Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
File: h9qWV60f35jec4uxmnPv0NsLOio.mft (raw, json)
Hash identifier: jopm4WTptNHLp5r2UGW0UdM8OUoUzlPXJrzPOleyfBk=
Subject key identifier: B3:59:72:37:63:11:BF:D6:59:13:99:15:ED:7E:B1:C0:9B:6E:6B:19
Authority key identifier: 87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
Certificate issuer: /CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Certificate serial: 01976EF534E5A10C772359EF0768619B60FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
Manifest number: 2F
Signing time: Sat 14 Jun 2025 15:00:52 +0000
Manifest this update: Sat 14 Jun 2025 15:00:52 +0000
Manifest next update: Sun 15 Jun 2025 15:00:52 +0000
Files and hashes: 1: 2GTFPZ68uVkX8Ryfbx92fDQ9upI.roa (hash: lvp+RlxYyEIMygF5MN9RWgH0GLslbYAMM+G4pVyVmkU=)
2: h9qWV60f35jec4uxmnPv0NsLOio.crl (hash: L+NCD4flayovM4RHEQ6hgof4JBCc3HMi3+816Ldt7nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:34:e5:a1:0c:77:23:59:ef:07:68:61:9b:60:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Validity
Not Before: Jun 14 15:00:52 2025 GMT
Not After : Jun 15 15:00:52 2025 GMT
Subject: CN=b35972376311bfd659139915ed7eb1c09b6e6b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:71:f2:b8:87:64:b8:c8:73:3b:83:3a:5c:
cf:c8:55:5b:bd:df:38:16:95:69:ad:f3:96:4e:12:
6f:d8:74:9c:4e:d7:c3:1d:92:f8:36:34:99:f3:72:
d2:49:dc:18:35:ef:81:c5:6a:80:f5:18:c9:11:c0:
75:e9:5a:cd:bc:30:d3:6b:e1:ed:85:a5:46:8b:10:
86:f5:d2:96:91:57:08:16:d5:3e:1f:2b:9d:b1:3e:
62:90:24:e8:a8:05:d9:20:55:a4:66:51:52:67:83:
15:78:a2:a0:7d:4e:05:db:e9:fe:93:67:7e:3a:c6:
65:db:55:ec:0e:1a:64:80:3f:45:d5:94:6a:de:14:
64:c1:49:cd:04:d4:ea:d3:b4:cd:85:2c:a6:b8:96:
f4:6f:0b:d9:d8:b7:eb:a5:b6:a4:1c:40:e9:3e:08:
7d:f8:4a:0f:33:40:2e:5c:23:bb:27:37:9e:f1:31:
ff:7f:f8:0f:dc:60:15:af:8e:b0:3e:21:b2:3f:c3:
b4:79:94:a1:c4:2e:a8:2b:ac:13:98:29:4c:80:14:
2c:d3:08:93:fd:f0:12:3b:54:a4:ed:84:9f:7c:17:
76:ef:89:86:29:75:26:76:66:30:ce:d5:0c:77:52:
36:76:b1:ba:83:1c:b3:1c:ab:78:28:86:85:b7:51:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:59:72:37:63:11:BF:D6:59:13:99:15:ED:7E:B1:C0:9B:6E:6B:19
X509v3 Authority Key Identifier:
keyid:87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d7:25:6e:92:98:31:db:51:aa:fd:d3:51:a3:14:3e:fb:f2:
6b:aa:a2:2e:29:4e:de:83:0d:ae:8c:7c:d4:70:06:70:73:68:
35:34:60:fc:3c:a3:af:7c:84:66:93:3e:ec:a4:f1:da:f6:a6:
fb:87:9c:84:ae:2f:ce:f6:fd:2c:fb:68:dc:f3:85:16:e3:84:
ae:2c:78:4b:f6:aa:c3:d5:40:2c:75:1d:d0:36:ec:d7:49:55:
e3:57:31:96:3f:ee:43:4b:42:b3:31:81:e1:7d:a9:19:08:ff:
5b:1a:f5:08:43:00:9a:22:e4:1a:54:03:83:75:f6:0f:2d:02:
1a:35:f8:9c:b6:ea:cc:47:ec:b4:31:9c:7e:92:0d:03:3a:43:
07:0b:3b:09:ca:c8:54:8b:16:33:c5:6b:cc:d4:b3:00:f2:6d:
69:c1:f4:58:0a:8c:59:7b:88:35:29:12:85:1d:a2:09:29:0b:
de:2a:ee:33:6d:3f:90:64:93:c5:ef:d7:ed:48:e8:21:89:ff:
3b:23:93:ec:52:aa:40:2c:68:04:b0:90:1a:d0:c6:66:bf:dc:
b7:84:cb:4b:0c:f0:b0:3a:bf:dd:0e:e0:06:88:67:c2:0d:a9:
9e:10:b3:bf:08:73:25:39:dd:23:70:68:14:5f:bf:c6:57:86:
36:c7:65:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:56:29 2025 by rpki-client