Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
File: 9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json)
Hash identifier: DSXx71LEhE9GVDxof6z3zcpA853OArh+6Lbn50dl2wQ=
Subject key identifier: C6:7C:74:63:AF:27:F5:FB:AA:5C:D9:A0:09:69:D2:27:2B:5D:63:70
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 01976E195F452A950C4E3C68746B24138186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 11:00:45 +0000
Manifest this update: Sat 14 Jun 2025 11:00:45 +0000
Manifest next update: Sun 15 Jun 2025 11:00:45 +0000
Files and hashes: 1: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: PWTLMf49lbCt81eD5PNZx4jtC/t6yMt8X1UV0Iygai4=)
2: B9CXmyFJNB3NRKLw7pcYD1T3USA.roa (hash: o1kjShDcQ5C/vUtm9CAhci51t+PYFYlIsERtctgtwmA=)
3: R22iI1mywVUVnDgDeyudtXDFOv8.roa (hash: EJnfxzuCupdtpPIwG2LRwVFupOoF9Zl3laDZ5Fu0Lzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:5f:45:2a:95:0c:4e:3c:68:74:6b:24:13:81:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: Jun 14 11:00:45 2025 GMT
Not After : Jun 15 11:00:45 2025 GMT
Subject: CN=c67c7463af27f5fbaa5cd9a00969d2272b5d6370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:47:fc:aa:bd:f3:42:cd:95:69:6c:ae:85:
a8:35:34:59:ee:b1:14:fe:44:fc:5c:9c:97:7e:d3:
db:7c:33:94:8c:6e:c6:ba:ab:5d:66:74:eb:65:4b:
09:52:59:00:e9:b7:12:06:5e:7e:5c:0d:e8:bf:b1:
ab:86:cd:92:7a:42:24:f6:e9:0b:53:b6:c8:29:0c:
55:f3:4d:9e:5b:ad:be:44:c8:13:46:e8:d0:a1:24:
09:0b:da:74:b8:e9:ca:6b:66:63:96:7a:c3:60:e8:
a5:fa:40:94:c7:65:56:8b:08:d4:03:47:e2:93:09:
be:fc:57:ad:91:66:be:c2:b4:2e:ca:d6:20:76:60:
72:be:d8:21:9c:cd:3d:db:b8:9a:4c:43:5c:6a:6b:
9d:97:fe:0a:d2:7b:a1:45:c6:ab:8e:0d:2e:03:1e:
49:cb:17:21:c2:65:92:a5:06:eb:41:f7:dd:f4:d0:
c1:a0:6f:bb:16:fd:6c:15:a2:09:60:88:9f:f5:66:
23:72:8b:d8:31:74:0b:52:f9:2e:df:19:98:c0:a5:
36:b9:8f:b5:b5:5c:e4:90:39:f7:82:c6:99:8d:12:
38:f9:fd:34:c9:a5:90:3c:15:b3:7c:87:c5:39:8e:
b0:ae:8d:e0:cf:e6:0e:fb:ad:93:bf:5c:46:b8:33:
7b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7C:74:63:AF:27:F5:FB:AA:5C:D9:A0:09:69:D2:27:2B:5D:63:70
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:34:ce:74:d3:f3:fb:10:fa:09:18:f6:9b:74:98:9c:bd:39:
09:73:ea:85:27:08:17:0b:a9:24:00:18:08:44:b4:39:2c:05:
2b:96:9d:89:d3:06:81:2e:5a:0d:cc:43:4f:04:77:58:d2:ef:
ec:f3:9d:04:3c:b6:d9:2b:72:f3:bc:38:ce:70:12:c3:fe:43:
bd:9f:bf:5d:5d:42:7f:cf:83:16:5c:76:04:03:94:84:17:b9:
05:0f:39:2d:ad:fe:88:7c:a7:8f:5b:99:b3:b3:0b:8a:8c:c8:
a6:c6:33:b8:53:cb:3e:1a:92:bd:df:4a:43:82:ea:ea:f3:c8:
14:19:dc:54:1d:2a:5b:0c:d3:86:5d:f6:1e:24:84:db:d3:de:
8d:8c:5c:42:95:1f:a4:dc:27:54:3a:a5:eb:7f:a8:e1:62:dd:
f2:98:a5:6f:47:6e:2b:ca:6a:08:11:18:cc:f6:c7:c4:cb:2b:
35:fc:6f:e4:ff:c7:14:d1:6f:43:fe:3f:e5:d5:04:7d:e3:02:
d4:3d:8f:94:48:7f:53:5e:60:08:d5:0d:ea:0d:e2:b3:c6:d7:
1c:42:ce:ed:01:81:78:3a:28:1c:16:96:b4:5d:58:d9:1d:f3:
39:45:32:60:de:6b:16:4a:c0:a1:05:e5:5f:67:4b:61:87:9b:
bc:bd:98:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:36:02 2025 by rpki-client