
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
File: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft (raw, json)
Hash identifier: Ty1JQS+qP7SQ62SrSlWNyLzHg0Q0iSNKSM7JKB2G/lk=
Subject key identifier: 8E:80:A6:CF:53:7D:0F:68:3A:56:7C:7C:40:7C:05:36:2F:8F:0B:CA
Authority key identifier: F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
Certificate issuer: /CN=f4dcb5741e29352ddd42469270178506008a4140
Certificate serial: 01976FD0A95C3B2F00F63B5DF1A5B74C9BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
Manifest number: 01FC
Signing time: Sat 14 Jun 2025 19:00:35 +0000
Manifest this update: Sat 14 Jun 2025 19:00:35 +0000
Manifest next update: Sun 15 Jun 2025 19:00:35 +0000
Files and hashes: 1: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl (hash: W5yvUfajrlQEsKooLKlRSSag1quuaqK8/SW08TPHrxc=)
2: T3T0ZkFQFPUc2BEd0op7sYAz8XA.roa (hash: WuXt/ChkvGDFgO8WDo1RKpja79/oAcXrCCkvEETR+EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:a9:5c:3b:2f:00:f6:3b:5d:f1:a5:b7:4c:9b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dcb5741e29352ddd42469270178506008a4140
Validity
Not Before: Jun 14 19:00:35 2025 GMT
Not After : Jun 15 19:00:35 2025 GMT
Subject: CN=8e80a6cf537d0f683a567c7c407c05362f8f0bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4d:78:10:2b:ed:36:3f:12:72:bd:51:f4:f0:
69:27:6f:b5:9d:8f:25:cb:6a:a2:5b:02:14:bb:36:
e3:ab:68:7d:05:49:20:45:cf:2d:c2:d0:d5:65:47:
96:99:22:06:0c:be:fe:81:27:d9:22:a6:97:f7:50:
b1:ae:69:13:33:54:6f:89:8e:f3:f9:85:3a:dd:c9:
21:b3:93:5b:ee:bc:9f:3d:e7:cf:fa:ed:56:d8:37:
a3:79:32:bb:83:42:94:65:5e:df:a8:98:fc:a9:50:
14:71:d7:2b:dd:42:77:68:78:f2:ec:eb:a0:51:fd:
af:a5:fa:c8:8f:4f:79:9b:4d:9b:3d:bb:7e:b6:26:
20:42:96:16:3f:c0:a8:71:94:eb:79:a1:d5:1d:bc:
a8:8b:f4:4b:a7:28:dc:1f:50:fa:b0:c4:79:1f:2c:
aa:20:49:0a:b2:6b:ac:00:48:b9:51:9e:3b:d4:e7:
c7:1d:d6:2c:06:f7:9d:78:36:99:e0:b0:f6:be:b1:
7c:65:2a:1f:fc:2b:0e:2f:b6:2c:6b:2b:06:f1:34:
4b:e8:51:85:59:f3:5c:39:16:dd:2e:de:70:a6:c2:
16:30:df:a4:50:04:fb:9d:d6:b7:86:a9:8f:f8:47:
5a:ac:c9:14:23:05:d5:43:a4:2b:43:af:07:31:0c:
74:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:80:A6:CF:53:7D:0F:68:3A:56:7C:7C:40:7C:05:36:2F:8F:0B:CA
X509v3 Authority Key Identifier:
keyid:F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5e:93:c4:aa:92:b3:59:02:da:6c:5d:72:f9:b4:d6:04:e2:
89:7b:58:e3:ca:d4:44:74:40:64:18:13:d7:da:ac:93:93:5a:
92:1f:b8:47:91:81:99:d5:b0:ed:fe:dc:bb:49:5d:bc:ec:0c:
f5:58:1d:05:ec:8f:19:a0:20:da:12:7f:86:59:5b:e1:4e:ba:
84:2a:7c:d9:06:b3:81:d9:87:96:ff:30:51:f7:d9:ee:77:b0:
f2:86:04:79:43:7a:b3:89:2e:58:ef:80:15:29:c3:57:52:7c:
13:84:81:8d:d8:cb:8f:3b:ca:7c:4f:27:c6:cd:d8:42:c1:8c:
4f:01:83:5b:21:d3:94:12:af:9c:84:4e:01:6a:30:5a:2e:0d:
4d:f1:b8:b2:90:91:b0:e9:6e:48:9d:f2:b5:2d:c0:72:93:65:
18:7b:a9:0f:11:26:23:08:89:bf:cf:7a:e4:3d:5b:52:67:6b:
32:65:8e:b7:c6:a4:96:0c:91:78:48:44:22:46:d8:87:48:3e:
25:eb:4a:a8:cb:de:8d:4e:f3:9b:95:51:c2:a5:ec:e5:7d:5d:
bb:80:72:ce:22:46:8b:03:d0:f3:9e:c5:95:44:1c:7b:e7:f5:
34:b1:34:19:40:04:7b:8c:17:8d:ea:79:90:1e:21:61:88:47:
be:4c:7b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:41:29 2025 by rpki-client