Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
File: ex9VfuJjyzWaGeos1_oOjJE563Y.mft (raw, json)
Hash identifier: CH9e5zzUMXBMtRjowYGJd0TljZ3sZKiKaDzOOTEpJXg=
Subject key identifier: AB:25:C8:65:95:9B:CA:CC:34:5B:1A:DA:F9:5C:0E:E6:C7:E9:6D:07
Authority key identifier: 7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
Certificate issuer: /CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Certificate serial: 019768BC493317BADEC2EE181BF19C20325C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
Manifest number: 1591
Signing time: Fri 13 Jun 2025 10:00:59 +0000
Manifest this update: Fri 13 Jun 2025 10:00:59 +0000
Manifest next update: Sat 14 Jun 2025 10:00:59 +0000
Files and hashes: 1: 6Sxszx8NiFM_JbWUMjBDeEvUps8.roa (hash: 8MVKcBrtv6jJ845AEcn3hP00h2PQrFrI39BtX0LnXv4=)
2: Ha78yg7qqGZ0v8W1DWmHUAWoLSA.roa (hash: mO1w4kIt1AKbmRPhw4OwRAWPyk0O9BdOZhhOqd4nLR0=)
3: ex9VfuJjyzWaGeos1_oOjJE563Y.crl (hash: /iS38SfHL8XvXHUn+hVhz9s/jfikfkKqPZBtRMIYfNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:49:33:17:ba:de:c2:ee:18:1b:f1:9c:20:32:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Validity
Not Before: Jun 13 10:00:59 2025 GMT
Not After : Jun 14 10:00:59 2025 GMT
Subject: CN=ab25c865959bcacc345b1adaf95c0ee6c7e96d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:29:d0:63:82:ac:0c:91:72:1a:df:a6:44:
06:9a:71:fc:05:8e:94:5d:24:24:0c:de:d0:98:32:
eb:35:45:c0:af:12:eb:61:3f:4f:4b:d8:dd:48:34:
20:b7:ed:3d:51:66:60:10:c4:a4:a6:9d:68:11:c6:
d4:64:e6:f0:c6:eb:db:f4:22:3c:41:97:20:bd:c6:
0b:3d:73:03:1e:5e:1c:22:a7:3b:6d:1d:4c:40:4c:
e1:dc:0d:ab:b8:a6:1f:7b:1b:1e:ef:79:9a:48:62:
43:ae:55:29:cb:eb:20:e7:04:60:34:72:67:71:f4:
e3:f2:74:91:fc:67:de:9e:22:e2:68:b1:ec:d4:7b:
79:c0:48:56:93:f7:61:6e:c0:22:b3:e2:9d:56:81:
eb:ff:a5:84:0a:b7:30:43:6b:31:37:f2:a4:8c:69:
1a:34:83:32:ab:94:87:b3:72:7a:04:95:da:c5:d4:
6e:93:b9:f4:56:69:47:92:fa:18:88:98:a3:34:f1:
0e:e9:00:84:35:c3:5e:aa:e1:f0:b0:37:1c:f7:4e:
52:ac:ed:34:f9:3f:5e:e0:7a:d5:4a:48:c9:f3:97:
5e:02:16:8c:ea:03:65:05:64:f6:46:55:6e:bd:aa:
5a:ed:3a:59:3f:27:36:b8:3c:71:e6:f4:11:08:a0:
87:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:25:C8:65:95:9B:CA:CC:34:5B:1A:DA:F9:5C:0E:E6:C7:E9:6D:07
X509v3 Authority Key Identifier:
keyid:7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8d:e8:f2:94:dc:f7:e5:e0:7d:35:6f:0c:c7:2b:19:df:7c:
b8:a3:5e:1b:90:11:76:11:cc:b2:23:12:53:5d:3e:85:98:02:
d5:61:36:0d:da:50:17:5c:d5:1c:9d:fc:48:17:ea:cf:d5:8d:
ae:18:ce:cc:28:7f:98:51:0d:37:83:58:4c:8f:e5:be:3d:48:
dd:b6:5c:7e:fc:34:58:a7:e4:05:82:94:ac:8d:38:0f:d5:8d:
3c:f9:d7:df:a6:5a:d9:7e:7f:18:f6:89:ef:64:d3:5e:62:05:
1d:d1:bd:af:3c:fb:39:45:2f:05:3e:60:57:53:24:d2:bb:b3:
09:81:75:2f:0f:6f:a7:a7:83:1f:91:da:95:a7:bb:d9:3e:11:
12:40:c1:ff:e6:41:e1:5f:d5:6d:1a:59:d0:57:d7:11:d2:c5:
9c:6a:3e:15:48:64:63:68:9e:11:99:45:fa:6d:ea:06:88:b6:
2f:9d:26:cf:f5:c9:67:e6:d3:53:21:ad:01:23:60:1f:74:bb:
ad:2f:b6:bf:e1:2f:46:77:0e:75:e3:d6:62:9d:a3:47:86:e6:
3f:53:ae:f8:d8:8e:fc:68:94:5d:e1:5e:3d:54:6d:d2:32:8a:
c6:78:6b:53:cc:e4:9f:11:7d:74:0c:e7:89:64:4c:ec:d7:07:
93:13:00:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:30 2025 by rpki-client