Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json)
Hash identifier: x2qkgLxlb9PhNdyJLrC+XgffIhGCSUR2FYRcZJpcmtk=
Subject key identifier: D4:1F:17:4C:C3:7A:8F:A5:28:80:A0:BC:FC:E2:8D:8C:B2:8B:79:7B
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 019781D7654A133B271898033D608B739BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
Manifest number: 15AE
Signing time: Wed 18 Jun 2025 07:01:06 +0000
Manifest this update: Wed 18 Jun 2025 07:01:06 +0000
Manifest next update: Thu 19 Jun 2025 07:01:06 +0000
Files and hashes: 1: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: +hyp70EWZlORu7g0BQaLVvVtIdTji5VNobWvpWg3+Dc=)
2: DY7axdNUahmM11yaDw51VfAp67s.roa (hash: bUYyC3SF16Sa424fYOC0qhaN4vyFKANSqCH+D1gEZQg=)
3: HEoZmTdVM-DeFe9X3PrPHHx8iEk.roa (hash: 9udpTWaNqTHQ+GFwYOitrLQw23wqjYK6MW1sHvnpqd4=)
4: PrNUxz0yba76t8wY55c1zKXm_Oo.roa (hash: m1KBoMWL6Rj5bP0aLVgjFWVkvzcAuAcBVIFoqutIMt8=)
5: iO7A1owMbqCMA0Lg3ovjgVWh5Dg.roa (hash: nx9vqvzmG0weAt/3Wd6gNUhHUSRbH2clt0yaQ7fWpF4=)
6: oAbqR3kG7LoiZXxF1UQ_LftT7BQ.roa (hash: 5h2TCAddmyCEmv2EclM4C4a677ny0YxlmBdSG7ml6N4=)
7: vmadOBoOk6niwocbLQBsll2qRrw.roa (hash: zQDs58AuBVhnIjhnpftladMye3nflU9pDFBdocMEldo=)
8: z2wQNkzDkZfaAKh_ssLZfxbhYgc.roa (hash: ccA776YRey2wE5rLtAhOmx43QdG5Twqc3fRZfQPAbDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:d7:65:4a:13:3b:27:18:98:03:3d:60:8b:73:9b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Jun 18 07:01:06 2025 GMT
Not After : Jun 19 07:01:06 2025 GMT
Subject: CN=d41f174cc37a8fa52880a0bcfce28d8cb28b797b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:53:65:cb:e8:86:77:e9:f2:6e:cc:8a:21:
ae:0e:2c:a4:68:4a:7e:9a:a2:31:b6:05:03:42:2f:
67:2b:1b:62:93:81:ee:a0:b1:23:8f:69:4f:fb:8f:
87:a1:75:f2:7a:30:2f:99:95:8a:a6:f5:14:e9:e9:
d3:ba:81:6c:0a:8d:5d:47:dd:91:43:a5:53:4e:ea:
34:f1:08:de:a9:b8:ea:ed:53:a5:c3:32:63:06:82:
06:47:ac:6d:7b:ec:64:df:44:c3:7f:3d:1c:b9:d7:
cc:d6:51:9c:ad:4d:27:9d:d1:92:13:a5:af:27:43:
2c:d7:93:9e:7e:f3:e5:33:6d:6c:9b:fe:17:fd:3c:
f9:a2:ab:52:61:53:db:74:83:1a:df:4f:f2:b4:81:
c9:e4:ab:93:37:3b:95:43:4e:7f:1e:ff:9a:11:f5:
31:9a:34:76:aa:f3:2e:dd:84:7b:d6:61:d2:fe:f5:
8b:5d:46:ec:b2:44:d0:25:fa:e5:62:2b:6d:7c:06:
4c:3e:17:01:16:b1:7b:f2:4c:50:c1:b8:6e:6b:ab:
21:5b:11:a5:2b:95:66:6a:43:14:2e:94:92:f6:cf:
f3:6a:ad:88:b6:97:ad:b4:c6:11:6c:bd:50:8a:dc:
93:0b:d9:db:62:5d:f3:f0:45:2a:a4:da:dd:90:02:
5d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1F:17:4C:C3:7A:8F:A5:28:80:A0:BC:FC:E2:8D:8C:B2:8B:79:7B
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:4b:9e:2f:5c:75:7c:77:4f:34:ad:ff:6d:df:14:d8:65:7c:
54:1d:e3:b3:a1:8e:bc:f3:dc:c6:3b:c2:00:05:65:27:81:64:
5a:0e:29:e8:3f:12:82:09:ae:70:39:b2:6a:6c:79:00:39:77:
14:a1:ee:9d:56:48:12:75:f0:c4:41:35:13:42:ce:a5:dd:86:
23:2d:bf:77:ac:a2:f2:6e:d1:d1:9e:f3:f1:46:ef:d5:80:21:
58:16:52:b5:66:69:b5:0b:a7:0f:60:03:fc:d6:a9:8a:0a:63:
28:a5:6e:c7:dc:65:2a:7e:dd:5e:d3:82:cb:14:0b:cb:09:53:
44:d7:9e:d4:39:e4:43:3b:8b:38:2b:8d:51:36:1b:9a:10:30:
fe:1e:84:38:7a:e0:2c:d3:6a:b9:6a:ad:8d:e8:bf:6c:78:3b:
66:d2:a5:ea:34:c1:19:e8:30:63:72:92:40:72:54:7b:42:2a:
d5:2e:1d:26:18:8c:2c:37:0e:5e:df:f1:2c:ca:58:9b:30:c4:
13:91:28:5c:74:0c:3c:5f:4e:d4:cc:15:dd:c8:38:98:ab:1f:
66:ef:ba:e1:3c:59:6d:8c:e0:15:77:c0:25:d3:60:bb:4a:1e:
5c:ba:2c:92:1e:e1:46:bc:07:cd:96:4e:2d:01:36:ec:a8:fb:
55:d3:b7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:27:22 2025 by rpki-client