Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
File: 9OQPA5eaP05K052pg7Z7p-YhXA0.mft (raw, json)
Hash identifier: T5KIR0qhw9aV3cGqPYOTW38t1bCedMeorCAwr+z+oTs=
Subject key identifier: 30:74:3A:9A:5C:60:7B:A0:4A:69:46:B4:D7:2E:CA:4E:72:B1:8B:86
Authority key identifier: F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
Certificate issuer: /CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Certificate serial: 01976C2B1DCD1F0E921600CBEAA249D82D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 02:00:54 +0000
Manifest this update: Sat 14 Jun 2025 02:00:54 +0000
Manifest next update: Sun 15 Jun 2025 02:00:54 +0000
Files and hashes: 1: 9OQPA5eaP05K052pg7Z7p-YhXA0.crl (hash: iaFBlGIzKUQAHqDrYr8atLNWwcZ7EBvYWk50CNCB+II=)
2: scYwC-e6lFDetGsqMlwn-CerbGM.roa (hash: zF9JwzHkhXPpsqlzXkaGHeYsm+/OmjpyP3gHhfOOwfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:1d:cd:1f:0e:92:16:00:cb:ea:a2:49:d8:2d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Validity
Not Before: Jun 14 02:00:54 2025 GMT
Not After : Jun 15 02:00:54 2025 GMT
Subject: CN=30743a9a5c607ba04a6946b4d72eca4e72b18b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:3d:76:ff:cb:86:96:7c:0b:25:8a:b3:85:
cf:e4:2e:d9:19:9f:a5:44:75:0f:38:bc:3e:2d:f6:
19:f5:9b:9c:a4:e2:71:70:16:99:9e:56:8a:a6:af:
f2:68:00:7f:00:46:8b:5d:99:0c:93:95:5d:36:35:
a0:bf:3f:47:5e:25:e2:32:49:18:03:26:5a:a0:a6:
a7:62:38:95:19:de:7d:47:50:f9:14:c6:9c:2e:fc:
02:bf:b1:db:cb:1a:be:a5:b2:ce:25:61:f8:bf:03:
21:2d:b3:e8:49:14:8f:f8:83:aa:f1:ed:e4:ed:89:
83:76:24:ee:6d:1c:a5:12:76:7d:1b:2c:68:d3:eb:
d7:2c:35:d5:5c:71:f3:17:2c:3d:b9:04:0b:a5:66:
d2:c0:ed:29:5a:9c:db:fe:92:ea:ed:d2:79:7c:aa:
45:7e:e3:50:4a:52:bb:1c:aa:dd:cb:4e:f3:bc:8b:
81:66:bc:04:b4:ac:7d:dc:e3:1f:1e:a4:e4:fc:12:
bd:3b:c0:79:ad:31:12:03:62:10:86:83:c6:0b:15:
40:3a:ec:49:3c:f6:ac:3a:d1:00:75:6f:b0:6f:00:
2e:61:c3:eb:5b:cc:75:2b:d0:26:0a:a6:92:62:e8:
e4:92:f2:04:4f:cc:06:e1:1c:56:36:20:29:be:04:
65:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:74:3A:9A:5C:60:7B:A0:4A:69:46:B4:D7:2E:CA:4E:72:B1:8B:86
X509v3 Authority Key Identifier:
keyid:F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5a:48:05:2f:54:d0:de:fa:66:83:4c:da:3c:46:fa:6d:63:
3c:35:96:7a:86:1f:2f:a6:1d:61:87:35:ad:0f:5b:c4:f2:5c:
28:13:7f:f5:1c:fb:ee:36:be:4f:5d:f0:66:f4:49:f0:85:64:
55:67:d3:fb:30:e1:7a:28:d3:95:99:f2:d2:d4:ed:ad:cd:38:
9d:c3:27:6d:7e:c2:47:e3:de:27:f1:d8:b8:21:7b:d4:9e:10:
69:32:94:a1:f9:81:26:eb:fe:9c:de:d5:50:b2:95:37:8e:14:
04:9b:86:9d:fc:52:4a:06:2b:1e:b5:ea:44:22:40:de:c4:80:
36:74:e5:ac:df:f7:03:b4:24:a0:d5:48:f6:c0:e5:a3:ce:13:
84:98:08:1e:07:59:fa:2b:9c:43:28:b5:33:c7:56:68:c7:d1:
38:61:21:7f:65:2e:9c:5d:55:9f:cf:df:6b:ab:7a:80:b9:66:
f0:68:bb:0b:36:32:67:0b:cf:f0:61:2c:ba:2f:0a:a7:8b:95:
6e:16:5b:9b:ce:b6:de:5e:67:ba:9d:2d:b7:1b:4b:50:fa:03:
73:0b:c6:47:6d:85:89:67:a9:4b:d8:e5:a6:4e:e1:af:f0:c1:
8d:84:ee:a7:32:a9:cc:ea:29:9b:68:0f:40:91:d0:2a:1f:ff:
cb:0d:f6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:46:10 2025 by rpki-client