Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json)
Hash identifier: NuOWedVBrRCFozx9T91VMOmsf0m9H+7JnZCFVxrRmgY=
Subject key identifier: D4:DB:70:99:75:FA:7B:2A:C5:B0:A2:AE:02:01:A9:1A:21:BB:D2:5C
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial: 01978357438A79E47D2672CE60B0C6EEDDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
Manifest number: 1599
Signing time: Wed 18 Jun 2025 14:00:23 +0000
Manifest this update: Wed 18 Jun 2025 14:00:23 +0000
Manifest next update: Thu 19 Jun 2025 14:00:23 +0000
Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: k+eU+FodU4tVxFhibhWJXkKUPhO4qvVrs8QkfzJaJG8=)
2: fGeYBTeIqUGlzWkeYCJZuXTV3NA.roa (hash: NVWcI0sfwe5T87MmDN6gYp0EndXzVclJkGdW6buL8Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:57:43:8a:79:e4:7d:26:72:ce:60:b0:c6:ee:dd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Validity
Not Before: Jun 18 14:00:23 2025 GMT
Not After : Jun 19 14:00:23 2025 GMT
Subject: CN=d4db709975fa7b2ac5b0a2ae0201a91a21bbd25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:e1:32:6a:1b:b4:c2:e1:cc:c6:cd:26:1a:
72:c1:7c:a8:82:a1:18:b7:10:de:01:2f:29:ab:f3:
18:70:00:c5:4d:74:29:a5:82:51:a7:c2:94:7f:af:
c7:40:6c:ce:fe:0b:56:a9:c2:82:cd:e2:48:bf:b1:
6d:2b:fc:36:22:56:ba:9e:0f:2f:f4:5c:67:4d:fb:
03:68:64:b8:57:72:13:ed:ca:e8:c5:09:3b:91:15:
e7:14:10:c0:48:07:17:5c:f1:11:9d:b9:21:59:e1:
e5:be:22:a0:64:23:fe:64:b4:38:18:df:b4:30:d1:
92:7f:af:ba:9d:a3:6d:b5:1e:d5:53:26:1d:73:f7:
64:72:92:82:86:de:59:c6:f2:f3:e4:b7:2d:99:e8:
97:f6:6c:a7:39:4e:7f:61:20:e6:22:40:0b:79:53:
08:8b:ac:62:83:71:3c:87:fb:2e:e7:5e:34:35:ca:
63:35:8a:2a:96:b0:cf:8d:77:0a:ef:0e:04:e7:10:
aa:68:19:24:5d:7b:d6:25:ce:fb:e4:37:6e:da:54:
f4:29:a9:20:e8:40:9b:39:4c:63:1b:2c:6e:cf:a0:
b9:49:bf:af:de:25:07:01:54:e2:3f:c7:5c:5a:4f:
4c:76:09:d2:70:ab:f9:20:40:f2:8c:6d:9c:f0:e5:
0b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DB:70:99:75:FA:7B:2A:C5:B0:A2:AE:02:01:A9:1A:21:BB:D2:5C
X509v3 Authority Key Identifier:
keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:36:fd:5c:9a:ca:87:3e:ad:86:4d:3b:c1:d1:0e:ba:9d:c4:
2e:9c:31:6e:0a:9e:76:62:29:80:92:e6:94:e5:37:05:81:c4:
25:4a:3f:ba:a1:19:aa:12:5e:fe:21:b4:6e:1f:f5:dc:9f:8f:
36:9f:60:f8:c4:1a:a3:e2:ba:be:0e:4b:e3:f3:02:83:ed:3b:
73:9f:9e:0e:67:db:4f:f5:71:a4:3a:eb:38:72:eb:3d:30:71:
37:e6:b6:99:71:80:d7:6e:7f:42:65:38:95:8a:5e:f7:c0:5f:
23:75:ea:76:b3:c2:fd:9e:51:ec:67:fa:93:15:b9:ce:8b:64:
00:e6:b2:46:db:fa:31:ed:21:95:7b:22:f7:20:c1:da:b7:d6:
c1:ec:d6:14:03:5b:96:9f:98:00:1e:b4:02:1a:b9:83:66:74:
fb:91:9a:a0:91:e9:e9:5d:25:2b:5d:44:d5:24:09:36:08:cb:
d2:a4:25:44:77:7a:5e:68:86:4b:0e:32:b8:a2:20:18:dd:b4:
80:a9:37:48:65:97:5e:1f:d4:01:53:b0:3e:68:00:98:78:ab:
82:45:6e:c8:c1:77:6c:32:13:2c:32:78:4a:e8:e1:9a:dc:7a:
ea:23:b7:c1:45:01:84:dc:98:91:f5:8d:a7:f9:f9:54:be:ef:
86:4a:9f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:31:33 2025 by rpki-client