Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
File: 9-CSr_r5tUhOAJmap_HO8ax7QJM.mft (raw, json)
Hash identifier: TLiqkuVnU/YVX++Th0YLjVn2PjSpP4S8667oquvJ6nU=
Subject key identifier: 95:A1:30:85:CF:5D:67:FD:64:B0:BF:EB:50:B5:59:AA:73:11:8A:16
Authority key identifier: F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
Certificate issuer: /CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Certificate serial: 01976F62CDD58D0334EB8A8E3686744FA9ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 17:00:35 +0000
Manifest this update: Sat 14 Jun 2025 17:00:35 +0000
Manifest next update: Sun 15 Jun 2025 17:00:35 +0000
Files and hashes: 1: 9-CSr_r5tUhOAJmap_HO8ax7QJM.crl (hash: lcRtB1TKaKryBFmxto0fZzlWMgZvN45B9r5tRc1WIeo=)
2: heOGsEgwvnx0rV_PQ-KerQ9C-CY.roa (hash: sP+8nNNKaPD0x4Bknlm6WIvlRad2W4u8N2Xxii0xN0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:cd:d5:8d:03:34:eb:8a:8e:36:86:74:4f:a9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Validity
Not Before: Jun 14 17:00:35 2025 GMT
Not After : Jun 15 17:00:35 2025 GMT
Subject: CN=95a13085cf5d67fd64b0bfeb50b559aa73118a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:6a:2c:21:58:95:63:29:98:77:e1:97:8e:
a5:e5:5d:96:20:e9:9e:f2:a1:f6:f1:7f:65:f4:9e:
41:e0:e0:8a:fa:fe:c5:1b:82:28:6a:2d:74:9d:44:
22:26:90:94:15:43:9d:8c:43:04:fc:ef:9d:8f:23:
fe:1d:7a:ff:6c:64:b3:5b:88:5b:dc:fc:1f:b0:9c:
46:46:c5:30:52:e9:08:d3:4d:3c:d0:df:11:9e:00:
fb:de:e4:63:ec:46:18:e6:0e:42:f3:8a:8a:d6:8d:
c0:9c:2a:53:b3:99:1d:06:2e:d2:a5:b6:a9:bb:e2:
71:21:de:2d:3f:ca:20:54:a4:78:31:fa:2d:02:4c:
6a:7c:5c:de:14:5c:e9:eb:24:f6:d0:9b:21:3a:5f:
7a:0c:18:30:ba:f0:45:a6:ad:a6:86:b9:7f:8e:74:
52:15:64:10:88:d4:82:f4:1b:37:0a:1d:a8:60:cc:
f5:7f:e8:47:1a:1a:3f:ee:b7:19:3f:7b:0e:31:69:
46:fc:0e:45:78:38:93:61:28:48:1d:f8:57:92:df:
d7:6b:fd:2f:e6:a8:82:c8:e8:50:62:35:4c:ce:29:
ba:68:ed:ca:6f:1d:62:95:51:df:e6:0e:cd:47:7c:
43:eb:fa:b2:47:17:a7:a6:2f:7b:2a:0e:25:c6:95:
0b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A1:30:85:CF:5D:67:FD:64:B0:BF:EB:50:B5:59:AA:73:11:8A:16
X509v3 Authority Key Identifier:
keyid:F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bc:f7:b8:da:26:80:aa:1c:fe:81:ac:16:74:d4:13:b8:b3:
8b:19:e5:a7:37:9f:82:d9:40:24:42:aa:84:ae:29:83:6f:cf:
74:b8:f9:08:63:2d:7b:2c:00:c2:0b:95:9f:e5:a3:88:5f:72:
1e:14:50:95:bf:6b:13:89:0b:b5:f3:31:8f:8c:a0:a8:b4:a3:
64:dd:57:47:48:1b:25:74:70:8f:a9:45:c3:5b:99:cb:49:1b:
37:22:83:16:8e:24:f8:0a:81:84:07:72:08:23:3b:b4:ac:00:
78:73:66:e5:7a:bd:75:41:4a:1d:4c:11:84:51:83:db:20:03:
bc:b6:32:e2:22:80:23:c3:f0:60:92:88:87:9e:0b:c7:ab:41:
28:9f:fe:66:09:20:d0:b2:39:16:89:2b:ec:2c:91:cd:7a:34:
e8:ed:8c:18:1b:7e:84:e4:14:f6:15:d1:f0:4d:d3:79:be:46:
98:5a:78:72:73:04:12:01:c3:eb:b4:c9:cd:b6:4c:54:62:a3:
58:8b:dd:6c:a7:51:03:94:e9:b1:38:a1:ba:b4:39:83:84:26:
2b:53:80:3c:21:4f:77:cd:00:9e:9e:e1:7d:58:26:b5:5c:2b:
a2:f4:47:c4:d5:d3:69:58:4a:93:c8:a8:3c:c4:e2:52:9d:a1:
7e:f3:5d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:50:57 2025 by rpki-client