Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
File: 9YgvM_dIDcx7h2N66nY2gonXXC0.mft (raw, json)
Hash identifier: 4ocOnmPzeTYdQhMRp+Ar2It5zCdIdSS59kN31UoooVU=
Subject key identifier: 22:2A:EC:36:CE:A6:A4:EB:38:75:86:70:0C:C5:CF:27:1B:09:94:0B
Authority key identifier: F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D
Certificate issuer: /CN=f5882f33f7480dcc7b87637aea76368289d75c2d
Certificate serial: 01976BF40DE612DE3C18248F1B5F5947A699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
Manifest number: 02A7
Signing time: Sat 14 Jun 2025 01:00:45 +0000
Manifest this update: Sat 14 Jun 2025 01:00:45 +0000
Manifest next update: Sun 15 Jun 2025 01:00:45 +0000
Files and hashes: 1: 9YgvM_dIDcx7h2N66nY2gonXXC0.crl (hash: C4CB9HkvVM2Yh9KFtkwHSmlYXXzpsn5vZcPprROeCws=)
2: QOEcWjHe4NVCZVw1toczwOnDbvg.roa (hash: EaeTTrx2jGMXQlq6vQvVplBMXhi0x7kTgcTmmy7+jJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:0d:e6:12:de:3c:18:24:8f:1b:5f:59:47:a6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5882f33f7480dcc7b87637aea76368289d75c2d
Validity
Not Before: Jun 14 01:00:45 2025 GMT
Not After : Jun 15 01:00:45 2025 GMT
Subject: CN=222aec36cea6a4eb387586700cc5cf271b09940b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:b7:db:46:91:40:8a:1f:a9:f8:ba:2c:9b:
d4:f3:2c:13:da:31:96:39:36:fb:f4:83:30:80:d4:
e0:76:25:89:38:72:45:2c:30:50:63:d7:cc:e2:4a:
bf:c0:61:54:ce:af:a0:3f:41:c6:2f:8a:2b:ce:7e:
99:ca:53:06:5a:0f:58:76:f7:84:56:ce:e2:3e:6f:
4c:fc:a1:e5:13:77:65:5b:cc:07:9a:c1:76:6c:ff:
1e:94:16:db:13:76:65:6e:c1:f9:51:43:09:1b:2e:
cb:d7:78:46:c3:79:3c:f1:e0:df:ad:b8:f2:2f:db:
1d:f2:b4:f3:96:18:67:1c:be:72:9c:57:70:ad:c0:
ce:1b:ae:70:69:4c:5d:b8:d6:21:5b:0b:28:9d:4a:
98:21:d0:a4:b4:0c:8a:17:be:15:a6:b8:0a:d9:a2:
c1:42:3c:2a:21:b8:f1:b4:2a:9b:e6:b1:6c:59:12:
92:26:d0:b3:d8:b4:50:ca:cd:4f:72:5b:a5:74:42:
5c:07:f4:7b:3f:24:8c:93:f6:1c:65:dc:f4:35:c6:
29:64:dd:cb:d0:1b:c6:8b:dd:f3:65:bb:1a:e7:ad:
d1:ec:80:63:4b:2a:95:f1:42:ed:3b:bd:9f:ae:69:
f5:c4:bd:84:29:0f:e6:40:6e:8e:1d:66:df:02:9f:
75:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2A:EC:36:CE:A6:A4:EB:38:75:86:70:0C:C5:CF:27:1B:09:94:0B
X509v3 Authority Key Identifier:
keyid:F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f3:34:fc:e7:ff:e8:56:e2:40:08:4d:e8:87:c2:da:02:f3:
a1:dc:43:db:36:ab:89:d7:1c:4d:30:e8:cd:fb:e6:9c:b2:b2:
ff:20:fc:80:78:c9:99:32:06:c2:f8:3a:3b:20:71:aa:47:8a:
3b:bb:4b:49:f5:72:0c:35:36:a6:fa:06:21:b1:88:d4:00:53:
57:39:28:02:8b:dc:e5:15:0f:c7:05:5c:17:db:29:81:1b:8f:
ad:13:da:23:a8:49:9b:86:86:ab:1e:bc:ff:ba:68:fa:bd:b8:
96:40:62:d2:48:a8:79:43:94:2e:1e:82:76:48:c5:b0:f7:df:
1a:d8:a8:b8:f4:c7:82:9d:97:4d:dc:d6:04:98:3c:ad:a7:4b:
db:1c:f6:ab:c9:ff:d3:21:6a:d9:a5:42:e2:90:fb:ee:fa:08:
ba:72:41:2e:a5:b7:e8:02:54:f4:d0:1f:fc:c5:15:45:f4:b5:
15:9f:75:26:30:8c:21:b2:ae:29:fc:9f:4f:d5:32:b4:89:16:
d1:4f:0e:d9:d7:d9:4f:51:35:24:cf:6c:c3:c1:55:3d:ac:1e:
0b:aa:ce:b5:7c:02:d0:a4:ff:29:86:e4:00:1f:48:ce:ec:1a:
fc:39:5a:17:66:da:ac:a7:12:5f:b3:b2:03:a9:c3:09:b8:77:
da:a5:7c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:28:48 2025 by rpki-client