:96:88:2e:5f:fb:52:33:a8:77:80:2d:d2:
bc:b4:eb:ed:d9:a8:dc:72:73:3e:a7:c0:56:07:fd:ec:cf:b2:
11:97:b3:5c:3e:ea:16:67:e8:c6:b6:d9:b4:91:a0:ee:7e:dd:
6b:ba:18:29:9e:3b:1c:77:2d:97:8e:d8:ea:84:ee:6e:f5:b3:
e8:42:7f:2a:67:9d:98:f3:73:e7:41:6b:f1:a7:0e:76:9c:a2:
75:12:32:19:1f:5b:b6:f0:83:3a:d2:41:59:d8:17:72:11:11:
3f:3c:b1:7b:d1:6c:2a:f6:da:5a:a5:5c:c5:0c:ff:d1:7b:9e:
68:53:07:55:0b:86:8b:78:57:5d:8f:f9:02:bd:64:b5:49:44:
b5:b9:8b:0b:07:4d:aa:10:ff:df:5e:9a:55:e7:c8:dc:d0:45:
84:f5:d5:85:bd:1a:82:e3:96:75:95:ef:0e:00:83:22:95:52:
69:16:6c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:05:50 2025 by rpki-client