Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
File: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json)
Hash identifier: ByFZ6ffdtE1LfOc17HtC8eeozXPsFkJ5bkOvuOUWC8U=
Subject key identifier: 1E:17:50:F9:B2:9C:17:DA:76:A7:C9:4F:8D:ED:92:F1:0C:CB:AB:EE
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 01976D070AE92F0955ED23AD7D6C8521F55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
Manifest number: 11DC
Signing time: Sat 14 Jun 2025 06:01:07 +0000
Manifest this update: Sat 14 Jun 2025 06:01:07 +0000
Manifest next update: Sun 15 Jun 2025 06:01:07 +0000
Files and hashes: 1: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: C1ELd0o4Zjdw1jSM81MyC/7Nei4red9DSR9nc4LqUfs=)
2: PAFl-pG2JHaMz_7ipR6yMf63H8w.roa (hash: byy0wWUqy3xmET5bVuzwYGsa7Zk9Dk0kE6IQV8R/QgY=)
3: jZL5Xhdd_DQTPlseqK0seytctFM.roa (hash: iK3t86giIYaf8WbR2Oyl7XO/RS0ik8f6mwnnTPsecrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:07:0a:e9:2f:09:55:ed:23:ad:7d:6c:85:21:f5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: Jun 14 06:01:07 2025 GMT
Not After : Jun 15 06:01:07 2025 GMT
Subject: CN=1e1750f9b29c17da76a7c94f8ded92f10ccbabee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:20:88:7b:f7:33:0c:ea:25:c2:d5:5b:cf:1a:
a6:23:7a:d5:ce:f9:75:a2:bb:75:41:19:0c:da:13:
d3:f3:fb:db:bf:ac:7c:e3:b6:56:d4:bf:d8:53:35:
e1:e2:23:73:d0:ac:1d:6e:3d:2a:e0:4d:9b:92:99:
75:a8:2f:59:43:04:7e:35:c1:2d:54:4e:e3:ac:1e:
ad:70:02:dd:63:e9:31:00:a2:ad:d0:3c:ff:ef:29:
eb:ec:47:1b:b6:93:69:5c:1a:96:32:cd:ee:b0:f7:
19:16:3d:04:f7:5f:5b:d0:ca:1f:b7:39:ff:48:b9:
e8:3b:a6:c4:ba:76:29:84:68:b2:af:60:01:c7:26:
96:b1:db:2b:7e:12:ef:75:37:ac:17:1b:e2:d7:85:
65:d5:bf:95:59:33:86:78:74:58:9f:b5:c3:24:b0:
c7:04:f4:e9:fc:f0:53:8e:a2:78:fc:cc:26:c4:7f:
56:32:da:a5:ef:e9:b8:c1:c3:aa:d7:1e:f5:8e:88:
ba:61:16:14:ba:09:2c:7d:a2:27:48:57:d6:14:48:
e7:03:45:ba:95:5f:9d:10:f4:2d:dc:e7:56:ac:19:
0f:cd:18:76:6c:35:b9:aa:82:48:fe:e2:46:ee:bf:
d5:f2:1e:c4:0b:3c:f7:8f:da:b0:84:d2:6d:b1:07:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:17:50:F9:B2:9C:17:DA:76:A7:C9:4F:8D:ED:92:F1:0C:CB:AB:EE
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4c:27:3c:60:db:c5:cb:56:be:8d:4b:65:d6:0d:6a:22:a1:
96:f4:49:81:6f:62:20:79:28:99:b1:33:bd:89:84:78:4e:88:
24:fc:dd:43:1f:9d:42:ca:f0:9b:e2:6d:db:40:a3:ab:f1:0c:
6e:15:84:92:b9:d4:c1:18:14:90:5d:90:69:ad:85:3f:0b:d0:
d2:df:12:c7:f6:9e:0e:22:bf:94:a4:58:d4:f9:9d:98:c9:67:
e3:3e:6e:6f:3a:d0:f1:03:6c:8c:95:75:bb:4a:35:23:36:28:
af:ed:93:5b:61:f2:d7:48:3d:41:00:ee:3b:7d:60:5b:d2:df:
ed:d5:cf:d8:03:c5:2b:ec:66:a3:9d:7a:61:4d:63:82:c4:21:
00:bd:22:85:4d:91:92:5a:30:81:d6:b7:51:43:75:ba:9d:b4:
52:34:4e:bd:28:44:93:b8:c1:82:55:2d:c1:9a:54:3f:0d:67:
d6:f6:47:37:43:35:b0:84:8c:11:64:6e:ae:75:f7:c8:e8:29:
b2:5f:ed:6c:63:23:fe:c1:3e:97:dd:7a:4f:c1:07:7b:91:ff:
16:62:a2:6b:fd:92:d4:35:93:16:7c:91:40:f6:fe:f5:d9:27:
84:c2:21:2d:d4:29:bd:d0:6c:70:62:5c:77:cd:fe:00:61:32:
5b:44:8f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:44 2025 by rpki-client