Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
File: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json)
Hash identifier: UZfjJQ0vSDsooMpqHYdattMHfWEaGjC8jpoBUs4RUHI=
Subject key identifier: ED:FC:1D:2A:8E:4F:53:0E:4B:A8:E6:E5:63:4E:0C:6F:66:D2:65:3C
Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Certificate serial: 01976C2AFEA171FEBFDFB227637BD933DD97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
Manifest number: 0EF2
Signing time: Sat 14 Jun 2025 02:00:46 +0000
Manifest this update: Sat 14 Jun 2025 02:00:46 +0000
Manifest next update: Sun 15 Jun 2025 02:00:46 +0000
Files and hashes: 1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: VX89BAB0cv5l9FU600D+xkpMfdA3s2NSitZYb3dNqj8=)
2: JKDoGMCZzjSndX7Ct7p3CxyKJR4.roa (hash: bo2ZyeRjzsKv0IsXJYurWXlAoWDOMikTk02MIFIPMnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:fe:a1:71:fe:bf:df:b2:27:63:7b:d9:33:dd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Validity
Not Before: Jun 14 02:00:46 2025 GMT
Not After : Jun 15 02:00:46 2025 GMT
Subject: CN=edfc1d2a8e4f530e4ba8e6e5634e0c6f66d2653c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7e:01:c9:10:e0:92:60:ba:fd:40:34:74:50:
46:7f:42:42:6b:5a:cd:c7:38:7b:31:4e:c7:e3:0b:
c1:87:15:95:10:42:80:a1:6e:49:34:2d:75:4f:a3:
1d:73:8d:f1:86:73:aa:15:e1:92:5f:9a:f3:42:06:
67:77:de:af:a3:c6:10:47:a3:61:08:b0:78:db:c7:
b2:c2:4f:a8:e1:cd:14:57:f0:62:e1:5d:2a:64:a5:
98:38:0f:8a:dd:1a:b8:9c:a8:b3:94:61:a9:fa:f0:
ea:67:08:9c:8d:45:84:3b:84:9c:fd:25:f5:32:93:
93:28:5e:14:a6:96:7b:8b:38:7a:03:d6:e1:b2:b9:
35:af:dd:77:0f:97:a6:a3:05:c1:74:fd:b4:b3:6d:
5b:ee:1a:07:6d:4b:28:c4:1d:32:e5:98:63:fb:90:
ce:25:88:71:f5:9c:ac:4b:36:1b:7a:ad:0d:26:89:
d3:b3:e1:2c:c2:60:4e:32:76:cb:bf:81:b1:eb:3e:
92:61:5d:00:e3:3d:9f:fa:ec:a8:71:4f:20:ec:2b:
50:fc:9c:e8:62:ea:49:d4:c0:f8:0c:60:96:87:d2:
15:3d:8c:c7:36:81:56:43:01:4c:a2:6d:a3:c5:32:
f5:d4:33:34:47:d8:f2:3b:df:69:b0:18:12:4a:18:
12:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FC:1D:2A:8E:4F:53:0E:4B:A8:E6:E5:63:4E:0C:6F:66:D2:65:3C
X509v3 Authority Key Identifier:
keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:da:7d:b4:92:a0:d4:91:73:3b:82:5e:d2:63:26:93:08:3a:
19:ae:17:c1:b4:6d:b4:d9:f6:f2:86:e7:e4:79:13:10:80:c3:
3d:a8:64:8b:40:98:75:a7:e3:b6:17:cc:05:f5:d3:ee:d4:28:
bd:f0:96:d6:0e:cd:10:79:80:98:b3:76:6f:95:06:a0:00:c2:
e1:10:ca:f7:57:58:50:e2:ed:e9:4c:1b:37:fa:fa:7f:c4:d1:
bb:aa:82:5b:93:3a:bf:cb:f1:0d:30:66:8a:6b:c6:00:7a:cb:
0f:68:19:bf:23:94:b1:3f:bd:86:0b:44:9b:eb:21:db:2f:92:
2c:ad:76:cd:85:d9:8f:97:ae:63:28:48:f5:7e:c3:6d:58:db:
b9:9a:58:56:79:27:94:8d:95:96:ff:1d:34:78:4a:58:17:e1:
43:07:ac:61:39:bd:1c:7e:3d:f4:19:af:58:c2:37:bc:d8:fc:
69:53:b1:ad:2f:a3:e5:bc:11:66:12:1d:aa:48:ca:81:d5:21:
23:be:45:8e:23:19:76:7e:bb:a8:91:2e:7a:11:be:79:e9:f1:
db:9d:78:e7:3b:f2:78:f6:a5:0b:34:96:fe:3a:d2:4b:f0:f3:
79:60:59:18:86:1f:87:c0:a7:7a:05:29:c7:92:dc:d9:ed:bd:
84:be:ee:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:47:49 2025 by rpki-client