Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
File: m0fuHxfJh967LAINi18ti9rb63c.mft (raw, json)
Hash identifier: McfaDZP8r7sDRH3uDBC8VY5N+LHbUKqXFgH0k4iKiU4=
Subject key identifier: 8A:62:9A:BE:5D:2A:F2:D2:F6:D8:38:94:A4:E6:41:9A:DC:55:7F:5F
Authority key identifier: 9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
Certificate issuer: /CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Certificate serial: 01976F2D1EA98C6506DC7E2B550295085155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
Manifest number: 0D7A
Signing time: Sat 14 Jun 2025 16:01:57 +0000
Manifest this update: Sat 14 Jun 2025 16:01:57 +0000
Manifest next update: Sun 15 Jun 2025 16:01:57 +0000
Files and hashes: 1: 126M92i4yvgJWpcn8XcIW24xKRw.roa (hash: gvLu6/32Bhn0SToW2HYoFaVXP2rKf3ibNrus5LTj59I=)
2: 2Y-BQWwW7_ggvBXNnc8W9Hw_ByE.roa (hash: JhmK62xSjdy0MLOq5+Y9bNPh5TyhHzNoMKSxAmlyqP4=)
3: m0fuHxfJh967LAINi18ti9rb63c.crl (hash: IuhANRo1pI/wQ5dzfou1QVATnB+wHGaGB7NmUMRGspU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2d:1e:a9:8c:65:06:dc:7e:2b:55:02:95:08:51:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Validity
Not Before: Jun 14 16:01:57 2025 GMT
Not After : Jun 15 16:01:57 2025 GMT
Subject: CN=8a629abe5d2af2d2f6d83894a4e6419adc557f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:f7:a8:5b:e9:8f:f4:ea:9e:ba:df:17:28:
24:ad:37:ec:c2:88:6b:38:c5:77:09:49:a4:d5:47:
51:dc:44:c4:00:05:32:b3:41:a0:75:59:44:5c:8f:
8a:0b:d0:76:1f:10:f6:18:df:fe:d8:10:2a:72:96:
77:39:08:f7:61:11:29:e1:87:95:72:40:f5:f4:28:
2e:9e:cc:c7:c7:f9:65:55:04:a6:bf:3b:8e:01:d0:
4f:d3:1f:cd:53:f6:44:b8:10:78:84:20:9d:4f:cb:
6d:b9:2c:79:44:85:b6:d6:b6:52:38:84:e9:63:fd:
fe:1d:c5:43:cb:d3:38:92:4c:86:39:89:c1:8e:47:
29:f9:d8:b4:e7:e5:3e:ac:57:6c:eb:1e:35:ef:ea:
98:65:0a:f0:65:73:6e:38:53:9c:5a:7b:e0:87:fe:
57:17:ab:6b:70:52:09:e9:0b:98:d5:46:8f:62:53:
d2:1b:ad:45:d0:d4:8d:9e:32:7c:b0:3e:ec:21:e3:
5a:1e:d3:1f:5a:41:be:62:53:91:71:3d:53:67:07:
28:37:79:d3:fe:91:e9:75:6b:73:c8:af:b7:ec:ac:
c6:5d:37:a8:6c:66:04:d9:61:53:be:13:05:d1:6d:
6c:0a:6d:5c:0f:ea:74:82:59:ef:02:60:c7:62:02:
e7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:62:9A:BE:5D:2A:F2:D2:F6:D8:38:94:A4:E6:41:9A:DC:55:7F:5F
X509v3 Authority Key Identifier:
keyid:9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:08:1f:c2:c6:ce:d6:e6:4e:0b:50:58:f4:a2:78:ee:bd:76:
45:97:12:19:a4:36:39:91:ef:24:94:1e:b8:df:96:c0:4a:c6:
0a:7a:a7:71:fe:84:e5:f4:49:1d:95:9e:b9:e0:85:3a:9c:25:
36:fc:54:8f:e3:2c:7a:ce:fc:42:d5:8e:63:50:62:9b:f6:7c:
db:7e:30:1c:fc:3a:02:0e:33:5a:b7:5f:be:30:0b:5f:ca:2a:
28:04:1b:d3:3a:f0:b6:fa:4c:6d:5e:a9:c6:9e:1d:ea:cb:ee:
0c:af:0e:66:85:cf:dc:24:b7:0a:12:bf:be:04:c3:4b:a0:6e:
74:1f:26:69:8a:80:ee:d7:6a:a2:f7:0c:50:f0:69:ac:c3:be:
af:c9:33:79:ba:10:a7:8e:bb:84:99:8e:6d:a3:d9:27:dd:54:
e9:20:31:28:db:fb:6a:26:d0:fb:bb:1d:70:20:6e:d2:c9:d4:
0c:73:0b:1f:ee:38:fa:26:82:ee:a3:97:50:d0:06:6d:f6:f8:
7a:52:e4:d9:81:61:3c:a3:f6:32:72:12:d6:52:19:bb:2f:9a:
87:bc:5a:3c:95:6a:ef:b2:4a:6d:7b:13:d2:84:eb:74:b5:bb:
30:52:2c:10:46:e3:9c:a9:0d:7f:22:59:be:73:60:e3:86:69:
c7:33:01:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:22:16 2025 by rpki-client