Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: yVmW0uxuR+aweqfe6aZhElxHsfj8qFbVys303NqzoVQ=
Subject key identifier: EA:C2:FC:21:85:39:BA:AE:21:06:6B:C4:20:79:B9:03:A4:78:76:61
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 01976D3D85C63D880E15AB2406ED55884BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 0D84
Signing time: Sat 14 Jun 2025 07:00:37 +0000
Manifest this update: Sat 14 Jun 2025 07:00:37 +0000
Manifest next update: Sun 15 Jun 2025 07:00:37 +0000
Files and hashes: 1: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: CsYPAa95pVij87cOO+a+fV6IuX2GsVHPAbInvurEZHA=)
2: _0wH1BRcgc6tfF99TwNnC3iQ1pU.roa (hash: O+Zelc4oaCgFlSMOLR6IXR0OWFyZm1W0ImLAmE3cggg=)
3: igkLmqGvdo3ZptL2OBtAT5tgBr8.roa (hash: JNS1dghL0HEbj9Q46she80UtZ72vLWiMcXMi6xfr/RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:85:c6:3d:88:0e:15:ab:24:06:ed:55:88:4b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: Jun 14 07:00:37 2025 GMT
Not After : Jun 15 07:00:37 2025 GMT
Subject: CN=eac2fc218539baae21066bc42079b903a4787661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e0:d5:eb:cb:e5:b7:31:02:f8:f7:c3:d3:04:
c6:8e:42:1f:c4:bc:45:9e:7b:b0:51:2c:fd:16:36:
55:7a:d3:e5:1b:c4:24:52:7a:b3:ea:60:62:aa:44:
63:a0:20:bc:55:28:d5:94:e0:2a:93:f3:14:8a:6d:
5a:1a:c1:62:91:1a:27:c3:be:e4:8b:3b:96:df:5c:
84:1f:fc:f6:bf:c4:8c:d3:0f:b3:90:c5:c2:f6:4d:
3b:87:20:51:a9:6f:e0:50:32:83:fc:64:dc:42:5d:
95:06:07:d0:ba:3d:9a:c9:8a:57:01:11:bc:32:f6:
73:7a:27:9f:6e:e1:22:7d:90:63:38:80:f2:98:53:
5d:14:a7:fd:f3:8a:1d:7c:45:fe:d9:21:1e:9e:8b:
58:ac:0f:ae:8f:71:d8:f5:24:ae:79:dd:2e:66:27:
5d:39:72:e3:ea:9c:fc:50:3f:20:17:bc:67:d7:73:
a4:55:d2:13:29:10:c2:23:af:c8:00:80:6f:e8:61:
7b:21:6c:97:70:f8:e3:b0:d9:9e:1b:40:8f:9f:cb:
06:cd:9e:4d:3e:d6:d6:0d:7a:01:0e:df:ae:1e:e3:
8e:d8:83:3b:f5:23:05:08:49:a3:1f:25:eb:37:87:
08:52:39:2a:35:55:95:4a:43:72:b8:3c:9b:64:94:
a5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C2:FC:21:85:39:BA:AE:21:06:6B:C4:20:79:B9:03:A4:78:76:61
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b8:04:e5:44:e3:4a:a3:5b:50:ab:02:2c:8d:11:9f:4a:cb:
a9:78:c6:1a:23:b5:e2:c1:21:f9:cf:56:c3:a5:39:32:25:94:
56:cf:f3:a8:12:0a:9a:cb:a1:95:69:26:a9:d5:29:f7:00:41:
09:89:d1:4b:b0:38:50:14:a7:d7:a6:c3:ad:17:c2:6f:1f:f1:
0a:f1:94:51:c6:48:88:a9:38:4a:cf:43:99:ae:a0:32:06:93:
7c:7c:98:af:8a:09:00:75:08:a8:bf:1f:fc:f2:16:bf:6c:2d:
d6:d8:d3:ea:c9:d5:d5:bf:04:7f:b7:90:53:bf:49:d6:d6:b7:
d7:f0:59:6f:53:03:97:70:68:9e:73:04:e7:52:5f:ad:d2:48:
8d:42:f5:af:e5:3e:a7:7a:d1:bc:08:8f:e6:e2:f8:39:30:3c:
8a:b5:e8:ba:e6:f1:2c:f7:4f:1a:5d:4f:80:7c:4f:10:28:d5:
5b:db:7d:3a:bd:05:d3:49:38:f0:af:59:55:9b:a4:5a:6a:11:
08:3b:fb:d2:23:9e:3a:42:9b:d5:72:13:a8:53:d4:0e:b1:ff:
bb:6e:43:40:48:86:28:65:47:b8:44:8d:10:9b:39:02:61:5a:
80:4a:d9:15:5e:0f:10:37:f0:4a:9a:4c:d4:34:40:04:18:77:
2f:f9:3a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:21:07 2025 by rpki-client