Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
File: d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft (raw, json)
Hash identifier: le87ritrmz/8jg6y8kHTUfMWcpASZW9mcoIFYw7KPnc=
Subject key identifier: 00:62:4A:35:E0:DF:E5:C2:85:30:E7:58:4C:23:43:96:58:80:09:2E
Authority key identifier: 77:DF:CF:09:82:48:68:69:B7:1D:BD:B7:CC:61:3C:4B:38:13:67:C4
Certificate issuer: /CN=77dfcf0982486869b71dbdb7cc613c4b381367c4
Certificate serial: 01977AF9549011F10715EEA8A6CA686FD7CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
Manifest number: 0D13
Signing time: Mon 16 Jun 2025 23:00:49 +0000
Manifest this update: Mon 16 Jun 2025 23:00:49 +0000
Manifest next update: Tue 17 Jun 2025 23:00:49 +0000
Files and hashes: 1: DaccjHojB95-TCoADZK32YMFyKo.roa (hash: ihqtrBhocSRh86RahK6DG9qn8vgDTCS7AhN7/gul0Fs=)
2: d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl (hash: zWH9rOhDYLLFOHWf5qUrC4yrU+pfnOoS+PZ1XMIJ9hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:f9:54:90:11:f1:07:15:ee:a8:a6:ca:68:6f:d7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dfcf0982486869b71dbdb7cc613c4b381367c4
Validity
Not Before: Jun 16 23:00:49 2025 GMT
Not After : Jun 17 23:00:49 2025 GMT
Subject: CN=00624a35e0dfe5c28530e7584c2343965880092e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:ba:41:da:d7:37:a3:84:d1:ea:ca:f5:26:
3e:b8:66:78:ba:dc:7f:4a:f5:45:31:29:0c:82:81:
e9:ec:73:5a:00:36:7f:5e:b6:bd:9e:c1:f1:a8:0e:
15:f6:b6:6d:f3:1f:b3:9f:6b:69:ae:da:09:6c:a1:
dc:08:9c:eb:1e:25:82:6a:aa:3e:cf:2f:67:0c:a8:
9c:21:64:66:90:84:ed:12:1b:48:03:27:99:2b:fb:
c9:39:ae:40:79:62:cd:55:74:fd:b1:ca:d3:5b:3a:
3c:ba:18:94:62:22:20:98:9d:42:1f:30:b6:5a:b5:
18:3e:f4:9a:48:aa:7e:c7:12:a6:15:1d:cb:03:b6:
2f:20:aa:c6:ee:df:04:e1:b5:b8:a6:d7:00:78:45:
f6:26:a0:db:cd:9f:b2:48:8c:85:a5:d5:3e:3a:fc:
60:c6:bc:36:dd:26:c9:27:a4:e5:3d:ef:1c:b7:c3:
77:25:6d:7e:07:9a:00:88:8c:ee:33:ed:42:88:ab:
6b:fa:1a:d3:3e:44:d2:2f:ff:58:82:2e:69:28:9c:
24:2c:37:0e:8e:7d:25:51:a3:6d:10:b7:80:80:71:
1e:ee:08:c4:11:c3:2f:4e:3b:62:05:24:cc:65:89:
8a:f5:36:96:6d:38:fd:1a:32:37:9d:74:eb:5f:9a:
cd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:62:4A:35:E0:DF:E5:C2:85:30:E7:58:4C:23:43:96:58:80:09:2E
X509v3 Authority Key Identifier:
keyid:77:DF:CF:09:82:48:68:69:B7:1D:BD:B7:CC:61:3C:4B:38:13:67:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:91:07:1a:01:ef:63:95:21:15:c1:17:53:41:18:82:3e:ec:
73:c1:a8:e8:e2:ef:89:df:ed:5b:df:8f:c6:a2:b2:8b:ad:0f:
6a:f1:1f:78:66:da:ba:ee:9c:98:7c:73:29:c3:3a:db:90:76:
7d:71:54:a4:e1:6f:7b:e8:43:03:64:cf:cf:db:b7:10:75:ee:
24:98:0c:8f:06:ba:9c:d2:30:af:8f:95:dd:ef:2a:88:b3:85:
9a:98:1b:c8:f8:4d:05:e4:bb:17:11:36:bf:a4:82:73:71:89:
41:54:6a:6a:ae:a9:08:1f:e0:c1:60:de:84:1b:88:85:6c:68:
e2:6a:c2:4a:a2:2a:7e:e2:b1:15:88:84:a8:3b:16:de:fd:ea:
d8:d1:25:58:77:4b:a7:aa:af:92:9f:78:0e:9a:44:f8:2f:81:
98:32:a6:35:c1:31:9f:b6:22:21:7b:e5:df:0b:69:bb:18:2e:
8a:6b:29:e5:11:65:c7:fb:09:72:16:cb:e7:d0:2b:21:52:25:
1e:28:cc:10:aa:84:92:3e:b9:b4:02:60:0b:e2:67:7a:4f:78:
1d:3a:28:1e:c3:ef:75:df:3d:7e:e3:4b:85:8c:ea:34:4e:a7:
7c:8f:64:b0:a6:d8:6d:aa:54:fa:9a:5f:08:d4:e3:4b:b6:07:
a0:32:09:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:43:24 2025 by rpki-client