Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
File: 9WPabrO3oH_cRSWIMASXDWQLA2s.mft (raw, json)
Hash identifier: YR3FLIITsyOeY8WvAqD8hxMn/YZxRFFXTDmlvwnbrTY=
Subject key identifier: 57:B6:6D:7D:A6:4D:F9:B5:9B:BA:20:E9:F6:98:E4:D0:16:DA:69:BE
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial: 01976CCFAB7E2BD94A20CE1F7E00C856BC9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
Manifest number: 1597
Signing time: Sat 14 Jun 2025 05:00:38 +0000
Manifest this update: Sat 14 Jun 2025 05:00:38 +0000
Manifest next update: Sun 15 Jun 2025 05:00:38 +0000
Files and hashes: 1: 9WPabrO3oH_cRSWIMASXDWQLA2s.crl (hash: CAYhRnKpwJ86cpPKY3GGmxP8+6OqWm8S5DAg/+rH9I0=)
2: h04E6GUTfk7g-nszYeXV5v59Z7g.roa (hash: D0nODnBLfeAlBTbUkjxGcmmT4S/QYeiGnt9Aow5Sjx0=)
3: xJetAjXRbPTX957PRc-ZRikOCag.roa (hash: zIdEISxA+75bDRZATAE0MJ7G/Gr2I74NP3sEuTFZFW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:ab:7e:2b:d9:4a:20:ce:1f:7e:00:c8:56:bc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
Validity
Not Before: Jun 14 05:00:38 2025 GMT
Not After : Jun 15 05:00:38 2025 GMT
Subject: CN=57b66d7da64df9b59bba20e9f698e4d016da69be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d7:41:bd:13:11:17:28:06:75:b1:89:c1:0b:
fa:80:72:20:82:0b:33:8d:52:07:4d:b6:49:3f:1c:
a3:d4:90:bd:79:c8:b5:b0:fd:e0:01:b9:89:da:59:
56:d1:f1:83:09:84:2b:25:f2:0f:1b:16:fb:c2:32:
63:bb:fe:63:16:67:d8:74:f1:2e:ab:cb:bc:4b:8e:
3f:48:b0:5b:b1:52:70:2d:57:ad:68:0f:07:da:89:
3b:8f:31:d7:30:8a:4a:10:0a:0e:15:44:51:9c:dd:
71:90:fe:d8:46:6f:bb:fc:38:6a:f6:79:61:b0:88:
ec:51:0c:de:aa:5d:65:40:3d:e9:cb:7e:92:6f:1c:
0d:b8:29:39:73:57:ce:7f:a0:11:e1:1f:32:6c:f5:
05:5f:6a:e3:fa:e4:44:f4:9b:b9:ba:0b:98:1c:fc:
07:e1:cc:25:71:03:74:d5:f0:a2:bb:59:bf:e6:15:
78:17:b2:3a:c5:79:32:93:d7:48:26:11:2b:09:60:
dc:f3:bd:3b:a8:4e:f4:96:46:77:68:d3:a2:28:a3:
9a:fc:6c:80:ff:37:58:b8:5c:8a:e7:9b:50:11:bf:
2e:a8:68:bd:73:6d:50:d3:bf:e1:cf:66:6b:4d:8b:
d7:f4:37:e7:52:15:58:49:89:3b:24:73:d6:7d:e7:
d3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B6:6D:7D:A6:4D:F9:B5:9B:BA:20:E9:F6:98:E4:D0:16:DA:69:BE
X509v3 Authority Key Identifier:
keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:29:56:e3:55:3d:3d:74:4e:a8:e6:48:ad:78:f7:e0:48:7d:
91:ce:28:14:ad:46:86:d2:c3:d2:28:57:a8:4c:c1:37:a0:14:
e9:7f:ee:63:cd:76:8e:34:38:a8:20:3a:f8:9f:f9:89:e0:74:
2c:d0:29:1e:da:e4:3d:59:5a:20:60:e2:f2:89:b9:3d:95:8c:
c4:0e:5a:ed:6a:37:af:d6:e7:ef:68:a5:97:1f:bd:b6:4f:8b:
63:5a:70:37:62:f5:3e:9f:b9:8b:1a:a5:55:49:e6:23:1f:86:
02:76:af:cd:8c:a0:b6:c0:9a:90:2f:bd:e9:e0:f4:ee:40:96:
07:36:4f:dc:f6:ce:61:4f:07:e8:a2:f5:ae:d3:45:b1:2a:85:
64:f1:5e:17:3b:80:25:51:6b:d0:20:58:2d:69:a9:01:c5:83:
1d:cb:bb:2e:99:ba:6a:dd:ad:88:8f:bf:fb:00:ae:29:29:f1:
9d:df:4a:6b:61:72:8e:e7:f3:d7:cd:60:f2:a5:60:3e:6c:5d:
17:e9:10:f0:fb:a9:29:c7:60:74:43:83:6e:9e:a8:f0:f4:e8:
a7:1d:f3:b2:9a:b8:c0:e8:57:5c:c5:35:60:9e:8f:2c:b4:0f:
bf:12:07:75:3e:cf:9f:53:95:7b:8d:b9:85:a2:3a:a1:e3:57:
d4:16:88:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:40 2025 by rpki-client