Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
File: M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft (raw, json)
Hash identifier: OsGo7M2B+tfL5GdldZ7UpuFukfQ/04KcqI/R58nS3L4=
Subject key identifier: 9A:32:0D:44:1F:90:F1:23:E4:92:E0:9E:2B:03:E7:73:9A:3F:47:A2
Authority key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
Certificate issuer: /CN=33d2d885477d0280264e458eb071f45d91691520
Certificate serial: 01977151229E1056CAD753F010AB47F80E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
Manifest number: 14F7
Signing time: Sun 15 Jun 2025 02:00:32 +0000
Manifest this update: Sun 15 Jun 2025 02:00:32 +0000
Manifest next update: Mon 16 Jun 2025 02:00:32 +0000
Files and hashes: 1: M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl (hash: CX9UawHtWBahaaAaGAK78WSwBl2Zrtf0200bIQe79Ok=)
2: sK3XQwXTL-mqzvI7V9STOh1mdbY.roa (hash: VWu2Ff9vBiTjacxsepFTzMs84GfrYTJ/rH9rluBzGtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:22:9e:10:56:ca:d7:53:f0:10:ab:47:f8:0e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d2d885477d0280264e458eb071f45d91691520
Validity
Not Before: Jun 15 02:00:32 2025 GMT
Not After : Jun 16 02:00:32 2025 GMT
Subject: CN=9a320d441f90f123e492e09e2b03e7739a3f47a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:1f:01:49:7d:c4:c1:87:ce:b6:63:84:a3:
41:71:c6:41:40:d6:34:ec:be:39:5d:6b:d0:b4:2d:
57:3a:3f:bb:6d:34:f7:fd:42:8d:60:51:eb:8a:3f:
d6:68:12:11:2c:ad:a5:5e:10:94:f4:50:e9:85:6e:
88:e2:3b:c8:5e:58:bb:3b:c8:18:91:3a:ad:14:e3:
b7:d0:0a:88:ff:c6:9b:2f:f2:49:fb:bd:89:bb:fb:
41:33:2c:d5:83:ac:e0:d2:e2:b5:9b:29:a4:bd:4a:
fa:3d:c9:90:e8:fd:9c:a5:52:6a:8a:30:fd:fc:5d:
9f:d5:6b:96:38:a6:91:3e:a6:64:0b:22:18:19:c1:
64:73:e9:a6:a2:2a:77:31:69:4a:4e:b5:83:19:ee:
80:3d:d8:3f:ed:79:47:f7:2c:34:eb:f1:08:a9:d5:
b4:0e:d0:fa:c1:ab:41:a0:95:df:de:e3:d6:b3:33:
f3:bb:a3:78:e1:bc:c6:cf:f6:58:db:a5:3f:87:15:
b1:7a:dd:ae:52:d5:db:17:40:e5:e9:54:f4:34:f0:
86:e6:e5:3e:9f:3d:62:a4:02:91:ad:af:9e:75:cf:
1f:f7:93:bd:cd:69:9f:92:ff:80:22:40:e3:bb:a1:
28:2d:d2:5f:87:69:9c:27:2b:8c:cf:99:43:1f:f4:
fd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:32:0D:44:1F:90:F1:23:E4:92:E0:9E:2B:03:E7:73:9A:3F:47:A2
X509v3 Authority Key Identifier:
keyid:33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7d:6d:55:d0:8d:ee:fc:e0:1b:ea:f9:64:99:ce:5e:73:05:
25:f3:a7:a5:82:1f:75:e1:08:94:8f:c1:09:27:6a:77:62:f9:
63:64:51:87:b3:f0:4c:c7:41:e0:86:87:cf:f8:68:ae:f1:40:
ef:74:63:01:19:ea:ed:51:e3:6f:9b:1b:6d:5e:f9:1f:fe:08:
70:fc:ef:bf:26:93:db:aa:b9:27:6b:0e:18:76:81:0f:b0:e5:
d1:bf:c1:d7:a3:55:3b:30:ab:c2:98:30:95:ee:fc:d5:f0:4c:
4b:59:91:d9:84:0a:c7:c5:d7:b6:7e:84:1f:ee:02:90:8b:97:
54:81:c6:63:da:d6:2d:49:0f:46:63:61:c7:be:75:8b:4e:6e:
4a:d4:19:66:3b:67:5e:e9:ce:c7:c7:e2:57:f9:61:62:b7:20:
7c:49:94:da:2e:01:d4:fc:b9:dd:7e:a0:e9:0a:d1:60:3b:16:
22:8e:05:ca:12:47:01:39:64:09:56:1c:8a:07:21:72:2c:00:
6a:c6:0f:76:87:0c:65:21:73:9c:d6:d3:02:f8:ad:1b:71:9f:
90:1f:68:ff:88:eb:99:99:30:0b:cc:02:0d:1c:53:da:fa:dd:
cb:5c:f2:5b:dd:c5:b7:7a:bb:b4:0b:27:53:58:3c:37:e4:b6:
ec:77:06:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:46:19 2025 by rpki-client