Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
File: Rj7duRtTj4Port9VZclg3wsQfqI.mft (raw, json)
Hash identifier: bd7oIc5+W6Or2o1UjbccKwgD6TuaOlj7OoO5hsNWreY=
Subject key identifier: 5E:41:76:E2:B7:89:00:13:A1:92:94:A5:F2:68:A0:8F:AD:C7:5C:46
Authority key identifier: 46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
Certificate issuer: /CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Certificate serial: 0197873434690EF7A3F3C88A73B0F8BB5FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
Manifest number: 09FD
Signing time: Thu 19 Jun 2025 08:00:34 +0000
Manifest this update: Thu 19 Jun 2025 08:00:34 +0000
Manifest next update: Fri 20 Jun 2025 08:00:34 +0000
Files and hashes: 1: Rj7duRtTj4Port9VZclg3wsQfqI.crl (hash: NKS0h7VgAy+d9er3PPHA+VhyohZp1/Zz/Z0i44rI3yI=)
2: VDpi_TMhu0MubOzMgSkXQ1gGEVo.roa (hash: l1aEmCnDC0lAylyG2lI+yA0mAn8xNZotz2Kipdmx4J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:34:34:69:0e:f7:a3:f3:c8:8a:73:b0:f8:bb:5f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Validity
Not Before: Jun 19 08:00:34 2025 GMT
Not After : Jun 20 08:00:34 2025 GMT
Subject: CN=5e4176e2b7890013a19294a5f268a08fadc75c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:1d:9c:6d:03:e3:34:0e:be:12:aa:92:d7:
d4:ec:e3:11:a5:6c:01:61:c4:bb:5c:d1:6f:d2:48:
47:1d:00:c6:a3:d5:b3:52:c9:44:09:79:d6:7f:f8:
7e:a9:25:00:ab:3f:7f:77:8f:cd:b3:93:c2:51:36:
ed:f1:f9:03:d1:34:b6:ad:2b:dc:68:49:6a:6d:d6:
ef:68:65:bd:dd:11:58:e7:ba:df:bc:75:7a:49:8a:
76:39:d4:71:02:d8:2f:48:e6:34:0e:91:9c:72:c7:
85:0e:14:12:21:e9:9a:eb:08:3a:19:7b:7b:a3:47:
74:97:67:4e:c4:f2:ba:7e:e5:95:57:fb:95:ff:72:
5d:8d:77:4e:73:6b:40:b4:f5:3e:74:09:90:d0:a7:
0a:4a:92:80:0e:e1:cd:21:3b:16:bf:77:83:38:97:
6b:2c:3d:0c:6d:ef:16:f3:93:4e:ce:48:2f:d8:8d:
31:67:fc:fd:5d:7d:ff:25:85:36:0f:e3:a2:ad:fe:
e2:83:25:6e:61:80:da:c7:35:3e:46:88:7d:5f:fc:
d1:02:87:ca:d1:3f:31:c2:19:68:6a:2e:c1:2f:fb:
3f:00:bd:44:c1:c7:be:fb:22:4f:f0:f5:97:cf:0c:
7b:b8:9d:b4:f5:17:06:83:58:e4:c2:b4:cf:42:d5:
ae:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:41:76:E2:B7:89:00:13:A1:92:94:A5:F2:68:A0:8F:AD:C7:5C:46
X509v3 Authority Key Identifier:
keyid:46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:fc:63:f4:79:15:cb:bb:0c:e3:ee:14:93:b1:3f:1c:6d:ac:
ca:6c:7f:6e:9d:9e:91:59:71:0b:f0:51:8c:e7:02:1b:ca:18:
df:d1:0e:11:68:79:38:d2:1d:da:35:bb:40:2b:ae:d0:91:f4:
47:9e:c5:f9:19:cd:6a:ef:bb:0a:9e:44:8e:74:ac:36:a2:ea:
56:44:d6:96:9a:9d:7c:7e:e8:e7:e9:f9:69:8c:ab:b5:d9:b0:
bd:17:ce:bd:77:56:4f:c8:c1:75:1f:e8:e5:9d:6d:82:18:35:
de:0d:ba:64:db:7a:44:a4:65:17:aa:33:d7:be:49:d2:a1:c8:
f0:5d:be:38:ad:fd:5b:cf:68:b2:d0:12:b2:63:08:85:29:51:
f7:a0:12:44:b6:3a:1f:d6:10:08:3c:79:84:fa:a8:a6:39:e5:
85:1d:b6:00:84:d4:f4:ac:4f:74:5d:3b:1a:20:6c:93:32:e6:
30:89:6e:fe:04:b3:93:d1:84:b1:6b:97:8f:db:d8:8a:15:ec:
57:2e:b2:0f:57:42:09:e7:3e:38:63:8b:be:c9:0a:74:d3:b5:
96:70:96:b7:f0:d8:d1:e7:7e:95:f3:3e:a5:2a:6d:12:98:fe:
ee:76:3a:53:67:0b:bb:eb:1e:47:22:9a:90:2a:15:ce:5e:ca:
4b:88:6b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:26:42 2025 by rpki-client