Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: 2YuvgKzXOlEft3BnaffGbem6nxCmcKlhfc4gAwX6WPQ=
Subject key identifier: 68:37:55:B8:3A:B7:D4:1F:C1:25:2F:81:AE:05:34:E1:BF:EC:B4:61
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 01976D3E089E58062E10544937D5E6208E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 070A
Signing time: Sat 14 Jun 2025 07:01:11 +0000
Manifest this update: Sat 14 Jun 2025 07:01:11 +0000
Manifest next update: Sun 15 Jun 2025 07:01:11 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: lNsnJNtO+gMz6XkAZn6scTh0XUz76nj/cH0ywvy1xHo=)
2: UDIr7Vq2PCUxH-_0XwBbpbKATWw.roa (hash: UYUs+F/DqN2VeFPscjP3XMb/LrOdKx6NTNq37FV037I=)
3: u0FRx2j9PY9XanBbcgTrVe_Co_s.roa (hash: 1340NaWcsmaESfpzP0gVpyoyLiK505bktgSP6n8xPII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:08:9e:58:06:2e:10:54:49:37:d5:e6:20:8e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Jun 14 07:01:11 2025 GMT
Not After : Jun 15 07:01:11 2025 GMT
Subject: CN=683755b83ab7d41fc1252f81ae0534e1bfecb461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6f:58:37:4c:1e:63:11:e0:ea:05:1f:7a:7e:
41:4a:be:2c:85:b2:4d:71:80:18:4f:5c:41:3c:9e:
ec:3b:ef:db:77:ba:6f:37:8d:ba:7b:2f:d4:73:e8:
63:c9:ff:62:dc:af:d3:b0:c6:0d:33:75:c5:78:e0:
46:a0:15:90:bb:3c:0e:53:e3:80:ff:c2:31:23:6c:
ee:cf:ff:b5:b4:e0:d4:77:53:e5:90:71:82:53:59:
ea:af:33:d6:7d:cf:59:5a:2e:33:6d:ba:bf:ec:03:
d0:d2:1d:c4:ad:6f:00:1c:60:e5:3d:24:e5:3d:4b:
a3:dd:06:3a:96:2d:f7:7e:97:57:04:b2:ab:e0:d1:
17:81:d1:f1:07:40:38:7f:7a:ea:1c:52:4a:8a:53:
85:6d:09:17:51:b5:6a:8a:70:9c:60:52:45:e2:93:
1b:f5:6b:a0:1d:2c:10:12:fb:48:75:86:e7:f0:a0:
7e:16:af:06:7c:56:a6:38:01:72:de:ca:b1:bb:e4:
30:db:dd:3f:33:39:a5:ed:e7:7a:cd:2b:1e:d6:b5:
61:ac:cb:1b:c8:0b:fd:d6:b8:5f:53:bd:a8:b8:2d:
25:a5:23:3a:bc:c2:3c:c1:0b:54:f4:ec:03:cc:db:
3d:90:73:2f:02:87:ad:96:f6:9d:32:57:3b:7c:a5:
bf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:37:55:B8:3A:B7:D4:1F:C1:25:2F:81:AE:05:34:E1:BF:EC:B4:61
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6b:9b:ef:3d:92:db:8e:9f:f3:63:0a:5c:4d:36:0a:23:99:
12:12:f1:e9:36:2f:ae:9e:e8:7d:4e:79:6c:8d:c5:47:82:dd:
5b:9e:91:09:06:0d:a9:50:ef:c8:f3:f4:c1:75:31:70:5b:05:
5a:d3:12:fd:b4:2d:92:02:fb:09:97:4f:09:c3:07:09:e0:85:
63:32:61:67:27:fa:61:3e:a8:14:af:a0:e4:56:87:d0:93:83:
ec:68:34:f2:ad:48:cb:84:41:1f:e4:67:ba:e0:e1:b9:7b:93:
41:ab:7b:6b:a4:b9:17:78:33:00:a6:b4:32:4a:11:bc:10:9c:
54:e4:02:9a:01:4c:26:9c:c6:ca:79:5a:e0:05:9f:d1:4a:8a:
f8:d7:65:7d:eb:f0:5c:e6:d6:fa:9c:4d:0b:69:6e:61:32:c0:
d7:23:7a:8e:1b:3f:fa:e1:bc:d8:85:27:9a:f4:e5:6c:3a:a0:
99:42:9b:b3:99:aa:3a:7a:65:ac:3b:9d:dc:ea:4b:bb:af:fb:
1a:ef:ea:b9:b4:02:c9:09:9b:a5:75:e1:ef:9e:f0:68:6b:8c:
de:4b:33:a5:7a:45:10:b9:6e:87:e3:33:71:b3:f2:8a:69:8d:
04:bf:7a:1d:31:fc:08:b2:0a:39:0a:23:e7:51:95:3a:f6:5d:
f0:1e:83:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:48:02 2025 by rpki-client