Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
File: 9VW6bis9tVIdvHBipYwW3aG58i0.mft (raw, json)
Hash identifier: /jfSxIYkFyx3EbH65JkRz0sQTxre1muEnKWc2wu5s9w=
Subject key identifier: F4:0B:23:D1:37:80:7D:C8:85:65:CB:A8:F2:BD:9B:57:A5:98:1A:E8
Authority key identifier: F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
Certificate issuer: /CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Certificate serial: 019771BF64E88D31DC04CCE34C2855E1DC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
Manifest number: 0352
Signing time: Sun 15 Jun 2025 04:00:57 +0000
Manifest this update: Sun 15 Jun 2025 04:00:57 +0000
Manifest next update: Mon 16 Jun 2025 04:00:57 +0000
Files and hashes: 1: 2n7OMl3jQfBIql5u4fGHwPSLtNw.roa (hash: 1rKFkHzCGzWhEvrCyPc6hzfuk0GlXlkcWKE6261l+UI=)
2: 9VW6bis9tVIdvHBipYwW3aG58i0.crl (hash: xw0o3jB3wR5BaqtMMu8Z9u3jRVm5qh7oFXsKD6aOhXA=)
3: R9C9RHOYfHsQX3_4qdQpXgxkEVg.roa (hash: TG8phgVc45ubyKw+a5c8BVXvVbA9fhRO3sFvs8XmDD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:64:e8:8d:31:dc:04:cc:e3:4c:28:55:e1:dc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Validity
Not Before: Jun 15 04:00:57 2025 GMT
Not After : Jun 16 04:00:57 2025 GMT
Subject: CN=f40b23d137807dc88565cba8f2bd9b57a5981ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:94:08:91:34:b6:2f:77:7a:b2:c7:cb:fd:
28:fc:c0:fa:d1:3f:4b:69:02:33:b5:dd:fe:b4:71:
cf:ee:95:09:97:8b:31:ac:6f:d8:8d:ba:b8:40:f5:
d2:72:fb:c4:b6:ea:77:a2:d8:60:71:39:90:63:1b:
6c:5c:4c:b7:44:2a:3a:b8:8f:2c:57:86:8b:58:9a:
28:f5:eb:71:29:65:45:9e:24:47:4c:38:57:6d:e2:
5b:02:85:4b:4c:49:c8:d5:f0:96:55:8b:c5:11:6a:
4e:a0:fa:5e:b4:64:ff:55:70:eb:08:b0:ca:19:cf:
bb:17:59:d1:48:e2:64:d1:ef:2b:18:51:93:c7:bc:
92:2c:c9:c5:9b:56:78:d5:73:a6:56:c4:f8:8f:94:
dd:53:61:11:cb:d2:ba:13:c1:c4:8b:71:e1:12:b5:
7d:5b:ec:47:76:72:e0:2a:00:fb:b1:5c:cc:a6:71:
11:ee:31:09:2e:1c:2b:fb:4a:78:9d:e6:bc:fd:2d:
d3:7d:80:f9:ac:e3:f5:da:c2:ec:09:bc:76:a0:78:
cc:20:41:20:9e:c0:8b:f8:0f:d0:47:e6:c5:ab:7d:
35:da:fd:4c:9f:91:dc:5a:8f:44:f7:87:98:5d:c4:
81:95:3e:a8:85:13:9a:00:9f:aa:47:51:5b:e3:10:
8a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0B:23:D1:37:80:7D:C8:85:65:CB:A8:F2:BD:9B:57:A5:98:1A:E8
X509v3 Authority Key Identifier:
keyid:F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:6a:66:c1:8a:34:43:14:86:8a:3e:00:89:fe:5d:80:52:ce:
1d:4c:03:e1:22:f7:da:64:84:60:33:77:1d:e0:18:54:5c:be:
d3:9c:13:a1:47:ae:06:ac:75:f2:da:f1:bd:80:03:88:70:cf:
3c:54:cb:d3:a4:4f:bd:46:95:09:6e:69:f3:78:80:64:c7:eb:
a9:4d:aa:b5:cc:6d:6a:2d:62:9b:35:eb:af:4a:8f:9d:ed:6e:
db:27:d1:ae:9f:d1:9d:07:6e:75:e8:b8:8e:38:a6:f9:bd:6b:
40:f9:82:fb:71:97:34:6b:6e:40:e6:9d:71:85:49:37:ee:38:
7b:f7:3e:8c:ba:f7:0b:db:f2:ab:41:4a:e8:5f:0b:c0:a5:75:
b9:a5:bd:c7:c4:d2:8c:18:b2:e3:ff:08:19:67:46:a9:dd:5a:
68:4c:82:f2:68:88:65:96:a1:83:32:c5:10:ba:02:55:b2:d2:
e7:6f:fb:54:74:33:1d:7c:91:5c:d0:e7:3c:3c:c5:83:98:2e:
6a:7d:db:0f:cf:dc:e5:71:5d:30:e3:e2:75:3f:d9:91:d0:cb:
40:c9:30:51:9d:07:30:3d:63:8c:01:27:e6:5d:e8:45:a2:a9:
dc:ae:72:d5:9c:de:54:f0:79:9d:13:0d:f9:b1:d6:d0:2a:20:
ec:54:7a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:08:11 2025 by rpki-client