Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
File: 9JUCyXSCsoUChSyX75vToKKl6fA.mft (raw, json)
Hash identifier: lpBNzzxAV+VyOvBi0DCgyFf8Ww8FXWStPVUNVh8zjzs=
Subject key identifier: CE:7F:2A:47:5E:CA:96:54:76:BB:CD:AF:B9:84:72:26:BA:3C:47:FE
Authority key identifier: F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
Certificate issuer: /CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Certificate serial: 01976CCFDAD01576E38FA7F2D9577619E963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
Manifest number: 135F
Signing time: Sat 14 Jun 2025 05:00:50 +0000
Manifest this update: Sat 14 Jun 2025 05:00:50 +0000
Manifest next update: Sun 15 Jun 2025 05:00:50 +0000
Files and hashes: 1: 9JUCyXSCsoUChSyX75vToKKl6fA.crl (hash: qcgmqOO6TqQoTaIK6TG0yKv+q9T6jdRKYsnRVRlYs14=)
2: EaZvYH2YGiO37NZ1bGFHkmEdMcw.roa (hash: HSZLZ0cKEKUvUtWkwWARshBwReQDxlGBdY+EDDOfXjA=)
3: NbJCCt6mZbGhQhsVck9Ye84ql_A.roa (hash: 1GHJ4CqSoQFt3IGPoRuzPcM9vgZHBXB7ib41DM1rbg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:da:d0:15:76:e3:8f:a7:f2:d9:57:76:19:e9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Validity
Not Before: Jun 14 05:00:50 2025 GMT
Not After : Jun 15 05:00:50 2025 GMT
Subject: CN=ce7f2a475eca965476bbcdafb9847226ba3c47fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:86:1c:8a:7a:55:2b:71:3a:3b:e2:c3:6a:2d:
b6:28:dc:bb:2b:b0:a8:0a:75:b6:cb:4f:11:63:55:
b4:4f:6f:8c:f4:80:1d:5a:83:57:60:02:87:e4:4b:
99:ef:3d:ed:e9:8b:58:d1:7d:1c:83:0c:4c:7e:8a:
2f:80:f2:71:25:7b:e3:9a:e2:87:48:b9:ea:a4:b7:
36:2c:dc:e4:73:d3:ec:c3:8f:49:7c:63:5c:34:05:
7b:ce:2a:4d:68:5f:28:04:15:3f:b5:42:ba:98:6d:
f4:db:b7:2f:9c:80:22:39:7e:a8:cf:f9:1f:39:37:
35:29:7d:b2:01:0f:0e:a8:f0:45:27:e3:9a:18:0f:
e8:b9:a9:95:68:28:cb:3f:bf:33:f6:cd:88:b1:19:
c8:56:a5:76:4c:4d:33:f4:33:4a:06:4a:2a:c1:82:
9d:18:42:88:97:1a:0b:77:a1:8c:18:4e:4f:c4:f2:
94:6d:01:3e:24:6f:3d:4c:1a:71:11:79:dc:22:bd:
6e:1b:bf:69:27:6b:73:78:98:42:4c:7f:57:b1:04:
e8:81:58:ff:b1:21:12:9f:c1:33:73:dc:1c:e3:4a:
4d:bf:8c:26:f7:9d:85:af:e3:2d:a9:db:2a:ed:97:
b0:d7:9d:cf:93:3d:56:a1:71:f4:61:bf:05:86:0f:
3b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7F:2A:47:5E:CA:96:54:76:BB:CD:AF:B9:84:72:26:BA:3C:47:FE
X509v3 Authority Key Identifier:
keyid:F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0b:84:39:ff:10:8e:17:e2:b3:cf:84:7d:82:09:aa:ad:38:
89:fa:e8:4b:b6:75:ff:aa:48:e0:88:5e:02:9e:58:78:af:81:
4c:6a:6d:4c:c8:5e:23:ec:12:ff:62:2b:6d:8b:e1:81:88:d4:
bf:ee:5a:6b:50:7e:2d:de:23:73:9e:33:ba:df:30:45:f8:b2:
b6:3a:cf:55:5d:b5:13:90:75:8a:64:7e:c4:91:fa:26:c0:75:
2a:e7:75:a7:86:90:3a:22:76:c4:88:f5:ca:ee:8e:b9:3d:ca:
f1:26:ae:7e:c2:c0:ce:28:f2:82:ba:b4:e0:9a:69:a6:3e:ef:
61:0a:7e:8d:cb:04:b4:7f:ca:52:69:3d:0b:d1:35:d3:22:ee:
23:d8:3f:4f:69:94:71:e1:0f:c7:58:6e:68:a1:b4:33:7e:e7:
0d:ed:74:2d:40:83:9d:f0:da:2f:c7:b2:3b:20:e9:ba:aa:e5:
23:6d:95:7f:4e:78:be:ee:ae:91:5c:7c:25:1a:79:25:0a:d5:
e8:39:0c:03:6f:cd:1c:c2:8a:63:9b:47:ac:20:a0:dd:8a:78:
b8:e6:bb:be:46:6b:9f:f1:93:5e:3b:83:21:e0:b9:c7:34:fb:
22:bc:39:82:6e:2f:16:f0:bb:ce:68:c1:c3:4f:94:9e:5a:1b:
36:c3:2e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:05:49 2025 by rpki-client