Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
File: 9NwmxibFHF3vbyRm849VslApZC8.mft (raw, json)
Hash identifier: wZLWaEv8bQI0sFYcWrelKL3N/x6mYO2KPiONNfVOr18=
Subject key identifier: 0A:5B:79:B9:CA:10:31:4E:5F:F1:A8:E6:73:FD:52:A9:71:C4:31:BC
Authority key identifier: F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
Certificate issuer: /CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Certificate serial: 01976D3DF4C45DEF89E339272CC38489F495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
Manifest number: 0DFA
Signing time: Sat 14 Jun 2025 07:01:06 +0000
Manifest this update: Sat 14 Jun 2025 07:01:06 +0000
Manifest next update: Sun 15 Jun 2025 07:01:06 +0000
Files and hashes: 1: 9NwmxibFHF3vbyRm849VslApZC8.crl (hash: 3rdSLu+GAWOAs5jQ1oClhmCV4eNi0VSEGhcN5CHbeRk=)
2: XI2V1xAOtuCnHnEsCZ4HB4sk5c0.roa (hash: NGuYGkHyS6sZ+OmDpCbd7Xg31/u7/ppig2sfjfcm+Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:f4:c4:5d:ef:89:e3:39:27:2c:c3:84:89:f4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Validity
Not Before: Jun 14 07:01:06 2025 GMT
Not After : Jun 15 07:01:06 2025 GMT
Subject: CN=0a5b79b9ca10314e5ff1a8e673fd52a971c431bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f3:ea:0a:55:df:61:52:8a:98:f6:5f:08:ab:
0f:d8:c5:69:a9:6d:25:01:7d:52:8a:61:ea:85:66:
bf:3c:bb:a4:30:8c:fd:84:e1:a7:ba:cd:99:7d:90:
03:2a:e5:8b:d4:1b:df:50:7e:58:ee:74:6d:f8:8f:
d5:67:f9:41:9a:a8:5c:4e:bd:48:f8:8d:8c:58:b8:
ae:72:a7:e9:70:3b:e4:dc:61:bd:15:d6:ae:62:27:
ca:41:83:e4:c3:b2:e9:e7:88:38:b8:cf:c9:83:37:
bb:c7:48:fd:45:7d:09:1f:1d:97:b8:71:c1:57:a1:
b6:ce:27:7e:ab:a5:e8:24:da:0f:04:34:46:97:03:
aa:8b:8e:34:9f:2f:cc:a1:d2:bd:b7:10:93:3b:76:
47:1b:bc:3c:0d:58:8d:2b:7a:a3:2b:ab:c1:ac:5b:
b5:4d:80:67:1c:13:59:14:a7:56:06:32:47:47:d2:
c5:b6:b0:6d:b0:ac:69:15:03:56:7e:95:df:a8:d5:
6c:bc:f2:d0:a4:53:a0:58:c9:0b:81:c2:72:fa:44:
18:3b:71:ae:57:99:35:d2:9f:4b:6f:ca:4a:6c:c4:
91:03:84:cd:f2:36:85:b2:a3:bd:ae:14:03:0d:cb:
d4:63:29:e1:6a:ad:0d:a5:d1:ef:cb:f2:fd:18:7c:
fe:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5B:79:B9:CA:10:31:4E:5F:F1:A8:E6:73:FD:52:A9:71:C4:31:BC
X509v3 Authority Key Identifier:
keyid:F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fc:e9:a4:7a:17:a3:ac:ae:32:b5:7e:42:98:33:3b:d3:a0:
d4:80:95:50:7c:ed:27:8d:e3:f3:5b:fa:8b:73:f6:18:ec:c9:
22:e5:91:4a:90:72:90:14:d2:bd:f5:83:0b:c3:e9:b3:2b:77:
4f:dc:91:0a:0d:d5:61:43:c8:75:e0:83:5d:ce:1d:6b:13:12:
84:7d:57:1a:4b:03:db:e6:ed:fc:61:ba:f2:0d:40:33:67:8e:
ce:0b:a8:17:21:34:90:1a:8c:0a:da:7a:70:98:c1:00:89:c9:
03:aa:4f:60:5a:e3:d2:2c:f6:96:a4:a3:f6:34:c8:a1:b0:f8:
e0:e8:02:b6:3f:cf:20:ac:d6:f4:75:c8:e7:43:d9:e8:64:7f:
7c:6f:63:58:f4:c6:7f:a7:53:9e:6d:da:17:d6:b7:fc:24:bc:
e7:54:95:fb:3f:f0:80:c0:7a:a8:e3:23:fe:34:40:6f:05:fb:
e9:ee:56:f4:a4:08:fe:64:68:9a:3b:34:74:fe:a3:41:ef:71:
4e:a8:5a:9e:d7:9d:97:55:a0:1e:34:db:7c:fc:50:8e:f0:5e:
a6:a9:07:c6:6c:32:bb:4c:d9:a2:04:63:39:96:67:51:ca:c0:
f4:82:56:5d:a7:9b:a9:f5:14:ee:83:06:17:8b:28:c8:78:56:
a9:7c:ed:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:30:12 2025 by rpki-client