
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
File: B9sjpeJVD_l0yl9BkXrIZ9UONek.mft (raw, json)
Hash identifier: XK3g+9zKmz9Zeb4gGhsODTuRyU7fCxavWnNRNoWVA70=
Subject key identifier: 1D:5A:14:F5:1C:1B:DC:69:10:C7:BB:3C:BE:7A:1B:A2:0B:D4:EB:4B
Authority key identifier: 07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
Certificate issuer: /CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Certificate serial: 01977FE94B0BC801CF0DE0D4C746984A6E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
Manifest number: 08D3
Signing time: Tue 17 Jun 2025 22:01:24 +0000
Manifest this update: Tue 17 Jun 2025 22:01:24 +0000
Manifest next update: Wed 18 Jun 2025 22:01:24 +0000
Files and hashes: 1: 8XyUaz5PxPLue0CrUchlRmHnqJs.roa (hash: KMSpxL6wtJUNFCJFnfAUFjLMRmLQ4Dcv8f1856Q+IkY=)
2: B9sjpeJVD_l0yl9BkXrIZ9UONek.crl (hash: fbynLCUxP9DNmHbuUUWbKas0OqBnrEni9p32lZVY95o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:e9:4b:0b:c8:01:cf:0d:e0:d4:c7:46:98:4a:6e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Validity
Not Before: Jun 17 22:01:24 2025 GMT
Not After : Jun 18 22:01:24 2025 GMT
Subject: CN=1d5a14f51c1bdc6910c7bb3cbe7a1ba20bd4eb4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8c:b6:ed:aa:76:c1:a4:2c:d7:b4:0c:3f:99:
9c:4f:75:41:0e:0f:50:ef:3d:a6:35:1b:33:52:0a:
0f:3f:93:bc:8d:fc:dc:5a:fd:e2:21:b6:4d:fb:55:
e4:92:de:8e:ec:b8:e2:86:09:ae:ec:cb:f4:e5:64:
43:25:f2:e1:5d:22:60:ac:e6:28:ec:d8:f2:90:25:
43:a0:e9:6d:6b:d4:06:e9:49:12:f5:55:02:70:a9:
c9:56:71:7a:e6:d8:34:4e:49:d5:d1:d1:95:a4:af:
55:57:1f:d4:ab:a6:d8:a0:29:1f:cc:e7:6e:e2:5d:
5b:af:c1:f7:76:22:6b:65:e6:48:3b:bd:f7:32:b4:
cd:c7:36:11:ad:40:98:e6:9f:c6:32:1a:14:da:db:
d7:cc:47:a1:a2:a5:86:d9:b7:e4:20:c0:0e:9f:57:
23:1c:4b:c6:67:df:25:d0:c8:2f:76:d3:a2:78:f9:
a1:22:bf:8e:48:42:59:8d:97:c8:8b:07:0f:6d:c7:
27:52:1c:5d:04:9f:09:0e:76:42:0d:79:5b:76:9f:
22:00:db:f0:17:01:cf:72:61:a3:c1:e8:9b:12:cc:
8e:af:f4:c8:ab:e1:a5:61:35:8e:8d:4a:1f:6c:2d:
08:36:df:04:d3:13:3a:da:38:2f:02:84:e2:d7:dd:
f9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5A:14:F5:1C:1B:DC:69:10:C7:BB:3C:BE:7A:1B:A2:0B:D4:EB:4B
X509v3 Authority Key Identifier:
keyid:07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:73:20:c1:aa:7f:5a:25:c4:bd:df:0c:c0:25:74:c8:19:76:
1c:2e:ec:f0:57:27:ac:e1:93:c5:7d:ed:08:ad:f7:cf:36:33:
d8:d0:bd:e9:0e:1e:fb:0d:97:8d:7a:7a:63:77:fa:1f:02:72:
b3:8e:ab:46:df:af:26:f0:ca:7f:7c:c3:e6:7a:4a:fc:a6:88:
0b:b1:7b:8c:69:4e:49:b7:4a:8b:c4:10:1b:74:3e:54:8c:86:
1c:ee:7c:a5:9c:28:dc:9b:71:75:e2:5f:ce:32:b5:15:12:78:
cc:4e:0a:d8:73:f3:42:33:3a:86:25:e9:9e:e0:0b:e0:d9:37:
cf:f4:61:41:f3:d9:78:91:eb:d0:37:bb:38:6d:29:df:f6:9c:
3f:85:43:ee:b4:97:3d:b7:a2:a6:e3:e1:86:de:e3:8b:ee:b3:
94:4b:c6:01:84:8c:6d:b3:09:db:7b:31:cb:87:5f:a4:ab:82:
8a:05:1d:48:f7:5a:da:a4:23:06:a6:f2:5e:88:03:74:62:86:
86:be:57:18:ad:19:e0:98:ae:7e:a1:f2:fc:a2:09:cc:7e:e7:
2e:ba:23:40:2c:76:cf:d5:a1:25:8d:1a:bf:05:28:48:15:ef:
95:44:24:f2:2a:47:31:58:00:af:b7:d7:04:86:91:29:b1:8d:
07:9c:5d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:32:27 2025 by rpki-client