Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
File: h9tx9pGbDvmO78mWSSiodRAjagM.mft (raw, json)
Hash identifier: inbry2m1Rxi/uaQZgmUnSoLpustii9v0Zn//2a5Q2qQ=
Subject key identifier: F1:54:03:5D:4B:4D:27:24:3D:8A:CE:CA:FA:8A:3D:15:13:D3:5F:80
Authority key identifier: 87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
Certificate issuer: /CN=87db71f6919b0ef98eefc9964928a87510236a03
Certificate serial: 019770080D65BAE2FF8DDBCFC39D4BC35866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
Manifest number: 0A44
Signing time: Sat 14 Jun 2025 20:01:05 +0000
Manifest this update: Sat 14 Jun 2025 20:01:05 +0000
Manifest next update: Sun 15 Jun 2025 20:01:05 +0000
Files and hashes: 1: h9tx9pGbDvmO78mWSSiodRAjagM.crl (hash: hjdTrOZZZzupXX5sgv90+Tvw5eWLZ0vc68V/IiYyjtk=)
2: k9VkkHu7wqpz0IelVxE8bU-qY6o.roa (hash: vCMb7FvkUh1quiKigDU5pU3f6Rl+/OZ8cn/L/kTas88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:08:0d:65:ba:e2:ff:8d:db:cf:c3:9d:4b:c3:58:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87db71f6919b0ef98eefc9964928a87510236a03
Validity
Not Before: Jun 14 20:01:05 2025 GMT
Not After : Jun 15 20:01:05 2025 GMT
Subject: CN=f154035d4b4d27243d8acecafa8a3d1513d35f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:35:c1:f4:10:c6:c3:fc:85:5b:c3:0d:25:
54:75:8a:40:a3:70:c5:98:3e:ca:74:4d:e4:d7:ee:
75:32:cd:9c:02:c4:77:df:8c:6b:34:84:17:59:87:
6e:b6:10:94:e3:68:60:bb:70:43:31:22:32:6f:5b:
c3:f3:90:52:19:7e:fd:31:3b:01:e4:92:29:f1:74:
5c:5e:04:32:80:cb:b8:28:66:e5:c3:51:ab:c1:7a:
f8:9c:24:8a:b8:1f:c0:d6:2e:56:e5:8b:de:9f:1b:
59:c8:d8:ff:aa:61:86:39:86:9a:6a:5d:dd:3c:e0:
9a:b4:07:4f:7c:06:6b:36:e6:b0:59:85:d7:f8:92:
db:df:fe:9f:82:0f:d1:40:15:9d:ce:d8:c9:33:ee:
b8:7f:eb:1e:94:31:ea:29:5d:79:20:76:2e:e9:8f:
a8:6c:e4:11:e1:d7:46:d7:24:8c:d9:8e:1f:7c:f8:
84:4b:0c:06:67:2d:92:5a:7e:1b:5c:df:a6:fe:e3:
a6:7f:95:21:98:56:df:98:bd:1d:ce:2a:6e:f3:34:
4c:1d:d8:f3:21:1f:67:86:ba:9d:6e:6a:3a:73:67:
e6:45:1e:4f:6b:36:d2:7a:63:11:b5:8f:5d:23:2f:
c2:67:b7:d5:09:67:d0:d6:0a:6e:1d:32:d5:67:4c:
63:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:54:03:5D:4B:4D:27:24:3D:8A:CE:CA:FA:8A:3D:15:13:D3:5F:80
X509v3 Authority Key Identifier:
keyid:87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0d:9b:42:d9:e0:f8:fc:c6:79:89:05:78:5b:18:6e:5f:7c:
29:ca:83:a9:bc:2a:0f:3f:b0:19:13:1f:29:46:c5:e8:e9:51:
2e:f7:b3:aa:3f:d9:dc:ae:1f:a9:ff:c5:f6:29:aa:3b:32:be:
21:de:fb:09:25:2b:00:03:2f:f7:88:fd:ac:9a:e0:35:69:cc:
85:5c:ff:36:a8:24:eb:6a:7d:e6:96:e2:7b:76:9c:9d:39:7a:
23:7a:e9:1d:e9:77:28:6e:75:b7:14:c0:ea:55:af:f9:fc:71:
51:67:d1:b7:99:1b:6a:6d:39:0e:96:12:48:66:93:d3:fb:de:
68:0d:0d:ba:44:1d:e5:c8:e4:9e:6e:9f:4b:6d:cd:cd:a6:d5:
fe:0f:5a:94:68:c0:b2:40:a9:29:74:e6:15:4a:04:86:3e:eb:
8b:d6:9a:5d:68:04:76:bc:e1:22:44:9b:54:b7:fe:51:d4:3a:
90:40:44:94:0a:f8:37:52:59:8a:18:87:4a:64:43:98:c1:ce:
8d:41:6e:18:18:12:61:ad:d6:f8:65:cd:bf:f6:46:ef:84:c1:
03:dd:0c:80:75:65:d1:bc:78:99:49:4d:85:37:ab:b2:5b:82:
ad:6d:e8:81:fe:37:82:4b:af:7b:8c:3b:cb:40:35:20:5d:59:
81:9c:fe:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:04:26 2025 by rpki-client