Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: cQ0rpuT290PDEgikgrIcI81hR67/VdG+/GVB0ySYWWw=
Subject key identifier: F9:24:33:A4:10:9F:44:9F:B4:D6:2D:6A:B3:B5:B2:5F:04:A5:47:1B
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 019769CEF97920C6CCF19F0695C4B2AA863C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 0DFE
Signing time: Fri 13 Jun 2025 15:01:01 +0000
Manifest this update: Fri 13 Jun 2025 15:01:01 +0000
Manifest next update: Sat 14 Jun 2025 15:01:01 +0000
Files and hashes: 1: UFy4W10oicxgmbeQ9Qsjx3EgCQo.roa (hash: duZf8h2S3aFjJNNyhBun9TsZgrWqDeY96HLWVCbzObE=)
2: V78L3J5oIjHVBChvXIOgu9Ohs78.roa (hash: CdwTBRVREg2srUT+l5SA7LltUlSHpLsaVjkjqAH9C7o=)
3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: zgyXW2aou4vQqGgidCLaR06YQCim8Ap9ZPdb9HEXWZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:f9:79:20:c6:cc:f1:9f:06:95:c4:b2:aa:86:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Jun 13 15:01:01 2025 GMT
Not After : Jun 14 15:01:01 2025 GMT
Subject: CN=f92433a4109f449fb4d62d6ab3b5b25f04a5471b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:90:14:90:82:79:50:4e:74:48:b1:75:64:
1a:55:97:00:e0:92:a0:2b:85:06:61:ab:d0:cd:9d:
35:fc:5c:30:0d:29:21:25:b2:3d:be:1a:cc:a0:5a:
cb:5b:98:0a:fb:46:d4:6b:75:ac:6d:4d:b3:50:5b:
dc:f9:cb:d5:da:c0:5a:ab:5e:ee:26:57:32:b3:b4:
db:32:ab:9d:1c:4c:52:9b:24:fd:4c:6d:4e:60:d5:
17:b2:69:e1:cf:a6:2b:10:ba:84:57:17:39:15:9b:
a4:43:ea:8d:ab:c0:b2:7f:b9:34:bf:8e:41:e9:c7:
2c:ba:d6:df:fe:78:db:ef:9d:55:db:ce:ff:21:1e:
1c:f7:98:f8:14:d7:b8:d7:7c:8e:f4:4c:a1:4f:3d:
07:bd:a8:da:6a:92:43:d4:d5:b0:c6:3e:e5:17:5e:
35:8a:9f:6a:7c:37:0f:16:76:5f:55:f5:25:4d:53:
82:ae:cc:26:0d:f5:37:62:bf:3b:77:80:a8:c1:ce:
fd:a9:ba:a1:e1:e3:7e:a0:e6:c3:81:e1:76:43:c2:
7b:15:73:aa:2e:29:b0:f8:b1:9b:14:db:05:73:d4:
16:8c:4c:0c:7b:2b:cd:53:f3:7c:c5:99:21:5c:0a:
a4:9d:ad:02:8a:74:fa:df:46:8e:ba:76:c6:70:14:
07:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:24:33:A4:10:9F:44:9F:B4:D6:2D:6A:B3:B5:B2:5F:04:A5:47:1B
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fd:00:43:48:b8:8d:ed:51:84:df:17:40:78:73:5b:ca:5b:
4c:56:4f:f3:6f:ae:01:9a:cd:c2:9a:14:75:47:ee:59:08:6f:
16:ad:d1:b8:73:28:6f:f2:4e:44:d3:c1:a5:fe:22:ba:24:c0:
a3:93:e5:e5:e6:79:f0:d1:d7:5a:ee:5c:83:a1:10:b0:27:24:
a5:a1:9c:ff:19:57:70:66:e7:11:62:ae:c2:a5:b9:fe:a0:2b:
b2:1a:7e:69:49:4d:81:13:85:5a:76:0d:9f:bd:0c:90:da:a0:
30:41:92:92:d3:46:d6:76:43:c3:fb:79:2c:b2:fd:d1:11:51:
f4:d6:9d:43:87:16:a7:59:cc:e1:37:97:7f:3f:f7:db:61:41:
3e:50:9c:b1:26:17:ba:f8:31:39:5a:19:eb:0b:64:b6:48:e7:
6f:c1:db:75:46:23:08:e9:b9:e9:09:24:4f:d1:70:25:83:36:
e9:7b:31:28:51:09:d5:69:ea:a5:30:9d:cd:74:b4:ca:1f:90:
7a:05:9f:52:18:85:bd:4e:e7:b8:fe:9d:33:67:77:b8:64:31:
83:50:af:3c:6a:1b:42:36:83:32:3a:9c:ba:e1:e3:39:47:2c:
79:e6:e9:23:8b:4f:f3:c4:d8:e5:e0:29:0a:80:3a:06:ef:f3:
00:b4:55:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:47 2025 by rpki-client