Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
File: 9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft (raw, json)
Hash identifier: 7OJBSpDHSlswtKQQ+hjTpBF49GddLgFTqbAaTgpvoO8=
Subject key identifier: 9E:93:D2:3C:26:A2:F5:E8:7B:D6:3C:57:ED:34:3D:F8:AE:7D:8B:00
Authority key identifier: F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A
Certificate issuer: /CN=f5cb856d4269219ed3a0c0dc47333236f155953a
Certificate serial: 01976C62252BBECDA335E32CC9900430B2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
Manifest number: 53
Signing time: Sat 14 Jun 2025 03:01:00 +0000
Manifest this update: Sat 14 Jun 2025 03:01:00 +0000
Manifest next update: Sun 15 Jun 2025 03:01:00 +0000
Files and hashes: 1: 9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl (hash: cCXCbzyge4z4JbsPj/fex50hlHwdefDUhBAxSHwk+mc=)
2: _R2-unRLTVoARNA84wK9QwIRcHg.roa (hash: pLbQbiX22eVdy+zNJ3CqYse/kH4/484+cWZJ4cChULA=)
3: a3SyScX72L5TkWnjrj7OuShiBm0.roa (hash: EcnC4sDg2JzNdW4ec0ThJsTXhRWMy/yu92wkqgkxq6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:25:2b:be:cd:a3:35:e3:2c:c9:90:04:30:b2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5cb856d4269219ed3a0c0dc47333236f155953a
Validity
Not Before: Jun 14 03:01:00 2025 GMT
Not After : Jun 15 03:01:00 2025 GMT
Subject: CN=9e93d23c26a2f5e87bd63c57ed343df8ae7d8b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:64:fd:c6:81:82:75:7d:e1:a2:fd:90:9c:19:
96:3c:25:16:8d:30:0e:a5:9d:fb:a7:7c:97:89:d6:
8a:25:ab:37:2f:d8:a6:8b:1a:88:1c:8d:b0:9a:5b:
a1:4e:61:b6:e1:d6:52:b8:90:4e:58:48:cc:8b:ee:
45:d0:c5:54:b5:5b:7c:80:e0:9c:d0:3a:a8:33:7f:
0f:db:5d:53:04:2b:7e:20:38:23:a2:4e:b3:ce:8f:
a2:8e:b1:10:07:2b:58:58:2f:27:3f:f0:07:05:01:
65:dd:ff:1d:5c:dc:3e:60:e5:e7:fb:31:a8:b7:8a:
85:e0:e5:ea:e3:da:d6:44:5a:c1:2b:a4:25:8c:b6:
41:c3:64:7e:e8:8d:84:6e:5d:7c:50:f0:75:af:5a:
38:ae:6e:e9:a6:a1:d9:0f:82:f8:aa:ca:26:9c:4e:
a1:53:33:12:b9:2a:2a:49:d6:0f:95:2d:7b:12:d5:
54:06:29:d5:03:07:ff:5b:87:5a:04:4a:8a:fb:ab:
1e:67:8b:b1:74:f4:07:53:75:17:4c:12:27:6c:a2:
f7:d0:9a:39:92:f1:e1:66:b8:2b:9e:3e:2f:2b:08:
95:30:ce:67:a0:ab:16:14:4c:2a:fc:a9:1f:56:df:
af:72:d4:a4:b8:d2:46:7c:9b:3b:6f:5c:db:7a:e2:
eb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:93:D2:3C:26:A2:F5:E8:7B:D6:3C:57:ED:34:3D:F8:AE:7D:8B:00
X509v3 Authority Key Identifier:
keyid:F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:61:95:88:f9:32:fd:dc:16:64:5e:14:2a:d5:49:fd:4f:12:
f6:5e:6a:7c:34:29:54:25:88:44:f6:ae:d3:88:d1:fb:66:83:
f4:79:bc:be:c2:bc:6a:b5:d8:1b:33:6c:31:95:94:20:cf:9f:
f6:d6:45:30:5c:ab:83:c5:f2:9c:fc:9c:18:57:2e:af:12:3c:
f6:f0:5e:cc:2f:da:ae:c5:c8:f0:f1:9f:83:eb:8f:87:ca:c4:
25:78:63:a2:58:c7:8c:9d:fa:d0:a0:c6:81:29:ed:98:e9:ad:
1a:b5:5f:bf:e4:42:61:4c:2a:84:22:64:6e:c8:54:56:c6:61:
b7:a9:f8:7c:e0:50:5b:92:03:3e:6d:6a:0e:c0:78:7d:bc:7c:
ca:8f:b3:41:e8:66:22:a4:ed:aa:78:e6:ef:bc:b1:38:f2:19:
3f:e9:5d:92:23:a2:81:19:b2:8f:d4:24:68:ec:5b:ca:fb:df:
ab:a1:d2:9f:07:46:3f:3d:36:61:45:41:b9:dc:68:1a:b8:6f:
30:55:61:97:3c:ec:b6:da:8e:51:2d:da:31:2d:b7:bd:d7:56:
ad:17:fd:f5:e1:1c:71:b3:d4:01:3b:33:f4:f1:e3:52:35:6b:
e2:da:a4:7e:1a:da:1a:26:4b:4f:2a:7f:01:31:60:18:e4:20:
c1:da:28:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:31:32 2025 by rpki-client