Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
File: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft (raw, json)
Hash identifier: x9XSLnQoDi2Um1MdAdVnlz1HdHnHARJWu5P3AA7Rgvk=
Subject key identifier: B3:09:BA:69:75:70:1A:3E:34:CD:E2:41:6E:26:2A:E6:6E:1C:87:3E
Authority key identifier: F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
Certificate issuer: /CN=f50e225bfb45218b997719804ea287f1751cf20e
Certificate serial: 01977D55288E9C1B27178B040269BBA2C296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
Manifest number: 159A
Signing time: Tue 17 Jun 2025 10:00:22 +0000
Manifest this update: Tue 17 Jun 2025 10:00:22 +0000
Manifest next update: Wed 18 Jun 2025 10:00:22 +0000
Files and hashes: 1: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl (hash: a8BEux+pIUkkXnmphIbAXVzcVMSRNk7O2v2CiRjRB+0=)
2: tCReBQEfist-xvNAig7wcNT_kFY.roa (hash: eAnNRfWeMAKf3K2opw1l/ihLmhFWT1Klsp1nr6sdAiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:55:28:8e:9c:1b:27:17:8b:04:02:69:bb:a2:c2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50e225bfb45218b997719804ea287f1751cf20e
Validity
Not Before: Jun 17 10:00:22 2025 GMT
Not After : Jun 18 10:00:22 2025 GMT
Subject: CN=b309ba6975701a3e34cde2416e262ae66e1c873e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:53:6f:3b:e3:5c:2c:37:d5:ea:d8:b7:1f:
0b:6e:e5:fe:32:2d:bd:34:cf:18:1a:56:f9:94:3c:
8e:4c:5d:db:73:1f:21:64:18:0d:85:f0:80:88:45:
a0:61:43:fc:d6:00:2e:8c:8e:5a:2b:b2:b7:a1:49:
54:23:97:b6:67:cb:f2:21:e6:76:1d:1c:79:93:8d:
8a:33:bc:fa:83:1e:d3:82:14:c9:0c:3c:3b:19:70:
77:24:e3:3e:37:41:3c:35:a9:06:4b:a9:41:35:90:
ec:18:74:ea:91:c4:5b:0c:db:e1:bb:21:bf:19:91:
48:ca:8b:d3:88:69:ad:a1:97:dd:63:27:c7:29:33:
4c:15:75:9f:c4:a6:6b:0a:60:ea:cf:e2:47:be:24:
73:97:9d:08:92:55:f7:4c:bc:ce:ed:88:33:25:cf:
50:f6:cf:2f:86:19:30:ed:ed:01:d1:72:db:e5:e6:
81:87:bd:e3:7d:40:68:86:e3:71:eb:80:ed:47:69:
6c:cd:f3:ba:52:c6:54:a8:d0:8a:be:25:df:2b:dd:
30:ca:bc:4a:72:28:37:3e:fb:83:69:d2:34:e6:04:
fe:cd:49:97:3b:5c:cb:0f:d1:2a:b3:10:11:bc:90:
f0:9b:73:8a:32:fb:d7:19:28:2c:6c:46:8d:36:c9:
63:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:09:BA:69:75:70:1A:3E:34:CD:E2:41:6E:26:2A:E6:6E:1C:87:3E
X509v3 Authority Key Identifier:
keyid:F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:11:2d:97:8f:21:8a:82:72:b8:b4:36:bd:35:17:5d:fd:3b:
48:ca:4f:84:5a:24:9d:5b:76:73:e4:e8:0a:4b:ae:bd:c2:e5:
e5:41:12:fd:d7:0a:e3:8a:9a:39:c4:0c:0f:fa:a7:8f:a7:a3:
66:2f:fb:6d:45:b6:48:a4:47:63:75:55:f8:cc:91:23:eb:23:
5f:c6:0a:73:63:74:80:65:79:4c:5e:3a:f3:78:6d:27:88:37:
ee:b4:56:f7:cd:66:79:b2:d2:ec:6d:cf:c8:59:7e:a5:cc:3f:
35:0e:a4:ca:0f:72:bd:6b:7f:00:2e:4e:55:e2:b4:03:d4:06:
2b:03:5d:32:7e:54:1c:9e:ed:de:fd:75:12:d1:18:e1:52:95:
86:7b:dd:f4:88:a7:37:01:2f:82:57:db:4d:a2:ca:79:fb:42:
54:87:4b:f8:c9:34:8a:cd:9d:97:f1:e1:f0:3f:16:db:89:75:
42:fa:91:cf:e9:7e:a3:3f:e9:ef:96:fc:59:d6:46:60:d7:a6:
ff:4e:ea:02:a9:c4:82:fc:87:ca:4f:58:2d:4c:49:23:b9:4c:
8d:8d:77:3d:d8:b7:6d:f0:cd:5b:8a:3d:65:d8:dc:c5:b0:29:
18:2d:71:45:23:f5:32:f9:dc:33:db:af:e6:7a:41:c2:05:e6:
bd:25:01:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:03:00 2025 by rpki-client