Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json)
Hash identifier: l+1X8rRtYGvQb+g4iYQ0HEO896eT6DV0oFQXIiBnruw=
Subject key identifier: D5:E4:41:77:ED:37:6C:D8:18:F3:45:20:3C:18:D8:73:92:17:C8:1D
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 019768BC17BF7984FED5990FDDA356DAAEE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
Manifest number: 0DA5
Signing time: Fri 13 Jun 2025 10:00:46 +0000
Manifest this update: Fri 13 Jun 2025 10:00:46 +0000
Manifest next update: Sat 14 Jun 2025 10:00:46 +0000
Files and hashes: 1: 1-FnvQqT9mIqxipsRqFjYsNQSlBM.roa (hash: +uFY0K06aPvv+IH1erLogXQwEEO2k+DY8eNZLIXFHV4=)
2: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: 9Zsjw1BBYkntSkv2juBj4S41l2BU2Vrk57Ob0BflK84=)
3: EpH20P4xP3V2g4vErHJO-EvTAVU.roa (hash: jeooPDRiBjDAUPoIXhITPTt2zTmHZ7KLWf5fCQG5sIo=)
4: S5ZKnLfz4DstONEqZm_YmyZ8kvY.roa (hash: X0rSxal4LbSgFqA0+FsHMQ78+/EIGLIojbhDJzOesXI=)
5: SI90qQvScrNKS-02paw66Vtte1g.roa (hash: CoRUrg+WB47FS25HKQ2HVa4e+itGukiRC6ZwlYviHec=)
6: VunL007YcgdB0SQwEVqZksZS8Fs.roa (hash: 216WPQB/uK03AqzN7nO6bEUvYIaYzP3vD9//CYpZtZI=)
7: mvmUvaM2JRysTq3IiKyyysU6GY8.roa (hash: dMiGawP2eEnw55fXqAakbpr7IIQ2Da7zAMRfk+xhjuE=)
8: xfkDaLGtqI9S0koDwH1ibKq86PQ.roa (hash: 9SMgRbgNtClui+eod+bviRGqIN366+5FDeHZRxM9wm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:17:bf:79:84:fe:d5:99:0f:dd:a3:56:da:ae:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Jun 13 10:00:46 2025 GMT
Not After : Jun 14 10:00:46 2025 GMT
Subject: CN=d5e44177ed376cd818f345203c18d8739217c81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:12:9b:82:31:49:8a:f1:12:3a:13:15:6b:
7d:46:e2:41:fb:11:3f:da:b4:73:28:2f:fc:4d:c4:
02:4e:31:2d:97:0f:e2:1a:5c:4f:27:b4:9d:62:5b:
a2:7e:de:ae:d3:47:46:c7:ca:f8:d2:59:af:52:f7:
ca:7b:f8:94:ad:8a:79:a5:23:73:24:a9:17:24:ad:
97:70:e2:6a:37:d0:98:ef:73:34:de:7a:3b:52:24:
ef:fd:ef:8a:ea:c3:6b:4a:e7:b2:d3:c2:cf:87:e7:
ed:1c:d0:32:ce:b0:e7:52:cd:48:30:85:e6:18:22:
4e:9f:8a:f5:db:b1:e8:a4:da:2d:82:8f:9b:0c:47:
0a:4f:82:94:c4:3c:9d:ab:de:db:ed:67:9e:2c:57:
24:d0:db:88:75:ec:34:a8:96:6b:91:39:7b:e7:e6:
f9:46:f9:b6:b5:a2:42:dc:12:68:ce:5b:d1:3f:9a:
9a:5f:53:be:55:1f:45:3a:30:98:22:1b:df:71:5a:
c9:bc:6b:2d:e8:d3:b5:8b:66:1f:9f:49:30:bc:29:
5d:27:e3:b6:e6:57:59:59:79:c1:22:f8:d5:fe:37:
e4:09:33:12:60:ac:ba:55:a1:31:7b:e3:79:ea:7c:
4e:58:28:bb:90:78:ba:c8:4e:a8:1a:b3:ed:2d:22:
a8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E4:41:77:ED:37:6C:D8:18:F3:45:20:3C:18:D8:73:92:17:C8:1D
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a5:70:56:bb:b9:76:d4:a0:9e:5c:42:23:e1:7f:e5:f9:8c:
05:07:a8:da:d1:99:86:bc:45:ea:cd:5b:07:a7:d6:ee:50:01:
5c:6a:69:66:95:06:65:c4:46:d9:9e:ab:42:29:a4:48:e0:01:
47:35:9a:3f:85:df:95:9b:be:93:e0:d2:e5:4d:d6:ed:55:e2:
96:53:de:6a:9b:d5:6e:ad:37:2c:97:10:fc:a5:26:9a:29:fd:
73:0d:5f:5b:bd:05:b3:4e:f9:62:12:2e:2e:3b:11:32:65:1d:
4c:9b:fb:b7:a5:d6:fc:67:ba:5f:d0:3c:a4:04:9c:30:59:0b:
c5:17:64:ac:c9:1b:93:0f:6b:16:6c:5e:ab:9e:b8:bb:d0:e7:
0a:46:26:0d:45:5e:d1:24:74:7d:b2:9a:2d:eb:28:38:e5:38:
2b:f4:88:ff:b3:5c:59:4f:d6:a2:75:a8:1f:d3:9a:26:a2:3f:
9f:5d:36:23:e6:0c:72:cd:ae:4f:0f:ff:88:62:76:0a:89:9d:
f5:b7:6a:90:10:3a:66:79:9f:19:69:48:79:a5:1a:fe:19:44:
c9:70:92:ad:f9:70:a9:8c:47:5a:bf:4b:e3:b2:d0:03:15:ad:
ca:fc:2a:74:89:a2:10:24:9a:62:4c:98:47:97:4b:22:24:6f:
cd:09:c1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:26:32 2025 by rpki-client