Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
File: 9X3FmWyBeMDeLqIEme696t5AI-s.mft (raw, json)
Hash identifier: nOkmnZsgWUEuevX3wQrSv1QnMmh86EMDRfYRL7Mo0Uc=
Subject key identifier: 1D:95:89:98:AB:F1:6F:69:A8:9D:17:62:D1:91:A7:DB:C5:6A:3C:1D
Authority key identifier: F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
Certificate issuer: /CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Certificate serial: 01976CCFE22B87D9A71A9A06AFBCCCA243EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 05:00:52 +0000
Manifest this update: Sat 14 Jun 2025 05:00:52 +0000
Manifest next update: Sun 15 Jun 2025 05:00:52 +0000
Files and hashes: 1: 9X3FmWyBeMDeLqIEme696t5AI-s.crl (hash: MdvJe8+B0AFbXw2bsjOTvSOnmBlAzmvuM8mXHKYXsFw=)
2: Ja-1OHflBPV5uzkrzsrUkckcSDQ.roa (hash: 5hTfi5zIdy0pksBzayRUkBZiz92X7DgH1Hnbmun+ujM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:e2:2b:87:d9:a7:1a:9a:06:af:bc:cc:a2:43:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Validity
Not Before: Jun 14 05:00:52 2025 GMT
Not After : Jun 15 05:00:52 2025 GMT
Subject: CN=1d958998abf16f69a89d1762d191a7dbc56a3c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:41:09:cf:48:4b:f0:5a:ce:05:44:51:66:
71:76:72:4d:78:8c:ef:d2:0e:72:4f:c2:7d:4c:45:
02:d2:57:3b:6b:4d:8a:ac:5a:27:1d:f5:c9:3b:62:
9e:ac:1a:ee:5d:2f:e0:fd:8a:19:83:9c:4e:9e:48:
25:01:d6:5d:c8:e4:91:7e:94:22:c5:ce:91:a4:8e:
8a:08:c4:4e:71:13:fe:ea:c3:3c:5b:5f:2b:08:ae:
bd:70:c8:8f:f3:f2:0d:9b:36:6e:e5:88:03:fb:29:
5e:45:a2:32:28:b8:de:0a:0f:ba:ab:3f:3c:b3:59:
9f:02:93:60:a5:81:17:b9:39:ca:b4:fd:54:67:b4:
78:e6:7f:68:42:cd:82:bc:99:b2:7a:ac:c4:10:7c:
e7:e5:d8:1c:43:96:80:7f:e8:53:7b:f7:8c:64:d5:
e9:0c:0d:66:ad:e1:da:ee:ec:d7:d0:2b:2b:3d:04:
8f:ab:7c:4f:96:60:a9:b9:68:f5:86:d4:67:4d:99:
f8:ea:d5:82:b9:b3:ce:04:65:2e:16:24:b4:9c:8b:
8c:fa:88:a0:02:33:f8:25:ef:01:f1:06:a8:be:3d:
83:2e:26:8b:31:40:21:2b:e9:79:c1:7b:4f:16:0d:
96:e0:51:9a:83:7b:aa:48:f5:46:77:30:bd:9b:7d:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:95:89:98:AB:F1:6F:69:A8:9D:17:62:D1:91:A7:DB:C5:6A:3C:1D
X509v3 Authority Key Identifier:
keyid:F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:55:64:06:25:dd:f0:00:c8:aa:e9:cc:4a:6e:5b:ee:2d:dc:
eb:ca:39:0b:f3:f4:26:59:2f:24:29:1f:d8:29:5d:b7:0a:c9:
a7:67:72:f4:ad:cd:88:4c:31:69:39:4f:12:c7:4a:be:21:89:
9b:7b:6b:e8:c9:12:7a:b3:77:dd:48:2c:7d:0d:21:a5:1b:57:
a6:ad:65:d9:e0:d9:ad:a1:5e:27:2a:c3:97:6f:14:1f:85:78:
c5:06:ee:42:0f:43:46:55:ac:d1:25:44:f8:5b:36:d3:ce:39:
b1:76:bc:71:3b:59:7a:9b:62:86:d9:d1:ef:e4:6f:ac:7a:14:
ea:b5:6d:f2:8b:17:cd:32:ad:8a:dd:1c:82:ec:ac:af:4b:a5:
8d:00:a4:6c:e4:84:12:7a:3f:27:6a:0c:8f:d4:11:90:f7:c7:
8b:13:39:c5:94:1e:4d:a1:d6:0c:8d:ca:06:80:72:c0:27:7d:
e2:65:a0:d0:aa:07:c3:d3:63:9e:9f:ce:ec:4c:73:36:16:a4:
e2:d1:fc:7c:3e:b5:f8:f0:5b:97:86:20:83:b1:7f:84:8b:40:
5f:98:b7:cd:fa:22:05:f6:68:18:16:a7:26:99:7f:07:9f:d4:
d1:45:0c:0f:f2:aa:29:97:ed:fb:e0:d3:9f:cd:3e:ac:4b:22:
ff:aa:f9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:26:34 2025 by rpki-client