Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
File: r9v0VgEKm9FJQcoskcpTPn71F4o.mft (raw, json)
Hash identifier: Jq/QV+ERb/wqQUkBsy4l+577hNiujVMV3SHzIBH8Li4=
Subject key identifier: 9D:96:7C:6B:A7:32:8C:36:5A:CD:23:4A:A2:8F:59:F8:96:C5:27:8B
Authority key identifier: AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
Certificate issuer: /CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Certificate serial: 01976D3DF4D815924C1E54A5654FF9FAE699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
Manifest number: 0E67
Signing time: Sat 14 Jun 2025 07:01:06 +0000
Manifest this update: Sat 14 Jun 2025 07:01:06 +0000
Manifest next update: Sun 15 Jun 2025 07:01:06 +0000
Files and hashes: 1: ajkzuEH8FnXzD6y9WqgTkvcAyWQ.roa (hash: ezeCzHTBFnMMCDhX8NkCA6ybD9xQfKuL+xUd+x4C3b4=)
2: r9v0VgEKm9FJQcoskcpTPn71F4o.crl (hash: LNXIAjxbULb0+d1JzwVJwnLrY7eH5eIMMBwj709dubA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:f4:d8:15:92:4c:1e:54:a5:65:4f:f9:fa:e6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Validity
Not Before: Jun 14 07:01:06 2025 GMT
Not After : Jun 15 07:01:06 2025 GMT
Subject: CN=9d967c6ba7328c365acd234aa28f59f896c5278b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:83:2d:c4:16:9c:01:a0:98:92:33:2a:30:
e7:a9:f3:b5:2f:15:7f:12:3a:af:1f:e0:77:9d:f5:
d4:a9:27:5b:de:d3:16:8a:28:24:26:28:3a:dc:44:
4a:00:23:f4:35:30:2f:ff:cd:e3:95:25:c2:d3:98:
4e:5d:bc:68:13:4b:75:83:9b:e6:25:6c:9e:99:3e:
68:c0:00:b1:56:09:6a:c0:4a:f1:ae:2f:3a:b4:75:
1c:80:00:9e:98:ee:6c:a3:bf:b7:54:c8:65:c7:6b:
a4:da:1b:fe:23:8b:ab:1e:0a:35:d8:22:6d:73:be:
5b:fb:de:e2:a3:09:a5:88:9f:60:f6:39:a0:ec:37:
7d:77:27:45:e3:ec:bf:64:28:8e:ba:2e:1e:93:ed:
31:a4:50:64:b8:c8:e6:3b:d8:49:72:61:60:2f:5e:
5d:d8:2a:19:98:da:43:24:7b:35:0c:b2:5d:ff:5e:
6b:ab:37:e3:0d:2b:56:75:42:c2:bc:1d:53:d4:04:
f8:3b:59:69:f0:58:b9:69:bd:2e:54:21:46:78:9f:
26:e9:71:e7:0f:85:fd:42:ff:09:00:bd:b8:9a:bf:
78:45:0d:73:33:38:f9:8a:6f:c3:d0:7e:c5:4a:0c:
0a:21:c2:97:c5:cf:9c:71:d9:43:42:98:ef:6a:b8:
3d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:96:7C:6B:A7:32:8C:36:5A:CD:23:4A:A2:8F:59:F8:96:C5:27:8B
X509v3 Authority Key Identifier:
keyid:AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0b:d1:c0:aa:b2:13:7f:54:9d:db:6a:36:ed:10:e3:e2:25:
8b:71:37:fb:aa:af:39:2b:ed:9c:b5:58:64:55:9b:e6:97:da:
9a:82:df:cd:4d:81:06:3f:d3:d0:d9:3f:a3:de:16:9a:c3:aa:
1e:e8:91:48:63:2a:01:32:f1:09:20:f2:9e:10:dd:6e:67:1a:
73:bf:10:c2:59:94:cd:fb:e2:0f:68:8b:0c:b4:e6:78:d1:9c:
45:2d:47:43:dd:27:d0:ae:d0:dd:5d:95:e0:da:45:d8:83:64:
0a:d1:bc:7e:4a:ee:31:3e:a8:16:dc:90:79:92:f2:bf:f8:8b:
81:37:5d:3a:84:3e:e5:c6:74:51:2a:c9:de:5e:d9:88:51:d5:
de:ba:97:2d:82:fd:c5:d0:18:36:cf:6a:ea:5d:87:21:52:bf:
26:99:38:b4:1b:52:72:64:5e:67:8d:f3:ca:b9:5a:0c:3a:1e:
02:1f:6d:23:30:40:20:86:c6:79:ff:9c:35:5d:47:28:6c:5d:
0e:e9:3f:73:c3:f4:3f:35:b4:0f:95:c3:d4:79:2d:be:2a:79:
02:46:13:f2:2d:fb:74:fc:86:62:88:7d:44:6c:88:47:18:4f:
58:90:90:06:c5:fb:dc:22:a3:b7:0e:81:00:a5:06:69:62:63:
64:6c:37:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:49:49 2025 by rpki-client