Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
File: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft (raw, json)
Hash identifier: dM2R9jku0Hp84LPO0F6JIyr1reR/Wrs5CVqb28NSI6U=
Subject key identifier: 2F:37:52:D3:A0:1C:9A:00:E4:CA:AE:42:50:A8:30:37:90:5D:4B:A0
Authority key identifier: F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
Certificate issuer: /CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Certificate serial: 019772D1AAA9802191033654DE4E7559BE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
Manifest number: 03FE
Signing time: Sun 15 Jun 2025 09:00:32 +0000
Manifest this update: Sun 15 Jun 2025 09:00:32 +0000
Manifest next update: Mon 16 Jun 2025 09:00:32 +0000
Files and hashes: 1: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl (hash: q9+nye0Jv/DIywdaceEC2aV57OijdRTItzIFYLcqZ1M=)
2: pcJxxqpyhZF6JL4G4VK7HBS4yYA.roa (hash: PZShrCQ10JtHGLNXwnmCPSpnucUc5Ex85jH4ClAc2jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:d1:aa:a9:80:21:91:03:36:54:de:4e:75:59:be:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Validity
Not Before: Jun 15 09:00:32 2025 GMT
Not After : Jun 16 09:00:32 2025 GMT
Subject: CN=2f3752d3a01c9a00e4caae4250a83037905d4ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cf:25:03:67:65:4c:b4:74:c1:7b:27:62:bc:
bb:4f:c2:40:d7:93:8c:ed:52:8a:df:8c:e5:31:8e:
85:08:18:b8:e6:c7:8f:d4:07:86:98:4f:1b:7a:75:
f5:07:73:1b:79:a8:22:4e:ed:ff:ed:11:eb:2c:d4:
b9:14:5c:04:43:90:fb:5d:66:6c:1e:6f:28:8f:4d:
47:03:5c:d9:47:60:f4:5b:06:90:d7:58:9a:e7:8d:
7e:58:92:16:a5:1a:20:a7:4d:c8:b0:b5:af:d1:25:
88:30:41:6d:5b:49:39:a6:a0:87:d1:3d:74:81:76:
04:9b:7e:f4:e3:f3:d0:07:2c:bf:00:a6:c6:8c:24:
28:18:12:2f:19:8d:a6:92:93:23:ee:aa:e2:bc:8a:
f8:ed:c8:7a:b4:a6:b3:84:f1:47:86:f1:73:10:94:
06:65:0c:46:db:db:0e:17:57:85:1f:db:1a:5d:ef:
61:9b:c4:85:5d:c6:87:63:f9:02:bf:05:84:e6:57:
79:fe:02:cf:69:6a:b7:97:fe:55:4b:77:13:23:97:
e1:ff:78:ed:c3:e6:87:ed:53:e1:60:e7:43:fb:75:
f7:28:57:0a:04:3a:51:e8:26:23:af:29:9f:a6:51:
0d:38:bb:1a:37:da:ac:85:79:09:ce:44:f1:d3:3f:
39:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:37:52:D3:A0:1C:9A:00:E4:CA:AE:42:50:A8:30:37:90:5D:4B:A0
X509v3 Authority Key Identifier:
keyid:F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8c:82:d6:52:04:48:a3:14:e4:d3:2e:3e:9f:9f:ae:f3:aa:
4e:08:77:dd:0f:7b:2b:a4:40:a5:1c:5f:d0:21:46:37:00:41:
31:69:9f:08:0f:54:1a:40:30:b5:13:be:0e:2d:00:e6:82:73:
31:cf:5d:88:60:d6:b8:3c:0e:ce:e0:4f:da:2f:18:23:f1:a9:
cd:f5:67:12:1d:e2:c1:d1:f5:91:ea:f7:87:1f:b3:9f:46:38:
12:09:4a:59:bf:52:ca:31:22:b7:22:e1:09:c2:59:14:95:c8:
61:4d:42:2e:e2:ae:4f:c8:c7:5d:26:1b:59:81:bf:9b:cd:e3:
6b:bb:c8:33:be:21:89:9f:64:b8:8f:87:f6:ab:15:e0:fc:36:
9a:4d:d7:80:13:5e:48:e8:e8:83:c3:79:c7:db:cf:93:9d:16:
31:a8:eb:95:38:ae:22:58:fe:36:10:fb:34:6c:a2:ad:19:b2:
8f:ad:0f:d3:3c:bb:40:1a:81:7b:60:8a:f5:25:74:06:49:08:
f6:b7:06:b6:af:0a:83:c4:c2:cf:59:bd:d4:64:c8:07:c8:1b:
f5:ca:16:44:c8:6d:9b:66:47:84:2d:1a:7d:0f:b0:ad:17:53:
4d:0c:31:c4:1e:2e:5c:b4:6e:61:2f:30:db:c5:15:86:f4:58:
08:75:5e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:43:14 2025 by rpki-client