Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
File: f9GKakmRDMMx3JERSuWbcYXV8w0.mft (raw, json)
Hash identifier: YjIpZcWYLfPV3VMPCKm7n7LYm5qZ/TzbpSUIpha8HrA=
Subject key identifier: 47:52:86:71:A5:74:39:F1:F7:2C:C5:7A:FA:4C:FE:44:5D:DB:A6:93
Authority key identifier: 7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
Certificate issuer: /CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Certificate serial: 01976D067470EC8A7AB722EAFAD3E12B3972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 06:00:28 +0000
Manifest this update: Sat 14 Jun 2025 06:00:28 +0000
Manifest next update: Sun 15 Jun 2025 06:00:28 +0000
Files and hashes: 1: V0avlIfWr1Ry2dGFNI3vVU-t6qU.roa (hash: 9Z/Tt+Wupiygby78OxWX59dKpP6JLPmGNyGTYRjbjHQ=)
2: f9GKakmRDMMx3JERSuWbcYXV8w0.crl (hash: gPEqkCGk+Sam5ZOeknofSiue2/Z3bpNoZNiEF/MV/mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:74:70:ec:8a:7a:b7:22:ea:fa:d3:e1:2b:39:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Validity
Not Before: Jun 14 06:00:28 2025 GMT
Not After : Jun 15 06:00:28 2025 GMT
Subject: CN=47528671a57439f1f72cc57afa4cfe445ddba693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:42:80:5c:1e:db:d8:88:e7:70:70:84:bc:7b:
f4:31:67:60:38:6d:30:27:9c:ec:09:1d:f5:a2:14:
e9:5f:56:92:31:21:64:e4:5c:cd:5c:88:b1:c2:68:
71:25:28:4c:20:f3:c5:48:46:0b:85:38:e9:c5:51:
60:42:31:16:4f:ac:e1:ac:21:ce:31:3d:8b:b4:31:
99:a6:42:11:40:d4:64:89:dd:a1:db:f7:ae:e2:09:
98:87:f7:fc:2b:b7:22:ba:8f:26:9f:85:de:7d:0a:
cd:68:ab:f5:cc:79:05:c3:da:c7:27:d6:59:cd:eb:
3a:f8:ba:42:6e:58:cc:4c:74:13:00:ba:d8:52:a2:
e0:17:b3:76:7e:21:15:3b:53:02:86:79:12:ee:6f:
9b:f6:ad:f1:16:ff:1d:3d:f5:3b:1b:2c:bb:be:62:
a8:ce:a5:39:35:7f:ce:8c:8d:f3:30:ab:2a:ae:e6:
50:1c:a3:1e:69:52:04:5c:6a:de:01:62:03:0b:db:
83:5d:5b:49:63:ab:de:5e:9a:cc:d3:a5:6f:77:df:
c2:5d:80:9d:89:35:fd:de:b9:84:ac:33:f3:40:4f:
b2:c1:ee:fe:61:d5:81:60:da:63:b6:cb:82:c3:18:
48:8f:6a:c8:8a:28:4e:6b:b3:c4:ff:ec:02:d1:2e:
05:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:52:86:71:A5:74:39:F1:F7:2C:C5:7A:FA:4C:FE:44:5D:DB:A6:93
X509v3 Authority Key Identifier:
keyid:7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:30:54:9a:55:b9:09:f1:59:00:33:9c:48:68:2f:99:3d:f5:
6d:48:bf:50:4e:ac:7d:6a:91:3b:92:eb:00:0e:9d:df:8f:ca:
b9:a9:9c:a1:e5:b2:aa:69:d7:e7:e0:26:78:74:98:e8:b7:21:
12:df:06:06:10:63:f5:6b:cc:2a:28:d6:49:47:bd:db:31:c3:
86:32:d6:db:a0:22:88:0f:e6:d9:10:25:63:85:be:cc:72:ed:
87:e9:f3:03:f6:22:a0:61:39:a2:11:d9:14:5f:31:6f:d8:ca:
64:4a:f0:9e:ae:17:52:be:45:a2:58:e6:7f:b9:a2:3c:10:a7:
42:2a:bd:f6:7c:ad:e3:98:ab:a2:1d:11:45:29:30:06:9d:32:
d2:94:ba:6c:55:39:2d:17:c5:4c:ca:ce:eb:17:73:e8:81:a8:
b4:de:15:a8:ed:6f:53:f7:89:19:7e:90:4c:09:44:5e:c8:8f:
f1:ce:26:7e:d5:64:ff:a7:98:16:9a:a8:40:e0:c2:36:1d:81:
c5:1d:92:d4:c4:9f:e2:1b:d3:3d:31:c2:6c:98:9f:5a:d5:9a:
f0:c8:ba:ba:89:05:33:87:78:93:24:7e:a3:60:69:19:32:a7:
91:f2:d0:fd:7b:8b:66:10:5e:bf:66:04:49:cd:4e:53:a7:c2:
17:2e:7a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:33:34 2025 by rpki-client