Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
File: 9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json)
Hash identifier: K+G2AVSFqcrQ6WKS7iuF37EXt1TDND66u6Nu2+XZBk4=
Subject key identifier: D7:DC:36:F4:40:73:F8:11:ED:A4:FC:A7:A4:2B:5D:79:5D:C5:6F:BA
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial: 01977B302207DA25D9C7ED003D6326FFF43F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
Manifest number: 1599
Signing time: Tue 17 Jun 2025 00:00:41 +0000
Manifest this update: Tue 17 Jun 2025 00:00:41 +0000
Manifest next update: Wed 18 Jun 2025 00:00:41 +0000
Files and hashes: 1: 4uOHcGP0XRhUQP9FQOI9ooL1PSk.roa (hash: A3c3lK9eOK2+oXlJyN8L6YhZDvbwMKgjDORS3hJPEzI=)
2: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: h6i8geR35C8RG5FDzzJ+wjUkAbb3fSuxODWM355yhFU=)
3: C-VlGkt4UijcXV6P3p4QA_nv8Uc.roa (hash: I6wlUhROKZbhSUVuQLxUOY2F8mo+U4zrTtPsYJyoX+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:22:07:da:25:d9:c7:ed:00:3d:63:26:ff:f4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Validity
Not Before: Jun 17 00:00:41 2025 GMT
Not After : Jun 18 00:00:41 2025 GMT
Subject: CN=d7dc36f44073f811eda4fca7a42b5d795dc56fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:86:7c:59:3f:37:98:08:48:3a:e9:74:24:
a2:9a:20:c7:35:89:f3:02:92:48:a8:4e:65:d2:81:
de:10:14:f4:02:c0:5c:65:1f:78:a6:ec:af:02:20:
ba:88:4d:97:df:02:9e:2b:36:a6:19:75:c3:8d:69:
4c:7b:94:5c:80:d7:7c:be:bd:89:b4:9d:d2:e6:56:
8f:6f:18:ae:70:11:d0:99:68:bd:d3:e8:8c:f1:33:
01:92:61:80:24:c7:db:32:9d:9c:64:64:3b:bf:e8:
14:b3:70:bb:d2:4f:35:c1:99:78:3f:7b:b6:ec:e0:
e6:c2:b9:62:34:cf:d3:e4:11:4b:c7:8f:4e:4d:d1:
25:10:16:e3:3a:80:03:7f:c7:fb:95:41:9b:2f:90:
e8:14:56:85:9d:57:82:2a:eb:a9:6a:7b:e1:7d:40:
5e:ed:40:f6:64:e6:a2:53:4d:14:43:92:94:21:7b:
f1:60:06:77:b1:8b:6a:0d:6c:47:17:4f:43:5b:29:
ef:2d:5d:6e:b9:2a:ad:6f:bf:74:15:b2:21:0f:42:
85:17:06:00:53:c5:7f:97:dc:5a:8e:8f:18:c8:a6:
8d:20:43:b2:6e:d0:34:02:00:57:0a:65:30:11:f4:
82:77:6b:6d:cd:12:b5:56:2e:fc:cb:8c:fd:c3:8c:
a3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DC:36:F4:40:73:F8:11:ED:A4:FC:A7:A4:2B:5D:79:5D:C5:6F:BA
X509v3 Authority Key Identifier:
keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:62:71:16:ea:99:a6:4a:1f:24:40:03:cc:fa:1f:9b:46:f5:
c6:29:5d:9d:c5:c8:90:b0:e0:fa:60:12:c4:88:8f:92:2c:34:
75:bf:c7:1e:7a:67:35:93:9d:a4:33:d9:93:05:0d:59:d0:1f:
2c:ac:04:be:fb:25:c7:21:df:34:d6:a6:2a:bd:77:f0:7b:ed:
44:06:ce:29:b7:ec:d0:43:80:3a:cb:e4:ec:bb:db:f1:e9:b8:
f9:66:4c:5b:87:75:02:45:0e:70:82:d3:e8:89:f7:78:46:53:
47:78:6b:42:73:a3:3b:f3:45:41:7b:86:52:f3:6a:ab:fb:4e:
fa:99:f0:63:ef:f2:29:71:f0:83:cd:b1:40:31:c0:85:7f:14:
ce:c9:13:5e:27:57:89:f8:40:c6:3e:5c:97:b6:93:5f:05:69:
fe:e0:2a:74:0b:be:44:0e:82:02:08:26:9c:aa:28:a4:66:b6:
0c:7a:fe:61:85:17:a1:92:aa:d0:2c:a0:ca:84:76:ad:f5:bb:
11:32:d5:30:a4:ad:5f:5f:8e:4b:f7:35:0e:51:b2:ff:50:ca:
86:aa:47:ae:4e:b5:f8:fa:13:47:7b:5c:a2:cc:c6:8f:35:1d:
45:2f:11:69:ef:45:d3:74:62:e4:8e:de:86:55:6b:4d:51:b2:
bd:1d:9b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:00:10 2025 by rpki-client