
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
File: S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft (raw, json)
Hash identifier: lMtRu2lq3UF9icRea7NkpXeMs1SkcEX/Xy6vD3wzJEY=
Subject key identifier: 45:7F:2C:07:82:94:7C:02:2A:CE:81:7D:C8:62:9D:0E:FF:8C:94:A7
Authority key identifier: 4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
Certificate issuer: /CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Certificate serial: 01976D3D876AD524E68D2C784D97F8EEA669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
Manifest number: 10FE
Signing time: Sat 14 Jun 2025 07:00:38 +0000
Manifest this update: Sat 14 Jun 2025 07:00:38 +0000
Manifest next update: Sun 15 Jun 2025 07:00:38 +0000
Files and hashes: 1: S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl (hash: UkJVhluT53LqFa5+qv84xr+YEMMG/OPJN+BNTeSLvSc=)
2: ejjlASXkUcRdnr6-VdCF2Mgcm40.roa (hash: vzr2w6+iif68HBa0Udg4Ex8g0igxmMWxnsZRKLXilEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:87:6a:d5:24:e6:8d:2c:78:4d:97:f8:ee:a6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Validity
Not Before: Jun 14 07:00:38 2025 GMT
Not After : Jun 15 07:00:38 2025 GMT
Subject: CN=457f2c0782947c022ace817dc8629d0eff8c94a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:9d:a4:46:f0:49:b1:4d:ba:cd:32:82:7b:
5c:e9:bf:3c:eb:b6:5b:f8:c7:e1:0b:b9:50:68:c3:
52:d0:95:e4:93:80:35:ae:0f:01:8e:6c:2c:18:44:
3d:f4:3f:c4:55:16:53:44:bc:b2:53:88:cb:6c:37:
89:99:9c:08:24:01:bb:ef:a0:f5:00:24:5d:8b:c7:
80:87:11:a9:d4:24:c4:85:ba:44:80:22:82:29:e7:
1d:90:69:f2:a9:c7:e7:ed:14:74:c3:fe:fb:a4:37:
e8:92:82:4f:9e:09:5e:5e:93:89:ad:63:38:b7:b6:
72:53:ec:28:0b:dd:99:4b:09:c1:58:20:55:31:d5:
56:05:0b:7d:38:71:bf:8b:f0:5c:3e:4d:e1:e3:a8:
04:8b:ce:e7:a2:3a:97:6a:c8:99:e7:6a:6f:36:8b:
08:ef:aa:6d:b1:0d:d4:50:be:93:93:bd:3c:09:b6:
68:15:af:10:a1:06:27:9f:48:65:5e:19:a5:88:00:
7d:11:90:de:44:a8:5e:c1:c1:ca:49:75:47:a2:c2:
2d:ee:16:21:99:ec:bf:09:6e:05:e7:8a:2c:f0:c9:
1a:37:39:46:44:bf:ea:97:c4:ea:a7:e9:7e:89:ca:
85:68:23:ea:72:82:04:c4:95:d8:32:dc:67:88:7c:
8f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7F:2C:07:82:94:7C:02:2A:CE:81:7D:C8:62:9D:0E:FF:8C:94:A7
X509v3 Authority Key Identifier:
keyid:4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:10:c9:27:67:39:b9:67:03:be:ce:54:4b:31:62:9c:df:42:
fc:8d:6d:5d:37:37:57:50:20:59:ee:91:33:6e:91:70:75:f7:
8a:ca:bb:98:3a:91:1b:ae:3e:2d:bf:2d:6b:95:2c:04:7c:34:
43:b2:6f:af:98:8d:90:3d:78:7c:4f:ab:df:63:0f:1f:2d:5c:
da:75:40:73:d3:70:17:91:b5:70:62:77:f8:9c:0b:27:50:fe:
65:89:5d:95:b7:cb:f9:2b:0d:a5:36:de:7e:64:61:90:3c:f2:
35:26:94:d3:57:b6:8d:4e:62:9a:9b:03:db:58:9a:93:bf:af:
13:f8:97:13:76:b2:92:ca:75:ba:4d:11:bc:6c:96:9c:64:a3:
b2:17:b1:b3:be:1c:4a:67:d5:d4:59:93:45:50:c5:4c:28:26:
b0:05:31:7f:0d:ba:d3:0e:bb:4d:8e:84:98:b9:94:1c:f1:5e:
8f:bd:c3:fb:73:99:74:0f:79:bb:e7:4f:29:fd:83:15:09:3e:
0a:55:17:20:13:89:45:92:9a:b3:16:e6:f8:18:e7:b9:ad:88:
f3:99:c4:f3:46:fe:1f:64:c5:05:29:84:e5:9c:29:00:e0:c9:
a8:d2:96:27:9b:4f:89:e7:90:a6:4f:09:84:ba:2c:dc:0d:fa:
d4:77:07:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:31:18 2025 by rpki-client