Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
File: 9q2iC9mLq990w9Vs14raZu2HoUg.mft (raw, json)
Hash identifier: ExPWFm1RuLrN4jMEcX4J2bzGST2uU+Wtr4aYzJSkgSQ=
Subject key identifier: B9:4F:E1:7A:1C:5A:55:D8:8C:20:DA:13:5D:CC:EC:D9:C0:5D:20:ED
Authority key identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
Certificate issuer: /CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Certificate serial: 01977376DBD1F9DE3DDD63CB884A774E6135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
Manifest number: 0959
Signing time: Sun 15 Jun 2025 12:00:58 +0000
Manifest this update: Sun 15 Jun 2025 12:00:58 +0000
Manifest next update: Mon 16 Jun 2025 12:00:58 +0000
Files and hashes: 1: 9q2iC9mLq990w9Vs14raZu2HoUg.crl (hash: LJk9HOprONiEfofRS80oPZUbaq8KoAZy3rWJa7AeJ2Y=)
2: s-x7d6jJvL70qmh-6OnRq31TKUk.roa (hash: 2DbOtbQA27lHr7qNRTboKovEtkv/3fhOLEwI/H6E4D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:76:db:d1:f9:de:3d:dd:63:cb:88:4a:77:4e:61:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Validity
Not Before: Jun 15 12:00:58 2025 GMT
Not After : Jun 16 12:00:58 2025 GMT
Subject: CN=b94fe17a1c5a55d88c20da135dccecd9c05d20ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:05:14:05:55:c9:24:88:08:7c:31:f3:e7:
bb:57:80:a8:3a:10:99:a7:93:29:f0:74:48:56:cd:
28:d2:1c:05:8b:b5:7e:d2:96:fc:48:31:67:07:ab:
db:4e:c1:ac:c4:6e:74:58:12:7b:fc:cf:34:4b:75:
56:b9:f4:14:e1:00:8d:ae:09:7b:a8:36:e5:08:b6:
d1:58:ce:24:af:c7:df:e9:b6:f7:19:f7:24:42:bf:
19:11:68:38:64:81:79:04:ac:28:7d:9c:63:96:09:
51:75:72:90:61:be:50:27:91:d6:70:70:00:2c:cf:
a0:2f:77:6d:52:a1:06:75:7a:48:4e:d4:b4:42:a9:
88:04:c0:3b:06:c4:27:bb:48:80:5f:d7:d9:77:36:
ad:e3:9b:41:c5:6b:9f:e5:d6:74:c9:ea:7f:82:0e:
cb:09:c3:7a:2b:ee:88:40:15:0d:92:72:8b:3e:92:
f4:c9:3f:b0:a7:5f:86:f5:3c:65:04:8d:d1:54:5d:
bc:ae:d2:c8:9b:23:7e:ac:37:e4:4f:5d:90:08:75:
85:48:ae:ce:84:12:07:4a:2b:fb:0a:c6:8c:5a:fd:
bb:4e:53:ec:40:b3:f6:2c:f7:ae:7a:ea:0c:63:1a:
c3:a4:67:5b:b1:55:30:9b:5d:00:93:c4:a6:92:88:
01:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4F:E1:7A:1C:5A:55:D8:8C:20:DA:13:5D:CC:EC:D9:C0:5D:20:ED
X509v3 Authority Key Identifier:
keyid:F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:dc:62:96:e4:4f:46:a4:7d:d8:9b:8a:e2:7a:c8:52:59:b3:
cf:54:72:07:b9:76:16:86:2e:83:21:b0:41:64:89:49:00:34:
18:bd:b6:f4:13:f0:de:fa:33:82:29:24:66:59:58:f9:96:fe:
c5:e8:2a:dc:3e:66:d8:cf:65:76:76:12:98:fc:16:18:e1:97:
8a:20:f1:a4:31:6d:db:51:eb:c8:88:78:77:1f:06:f0:f2:3c:
34:dd:d7:e0:44:46:0b:81:c9:d2:e1:cd:c4:4b:00:83:d4:f4:
87:5a:e9:af:62:44:3c:0c:16:40:d2:1c:68:7a:00:98:ca:57:
8a:b7:74:89:82:c7:1c:ce:47:e9:f3:76:a3:3f:6a:43:90:33:
bf:ea:f9:d8:4b:0b:6f:5e:ac:10:10:43:48:bc:fc:40:d4:9b:
a6:02:45:8e:80:16:74:8d:dc:8a:77:e0:b0:03:05:46:25:a5:
38:69:ed:09:e4:52:82:83:a9:c0:4a:bb:78:c0:22:ff:6d:0f:
20:86:3e:60:50:a9:5f:d7:2d:88:f5:be:32:6d:09:1f:80:95:
4b:2a:3c:9c:42:32:41:e0:25:25:9a:c8:ed:02:b9:7e:cf:01:
9b:f3:eb:04:fc:93:37:c2:1d:07:24:d4:77:0e:df:c7:23:a9:
e2:99:69:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:05:33 2025 by rpki-client