Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
File: p9nJ2x4fiGAXe__cWPDvzZm5as4.mft (raw, json)
Hash identifier: cb3yluQQVi3gndD1JNWGSO8URSZVVBkBQFAy/yxC9U4=
Subject key identifier: 03:88:53:69:57:D6:CA:09:77:B4:B5:FA:DF:50:6E:D2:A1:5E:5E:35
Authority key identifier: A7:D9:C9:DB:1E:1F:88:60:17:7B:FF:DC:58:F0:EF:CD:99:B9:6A:CE
Certificate issuer: /CN=a7d9c9db1e1f8860177bffdc58f0efcd99b96ace
Certificate serial: 01977F7AF574DE31CAEE10189CCACAB3540B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
Manifest number: 0D71
Signing time: Tue 17 Jun 2025 20:00:54 +0000
Manifest this update: Tue 17 Jun 2025 20:00:54 +0000
Manifest next update: Wed 18 Jun 2025 20:00:54 +0000
Files and hashes: 1: lC2KQAOisVOwxCnTUOf6nl08y8o.roa (hash: /DfGXFX3mvJ80lD2tCLD0oWxnch4EP1FqZDjENG9stE=)
2: p9nJ2x4fiGAXe__cWPDvzZm5as4.crl (hash: KU1LGvPRIHakvaqA4YK23GwjOlc4RQDiPif0gARIHrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:7a:f5:74:de:31:ca:ee:10:18:9c:ca:ca:b3:54:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d9c9db1e1f8860177bffdc58f0efcd99b96ace
Validity
Not Before: Jun 17 20:00:54 2025 GMT
Not After : Jun 18 20:00:54 2025 GMT
Subject: CN=0388536957d6ca0977b4b5fadf506ed2a15e5e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:53:37:55:53:bc:57:2b:c3:83:db:02:18:02:
7f:8a:0d:6f:9d:10:f7:d6:68:bf:f5:90:07:cb:92:
9d:9f:76:ee:f7:64:24:6f:b7:b9:37:4b:df:16:f1:
37:fd:ee:a9:13:65:3a:76:2d:7a:7a:32:90:ea:17:
d0:3e:ad:1f:24:3f:af:cf:d7:26:9e:4c:0e:6c:ca:
7e:d5:c3:a8:73:98:05:7a:65:67:18:ba:3d:29:92:
7d:d4:2c:e5:28:ee:b4:23:81:c1:3b:f4:d4:fc:39:
eb:21:14:4f:bf:61:d8:81:49:9e:84:50:f9:3e:c5:
7c:5c:58:c4:bd:58:f0:a6:c8:d1:c3:13:89:e0:0f:
93:79:cb:74:73:36:3c:6e:b5:f9:ad:6c:dc:de:46:
a1:25:02:c7:c8:89:47:29:95:b4:12:50:04:57:9e:
64:82:66:5c:c6:0d:6e:30:07:ff:ae:4a:c1:1b:7d:
93:ae:5d:06:f1:e9:e2:7a:d5:73:41:70:d8:b1:e5:
5b:55:4f:0c:6e:10:82:a3:ef:32:0b:9e:d1:5d:48:
04:99:65:83:d1:3e:58:52:b9:a6:82:46:df:e2:de:
5a:f7:b4:0c:d6:a5:c0:78:ca:d7:02:19:fc:58:5c:
83:31:e9:36:46:6a:99:fb:af:da:ce:14:d3:58:90:
1c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:88:53:69:57:D6:CA:09:77:B4:B5:FA:DF:50:6E:D2:A1:5E:5E:35
X509v3 Authority Key Identifier:
keyid:A7:D9:C9:DB:1E:1F:88:60:17:7B:FF:DC:58:F0:EF:CD:99:B9:6A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:77:13:4f:f3:df:05:3e:3d:2b:dd:aa:50:e4:ca:e1:ef:58:
79:18:e4:8d:48:dc:8b:20:2b:1f:42:5d:af:ee:37:82:53:62:
25:8c:9f:cc:ee:6d:0b:d4:d3:ad:61:f5:58:b9:ed:9d:72:40:
6c:62:71:7a:e5:06:0e:45:74:5f:31:b9:b4:90:a6:2e:e3:b5:
69:78:4f:38:ff:f2:8a:13:29:4c:8e:d9:cc:58:f4:85:0e:b1:
55:09:d2:6e:8b:c3:f5:ee:72:a3:6e:61:7a:c8:91:4a:28:de:
98:08:68:85:26:07:48:48:a6:bf:61:c6:c7:91:76:41:1c:36:
bd:2d:4c:2d:6a:da:36:a1:bc:b2:1c:48:45:f9:57:b6:c2:89:
29:b4:6f:64:67:a2:d1:a4:f4:34:b8:49:03:42:15:e3:1b:5b:
e1:da:30:28:c6:eb:fc:03:61:1b:23:19:73:d7:b8:a3:b7:9e:
61:e8:9d:db:04:1a:14:84:90:1b:e2:fe:c8:93:14:f7:77:c1:
1e:57:e8:69:3e:4d:81:1b:8b:cb:c8:e2:ec:3c:77:a0:0a:6e:
a2:1d:62:b5:c1:60:91:da:cf:08:0e:85:b8:1e:fe:47:a3:8a:
dd:77:1f:b7:18:13:5b:98:54:a8:fb:07:8a:f4:7c:16:e0:03:
c9:7b:4f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:21:39 2025 by rpki-client