
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier: 36dHlLnY+opFuvuQVYXcGPLlwsJSfn3DZBNekZ84f84=
Subject key identifier: 86:C6:7A:28:9C:88:8E:2E:72:61:E4:20:56:FC:6D:EE:19:5F:33:25
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 019788484B62535B32727F573CEC4BF1248E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number: 1391
Signing time: Thu 19 Jun 2025 13:02:08 +0000
Manifest this update: Thu 19 Jun 2025 13:02:08 +0000
Manifest next update: Fri 20 Jun 2025 13:02:08 +0000
Files and hashes: 1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: v7xMwo3o1xO2MvldpBXmcS1OzqEUv6nYA3WhnLHC1cY=)
2: BiMv8HqHvhESPjdfNiZspDWMcck.roa (hash: VDtYCMJvov6A+4AQvfrZcV5PKPedCXfg7qI6T/gVIIY=)
3: Ss5v8qqCfPgnwpyM50tDxRLgrEE.roa (hash: hD0+G5MXyDM1luyb7ODeIqLQR1bD/LfiGebJK14aPaI=)
4: id6tq9B8Miy7wJM6L5HxddzH87k.roa (hash: oCe30Ut+jcQoEpHEArIn6mGQ5oeRKOfvgjQV4Jelj2s=)
5: ySaeFcHOtz6rH7T-LHaZk4KLgY4.roa (hash: kRBm8C5K+JyK4jIZs00HDTzQAvxAZ6ZeitYKBzGUqMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 13:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:48:4b:62:53:5b:32:72:7f:57:3c:ec:4b:f1:24:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Jun 19 13:02:08 2025 GMT
Not After : Jun 20 13:02:08 2025 GMT
Subject: CN=86c67a289c888e2e7261e42056fc6dee195f3325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:57:15:2a:a3:0d:5a:b1:6c:44:5e:77:56:
cb:d5:de:65:a8:d0:d0:e4:88:0e:0e:d3:fa:8e:9a:
87:9e:5a:de:af:35:98:61:0b:2d:6f:bd:3a:7b:49:
a9:7f:29:c7:29:a9:ca:e5:c0:22:0d:7a:40:ce:6d:
6c:50:e4:cc:2d:95:7d:71:83:ab:50:2d:58:3a:34:
17:85:80:bc:41:9b:41:01:b8:33:b9:c1:53:0b:ea:
ee:28:49:6f:59:69:74:95:9e:62:f7:8f:b7:6d:56:
b7:fc:fb:27:a9:50:e3:32:17:0f:33:fd:77:cd:a5:
10:ac:04:d3:f9:ae:13:6f:af:45:98:d3:d2:9d:8f:
a4:af:88:c3:5f:a5:9f:84:91:ff:55:ff:d4:06:00:
74:85:c2:f5:45:ca:46:73:ad:f3:f9:67:bf:43:b7:
d2:7f:51:45:ba:1e:13:c9:79:ee:6f:3d:fb:93:38:
ef:6b:c1:f2:14:54:cc:bb:15:93:eb:2d:ad:b4:3b:
ec:ab:0a:27:00:25:d1:08:fe:c8:43:45:a5:31:67:
17:b3:04:92:db:69:3f:f6:96:65:bc:35:f3:8e:67:
86:29:bf:a6:21:b3:3f:41:68:1d:61:2b:c9:15:1f:
36:c1:c9:74:1c:84:4d:e2:b5:b8:3b:d1:ff:69:ad:
8b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C6:7A:28:9C:88:8E:2E:72:61:E4:20:56:FC:6D:EE:19:5F:33:25
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:74:26:87:43:71:cf:cc:79:a1:83:ee:3b:b9:b7:e6:c0:47:
b9:06:17:f7:48:1f:9e:96:c0:44:9c:65:db:3d:dc:10:80:c8:
02:af:1b:b6:e3:b3:0b:3f:f3:0b:48:f0:de:b5:68:3c:a3:a1:
e0:0f:80:81:ab:23:b5:d9:7d:b7:bb:92:7f:a1:a6:63:8c:51:
a5:f2:c7:a4:5b:56:8f:45:10:6c:3b:a1:fd:55:ff:c1:b4:91:
e4:e7:a2:bb:8c:7d:5a:88:87:ba:4c:44:e9:79:60:12:88:b5:
6a:c8:e6:49:e2:97:60:2e:4e:fb:fa:ca:cd:f9:d1:13:e1:55:
e7:06:92:d8:85:18:2c:0b:6e:74:83:07:90:26:6a:08:bc:7e:
b8:a7:dc:f8:c1:a2:06:8c:8b:77:29:61:0f:e2:e9:4b:81:97:
3f:75:4b:17:17:04:e1:c6:24:1c:1b:a9:03:04:7b:a7:de:6e:
6a:ea:f5:32:7e:98:6c:33:ae:94:c4:71:ac:e6:34:c0:72:be:
8e:dd:e8:f5:dd:bd:ee:66:be:31:ec:16:8a:1a:a1:ce:5b:f4:
14:48:1e:b6:50:4b:53:e5:13:5b:ad:90:4d:4e:7b:99:b4:22:
50:1a:5d:b4:07:f1:2e:bf:22:f4:3b:79:c3:a3:eb:78:b3:10:
30:20:cd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:30:28 2025 by rpki-client