Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
File: 9px-uGIkrbOECIR97kz8TEADrV0.mft (raw, json)
Hash identifier: vI9XrUlwSkIHPaJPytmR3rCbFrxeF5E386Qo+sMQqeg=
Subject key identifier: B9:15:B8:0B:AD:DD:C1:C7:12:BF:F3:C7:C9:1A:A3:FC:87:33:3D:00
Authority key identifier: F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D
Certificate issuer: /CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
Certificate serial: 019768BC09F5088B5BD8E4DF63821670A157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
Manifest number: 0DEB
Signing time: Fri 13 Jun 2025 10:00:43 +0000
Manifest this update: Fri 13 Jun 2025 10:00:43 +0000
Manifest next update: Sat 14 Jun 2025 10:00:43 +0000
Files and hashes: 1: 9px-uGIkrbOECIR97kz8TEADrV0.crl (hash: ObyzyXhdJNRYRkrxhDD2I+G9I/GYFD8eGNlxOnUmRZg=)
2: YdnfzNQU6p17HNy9eA1Hw53deFE.roa (hash: 2Yw8oKr6x9VyLBdNC/o5JNz+v9yyH0gMbVBwfTOD/GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:09:f5:08:8b:5b:d8:e4:df:63:82:16:70:a1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
Validity
Not Before: Jun 13 10:00:43 2025 GMT
Not After : Jun 14 10:00:43 2025 GMT
Subject: CN=b915b80badddc1c712bff3c7c91aa3fc87333d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:2a:b0:84:89:06:84:d7:f8:10:6a:d0:41:
7d:4f:d1:52:12:f1:2f:a0:e5:49:71:e3:2b:b1:25:
c2:e8:8d:41:ed:17:40:4e:1f:d4:43:10:16:28:75:
a8:af:fd:ab:7f:a4:d7:3b:7d:35:a7:e8:ce:e7:c6:
fb:8f:a0:71:1d:df:33:c8:ab:e9:57:18:08:0b:92:
1c:31:e2:25:40:0b:06:41:6b:db:ef:74:0c:72:c1:
bc:2a:0d:2d:ca:32:55:13:62:28:27:10:8c:c8:5a:
db:e1:92:92:66:d0:07:04:9f:76:4f:e5:89:2b:2b:
75:a7:c3:85:d2:b5:4a:89:63:d8:97:04:03:35:79:
79:af:f5:3f:86:c6:12:30:d4:14:ae:92:04:18:4f:
af:9d:16:84:90:94:6c:62:f7:78:52:d6:0a:b2:f4:
41:43:9c:7b:21:2c:48:44:46:39:7d:e7:a8:a9:03:
7f:d8:8d:97:b8:ae:f7:6f:a5:33:44:9a:55:52:6f:
0d:cb:2c:dd:c1:b0:d0:96:5b:b2:03:7b:8d:ec:e4:
96:42:b0:97:89:bc:5f:b4:f2:8d:92:e9:93:a6:d6:
5d:59:83:46:c3:58:61:46:9e:94:9c:3e:cb:52:8e:
5b:8e:cf:51:a3:81:96:6b:66:d2:f5:c4:dc:5d:1b:
f4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:15:B8:0B:AD:DD:C1:C7:12:BF:F3:C7:C9:1A:A3:FC:87:33:3D:00
X509v3 Authority Key Identifier:
keyid:F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8d:3e:33:3c:3b:a4:7d:4a:e9:07:98:0f:53:ce:fa:3d:da:
f8:64:06:2e:81:dc:fb:a9:9b:57:45:56:d5:a7:db:65:65:6f:
16:b9:13:26:ae:16:bb:2d:4d:d7:3d:4b:a1:1d:ba:6a:ef:f9:
9c:4f:aa:f6:11:c6:68:ff:eb:5a:b7:c8:7e:5c:ef:f4:3c:0e:
84:fc:64:84:62:f2:7e:61:97:b5:35:54:ff:af:88:35:01:7d:
c9:0a:a3:c0:37:4b:6e:86:82:8d:0d:cb:e6:01:c8:78:a6:e4:
3b:b7:79:95:4c:5e:12:d9:cf:8d:15:4b:89:f1:d8:a3:03:54:
e4:45:d3:5b:d1:1f:98:cb:ab:ce:a2:ec:78:d0:cd:5f:45:1e:
58:6a:c0:6c:b8:82:e0:bf:c2:73:a6:06:17:f9:9c:17:32:ed:
74:6f:a3:c8:30:e2:25:13:fb:f4:ca:7c:c0:1a:bf:23:76:77:
b4:2a:c0:4c:78:5e:d4:be:7d:3e:89:ed:6a:ff:71:84:ea:9d:
31:4f:cc:da:40:65:83:46:1a:30:45:38:0a:98:5b:00:c6:85:
9a:1a:f7:9e:86:4e:e7:d4:91:0f:3b:8d:34:17:5b:0d:5b:fa:
12:6b:4f:38:60:b6:7b:0d:ab:0e:9a:4b:fc:45:0f:f6:ca:aa:
b8:52:40:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:23:28 2025 by rpki-client