Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
File: 9WYBbYeCMBKLWOJ51mHBleY5lYg.mft (raw, json)
Hash identifier: mx6VxUJzTxKGpghA5phoRLE8o6wdelrBaXNE/0YJ0Ic=
Subject key identifier: 4A:CE:F5:48:A7:0B:EC:2E:85:C1:1C:EF:B8:6B:67:D5:A0:38:04:03
Authority key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
Certificate issuer: /CN=f566016d878230128b58e279d661c195e6399588
Certificate serial: 01976C61E85435FBECADA5B976B2224004C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
Manifest number: 0528
Signing time: Sat 14 Jun 2025 03:00:45 +0000
Manifest this update: Sat 14 Jun 2025 03:00:45 +0000
Manifest next update: Sun 15 Jun 2025 03:00:45 +0000
Files and hashes: 1: 9WYBbYeCMBKLWOJ51mHBleY5lYg.crl (hash: O5PatFzBYvL9P4FZUQmcXSUOqx1PaLJ9AF40IUzmQgg=)
2: FK1-eXhRSe8ffp_S_lHbaTgBt8o.roa (hash: isewhw2bUh3V4X01VwpIosa0D4eXIb8LPC/N4oNejio=)
3: d9_S0MdBcLLQhVMY4GIXLkmlz3w.roa (hash: JIdW7E8RpIHlAxf+ndeNBtGoppjXWf7rJVf8yChsf7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:e8:54:35:fb:ec:ad:a5:b9:76:b2:22:40:04:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f566016d878230128b58e279d661c195e6399588
Validity
Not Before: Jun 14 03:00:45 2025 GMT
Not After : Jun 15 03:00:45 2025 GMT
Subject: CN=4acef548a70bec2e85c11cefb86b67d5a0380403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0c:19:cb:43:89:bb:71:d9:58:e4:da:ba:ae:
cd:9d:4c:97:f5:a7:a5:f4:fc:c9:0a:91:97:47:fb:
3f:e3:6c:6b:d8:69:f2:68:be:29:bb:13:52:7f:6b:
b9:94:d8:4f:1d:70:3f:86:78:5b:04:0f:22:73:bd:
a4:aa:46:90:9a:63:26:94:46:82:fb:5f:95:21:86:
1d:37:55:dc:7c:ae:58:0a:35:65:8d:0e:a9:b5:82:
8c:d3:a1:ad:c1:e0:79:45:2c:ef:f8:9c:a3:93:87:
95:56:1c:f6:a2:2a:72:cf:5d:25:aa:c9:26:88:26:
77:ac:1c:33:5d:ed:ca:c8:30:84:84:2d:aa:a8:ea:
18:10:de:63:f5:c5:08:75:36:76:34:16:22:b7:83:
df:b2:05:94:c8:40:21:85:b2:bb:f7:76:97:45:d4:
e5:47:47:08:34:cf:41:e6:5f:d7:44:b5:69:17:38:
ba:e5:df:1d:55:1c:f1:b8:d7:99:1d:c3:5b:f3:34:
ff:d0:dc:df:b4:7a:2f:a9:28:72:2b:ad:ca:5f:11:
27:82:81:54:a6:34:a0:40:af:51:45:b1:fa:1c:b2:
66:46:0a:ce:f6:83:d6:21:6b:d0:ff:52:57:8e:07:
4f:03:af:c4:82:7c:ea:1a:df:b3:87:60:b0:54:af:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CE:F5:48:A7:0B:EC:2E:85:C1:1C:EF:B8:6B:67:D5:A0:38:04:03
X509v3 Authority Key Identifier:
keyid:F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:42:0e:c8:58:6f:6d:56:a4:c9:41:63:65:05:2f:c3:61:8b:
f6:ba:26:89:18:72:cb:16:97:0d:d6:5c:b3:4a:82:51:19:69:
bd:9a:09:85:b2:8a:fb:ce:2c:43:e4:07:fc:a7:83:a1:d2:4b:
02:e7:38:be:75:87:75:73:fe:89:ae:5b:f1:3b:ad:92:33:49:
ff:cb:84:f2:76:0a:e3:a4:51:01:39:b2:a7:40:d3:7a:d0:37:
54:85:ec:da:f3:a0:c0:0d:e2:fc:c4:de:ff:aa:fe:54:79:d1:
f6:f2:df:5c:1f:fd:be:fc:01:f1:1e:94:30:09:7c:0c:ec:f5:
a4:1a:86:f1:f7:7f:c4:67:70:a0:9f:f3:ab:54:79:dc:92:54:
e2:61:fc:0b:4d:b0:89:f5:33:ec:d1:af:5a:b3:f6:c6:03:74:
bf:eb:14:4b:ac:58:38:99:46:e0:19:7e:11:4a:4b:94:06:05:
5f:b5:0b:c5:b9:4a:34:e2:54:34:a3:83:1c:78:35:b4:7f:88:
24:d6:6f:66:08:da:9a:ad:6a:be:73:c0:04:5d:d3:3d:e6:72:
67:bc:2f:21:c6:c6:f4:dd:a0:ef:6c:4d:a9:44:92:b4:d2:fa:
74:f7:e3:a0:ba:89:33:12:e3:62:7e:7a:02:a5:27:ec:71:29:
6d:eb:22:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:00:57 2025 by rpki-client