Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier: UcKiLvd2NyT61BDlrvUk6+GGAvc8Kpa3gOI83pxzT4k=
Subject key identifier: 0B:E2:B0:EC:D1:C0:CE:07:F4:56:5B:4A:01:76:CB:D4:B0:94:A7:78
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 01976F2C4DCFFBE3D95E0E8554A02716D031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number: 09A4
Signing time: Sat 14 Jun 2025 16:01:03 +0000
Manifest this update: Sat 14 Jun 2025 16:01:03 +0000
Manifest next update: Sun 15 Jun 2025 16:01:03 +0000
Files and hashes: 1: 1-Gv3E907MTfXuMPmsscWz1qmn78.roa (hash: uBQT6rIDTqX3BYBvMNRkEwe9KRdLtsmbFCKT0keUzwo=)
2: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: 2mOIrUjxzhTTWx2U6RK5dV2HX1HAVJfjW1JS7O3O0MI=)
3: I8ts4VChZIvxCXnk3zghDL9Bmu4.roa (hash: Md6prX/mk6M2hIPa7lBG6X8P2VoqSBLYC0PebMg3Wr4=)
4: hHiGsmfrhsgON9dzVYozxtuCCDg.roa (hash: z4ZF0Gqq/BQZKQszFHzmotHi4BZqgEpR8VtVskzydjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:4d:cf:fb:e3:d9:5e:0e:85:54:a0:27:16:d0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: Jun 14 16:01:03 2025 GMT
Not After : Jun 15 16:01:03 2025 GMT
Subject: CN=0be2b0ecd1c0ce07f4565b4a0176cbd4b094a778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7e:4e:ba:e7:22:07:4f:22:39:fd:67:f4:7f:
c6:58:b9:30:89:8c:a9:f1:48:a1:9b:d8:12:e6:36:
22:5c:62:9b:8b:c3:45:14:fb:db:18:2a:72:2d:dd:
e4:5f:89:14:79:f4:a2:ce:5e:d2:e9:4d:41:72:68:
74:49:a6:c0:7b:99:fe:3a:f9:be:92:5e:29:6c:1d:
9a:98:71:3d:b0:c5:09:55:48:e1:37:bf:c9:57:af:
56:77:69:e3:69:e9:b0:92:99:7b:7a:9c:72:57:17:
d0:5e:80:e7:19:01:4a:19:a9:4e:92:17:94:20:7c:
c3:81:65:47:68:57:6d:9b:4a:b7:fa:8f:48:77:11:
f9:cc:1f:98:67:6a:58:00:f7:67:e9:ac:b7:7e:b3:
72:3f:0c:50:7a:66:a0:43:fd:a3:20:d9:b6:00:35:
8f:a7:4a:a9:39:3a:05:50:9d:5d:c2:35:93:d0:36:
d0:b8:ad:d0:b0:05:59:59:b5:f5:da:e3:52:a1:5d:
9f:0b:35:de:4e:38:b8:25:30:20:d8:3e:9a:91:d6:
9c:a7:0a:24:0d:74:f5:19:e3:e5:f8:4d:b4:2b:0c:
f3:1d:0b:74:a3:09:f9:64:f5:0a:21:c3:47:2c:a4:
45:c4:46:f2:34:85:ca:c5:f1:30:cb:d3:04:a1:9f:
b7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E2:B0:EC:D1:C0:CE:07:F4:56:5B:4A:01:76:CB:D4:B0:94:A7:78
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c7:db:16:ff:6e:bd:c8:ac:c3:26:0b:80:48:89:a2:20:ef:
51:2d:87:e5:0a:b1:1c:bb:d0:ce:d6:c1:ec:54:80:2d:2d:99:
58:cd:ba:13:c7:78:47:b9:65:4e:75:6f:92:0d:60:28:36:c7:
af:16:95:65:69:33:dd:2a:9d:dd:be:92:78:4c:06:69:ed:82:
64:92:45:11:b4:42:dc:b0:39:6f:ad:ad:c3:83:f9:74:5b:40:
cd:a3:a0:25:0c:27:0f:86:55:8d:78:74:d1:e1:3c:63:e9:84:
74:d7:34:ba:ca:c1:fd:b0:59:da:b8:ef:46:53:84:b5:45:00:
f6:83:72:fe:1a:15:aa:43:b3:9e:3f:53:e1:e2:a5:50:13:cd:
bd:fa:3a:97:75:b1:1d:94:36:b9:51:90:f8:53:4d:f4:41:d0:
d2:14:78:10:86:5d:77:c2:70:64:b0:67:43:30:13:3e:77:70:
e0:37:72:68:1c:0f:ec:cb:dd:10:3d:11:41:d7:ee:7c:91:c2:
a2:a5:4e:af:f0:f7:17:b3:87:6a:75:83:97:5a:16:20:b2:c4:
a1:c6:2d:32:ac:dc:53:4d:57:8d:83:db:71:e6:09:15:45:b4:
0f:8b:e4:d9:58:9f:b3:a6:53:d4:17:d8:0b:86:bc:b6:3f:2f:
85:5c:b6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:18:35 2025 by rpki-client