Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
File: 9rkcLAjwDWdj0unmosRCETDz3b0.mft (raw, json)
Hash identifier: /hYIg0dSNmqZw7C8PU1ogiLnsOBlcwKimeQZDIbGKLM=
Subject key identifier: 21:F0:BE:0A:25:E1:68:2A:F9:97:96:0A:B4:9C:95:B9:93:DF:10:C1
Authority key identifier: F6:B9:1C:2C:08:F0:0D:67:63:D2:E9:E6:A2:C4:42:11:30:F3:DD:BD
Certificate issuer: /CN=f6b91c2c08f00d6763d2e9e6a2c4421130f3ddbd
Certificate serial: 01977151420F4D84801BD84724766472DDF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
Manifest number: 023E
Signing time: Sun 15 Jun 2025 02:00:40 +0000
Manifest this update: Sun 15 Jun 2025 02:00:40 +0000
Manifest next update: Mon 16 Jun 2025 02:00:40 +0000
Files and hashes: 1: 9rkcLAjwDWdj0unmosRCETDz3b0.crl (hash: ipKuQ1/Di4EhHEpEL+7FvktD5fyAh2jmLXBjgZEoQ2c=)
2: N9ZAaiCE9aK-MVoBAkGyVQBVSz8.roa (hash: Lgl9Qg3vfXwyIJqunbOTrkAFiRdS7QjwGWUohli4wbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:42:0f:4d:84:80:1b:d8:47:24:76:64:72:dd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b91c2c08f00d6763d2e9e6a2c4421130f3ddbd
Validity
Not Before: Jun 15 02:00:40 2025 GMT
Not After : Jun 16 02:00:40 2025 GMT
Subject: CN=21f0be0a25e1682af997960ab49c95b993df10c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b2:d9:c2:32:0b:83:f2:d4:66:f5:2e:69:d2:
43:49:28:94:24:38:f4:fe:9c:18:f5:f9:dc:ef:fc:
0f:a1:7f:a7:bc:1a:fa:61:d8:9c:97:dd:f0:d7:34:
28:aa:03:1d:c3:ad:d0:46:a1:17:43:04:f8:ae:ae:
52:30:87:6f:54:7d:65:98:d8:de:bd:d8:1e:16:ed:
5c:f4:79:94:30:c1:8f:24:eb:17:ce:26:19:76:a9:
e6:0e:45:32:bb:c7:ef:13:b0:91:62:8b:c7:6b:92:
3c:30:49:7e:cf:65:81:22:ab:f5:4f:31:1d:8b:1f:
5a:dd:fc:4e:73:37:28:da:56:21:b0:d6:85:e0:fc:
39:a7:98:42:30:fd:7a:ac:6a:da:b0:05:6f:8d:ea:
a5:e0:41:6a:5d:91:bc:17:05:a4:2b:a1:f7:55:a6:
7e:32:12:76:00:a6:84:db:92:52:7f:6a:df:64:87:
b0:41:03:44:32:3b:42:bb:59:dc:ec:75:d2:78:0a:
c5:ea:87:cc:7e:51:82:7f:3f:5c:51:2d:5e:36:87:
c0:29:08:93:e0:18:00:03:30:af:fb:34:69:46:b0:
07:44:9f:1f:ab:be:c2:c3:97:43:8a:51:aa:68:2e:
a7:82:c3:90:39:f5:13:ea:8a:e3:c2:9b:fb:da:4d:
9d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F0:BE:0A:25:E1:68:2A:F9:97:96:0A:B4:9C:95:B9:93:DF:10:C1
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:2C:08:F0:0D:67:63:D2:E9:E6:A2:C4:42:11:30:F3:DD:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f9:09:cd:38:87:44:f7:d5:22:1e:32:79:ae:78:82:71:34:
31:c0:64:8f:f9:65:39:a5:4f:67:d5:3a:a4:13:9e:5c:e6:81:
d8:fe:fd:76:e7:c2:92:67:5b:2b:9c:77:cc:0c:b6:6b:67:09:
b4:9b:e7:b0:4b:65:f3:59:9e:bd:c0:3d:54:2e:1e:0e:b1:3f:
58:59:00:b0:fd:94:20:4c:3e:0c:cb:50:8c:a7:06:9b:83:21:
16:ed:eb:b8:a3:de:5b:f3:06:da:61:33:ff:01:98:4c:36:61:
7d:44:a5:3f:83:3a:fd:f7:f7:3d:af:5e:02:85:07:d0:08:36:
3b:88:81:40:86:92:2f:71:81:fc:07:ab:08:17:e2:12:0b:e5:
a7:93:e1:14:cb:f5:12:3f:06:3e:94:5f:8f:ab:a0:55:75:83:
a3:52:2c:b4:4d:72:29:c9:2d:32:79:6f:6c:17:2f:bf:96:13:
a5:d1:90:b4:ee:e9:7a:21:80:03:c0:e1:c3:ad:34:14:54:db:
e8:0b:f9:99:88:55:3c:54:45:e7:3a:6d:83:58:fe:a9:e1:2e:
64:65:7b:ee:54:aa:ba:bc:c0:44:be:e7:41:eb:85:cc:7d:8f:
e2:4a:9f:93:1c:21:c9:d8:78:f6:a0:e9:0e:b2:c3:4e:c1:63:
e2:1d:5c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:43:46 2025 by rpki-client