Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.mft
File: h9OLoS9GKcITH8YOiVDWwwO-fSI.mft (raw, json)
Hash identifier: TjJXRHAnZYuizFVUrH2Co9fDQtQocZUosh2GKPN8ACg=
Subject key identifier: 6D:69:19:64:F4:AF:6E:ED:33:83:6D:DD:22:72:3D:17:3F:0D:CB:91
Authority key identifier: 87:D3:8B:A1:2F:46:29:C2:13:1F:C6:0E:89:50:D6:C3:03:BE:7D:22
Certificate issuer: /CN=87d38ba12f4629c2131fc60e8950d6c303be7d22
Certificate serial: 019771512F95E08A984D9ABC56E2D929613C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9OLoS9GKcITH8YOiVDWwwO-fSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.mft
Manifest number: 06F3
Signing time: Sun 15 Jun 2025 02:00:35 +0000
Manifest this update: Sun 15 Jun 2025 02:00:35 +0000
Manifest next update: Mon 16 Jun 2025 02:00:35 +0000
Files and hashes: 1: NPXq7VLWTvwMe_H1BOcCF7vP8QQ.roa (hash: UBan9KbEcKtiRn9epXoesYMRtYi5lW0QY6/c4yNUKv8=)
2: h9OLoS9GKcITH8YOiVDWwwO-fSI.crl (hash: Y8Nb7LGeb48SAbhPrvWgttOiuUZ+nGr5Wql6b+heWlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9OLoS9GKcITH8YOiVDWwwO-fSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:2f:95:e0:8a:98:4d:9a:bc:56:e2:d9:29:61:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d38ba12f4629c2131fc60e8950d6c303be7d22
Validity
Not Before: Jun 15 02:00:35 2025 GMT
Not After : Jun 16 02:00:35 2025 GMT
Subject: CN=6d691964f4af6eed33836ddd22723d173f0dcb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:a4:78:1b:ac:02:7b:a4:97:4c:b9:6d:e7:
1a:17:58:33:1d:53:9e:9b:99:1d:a8:99:19:b5:38:
70:aa:53:bb:82:a8:25:d4:e8:9b:98:ed:e3:18:45:
47:7b:34:ca:29:8f:1d:ac:e1:71:37:e4:8a:09:4a:
70:43:ef:9c:ab:cc:a7:30:6a:18:f5:77:33:63:4c:
85:4b:53:2a:eb:ff:c8:59:c0:89:73:c8:c9:11:ac:
0a:19:6f:00:07:d2:04:b0:18:85:16:f6:eb:d0:40:
62:c8:27:2d:1c:c0:e5:11:60:a1:4b:ff:7e:f4:3c:
be:1b:f9:3f:32:8c:d4:08:3f:ee:e7:25:07:c2:1d:
f1:a4:02:66:2c:f7:d3:9d:2e:41:67:55:5a:04:be:
9a:eb:3e:c1:c1:b6:2b:8e:a9:c9:4c:2b:ce:97:af:
7b:8d:25:a3:11:6f:9f:dc:d6:89:0a:ee:48:80:1f:
4a:06:32:dc:44:2c:fc:b2:97:de:d1:5f:0f:eb:ba:
21:94:b7:a0:d6:a0:74:7a:9e:85:55:00:30:f8:39:
1c:ac:df:f3:6d:1d:f2:ab:e0:eb:b7:7e:f6:3f:2b:
ee:f2:a0:e0:68:5f:f2:a4:90:77:00:92:d8:37:f1:
65:5e:d0:dc:cc:23:d3:a8:90:d5:33:0b:1e:4d:f7:
b4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:69:19:64:F4:AF:6E:ED:33:83:6D:DD:22:72:3D:17:3F:0D:CB:91
X509v3 Authority Key Identifier:
keyid:87:D3:8B:A1:2F:46:29:C2:13:1F:C6:0E:89:50:D6:C3:03:BE:7D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9OLoS9GKcITH8YOiVDWwwO-fSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:00:4d:91:a5:78:cb:28:cf:6c:cd:ec:df:0d:69:6e:20:1d:
e8:13:5a:74:d1:8e:b6:da:a0:d2:70:bf:0f:83:e5:03:de:7b:
7e:66:67:f2:20:50:5c:67:ed:a2:41:f1:41:a5:ab:ab:bc:3a:
2e:43:64:0d:26:fd:3e:7a:5e:3c:be:7b:36:11:c0:65:91:da:
1d:b6:84:59:f6:99:61:9c:73:0f:bf:a6:51:6a:4c:a7:8a:6c:
bd:aa:a8:b0:81:f7:95:0b:50:52:7a:be:77:71:13:c8:9f:8b:
cb:fe:eb:f4:82:b6:d6:b8:3d:91:2e:e4:d4:1d:5d:b1:14:5c:
2a:4c:ad:25:70:db:f2:00:e4:e6:22:7d:d9:09:ba:59:a5:fc:
ea:d7:c4:9e:eb:c1:dd:67:c1:fc:7a:b3:41:7f:80:91:3f:eb:
7c:b4:6c:81:59:6d:a4:47:b8:57:f0:af:b0:4a:28:4c:14:b7:
c9:c3:ff:7b:28:40:de:56:da:f5:b4:b1:26:02:4a:f4:2d:53:
01:e8:af:86:e3:ef:c0:22:56:d1:bb:48:84:91:af:e4:4e:f5:
60:13:c2:90:79:3c:45:2e:ef:89:5f:5b:a1:e1:38:11:19:db:
4b:46:eb:f8:63:26:2d:86:3e:66:f1:60:77:7f:cd:64:df:a1:
6c:96:37:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:21:29 2025 by rpki-client