Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
File: 9TRtPtvsbacngHIsCkGr7qY2Ydg.mft (raw, json)
Hash identifier: zk/cL3i9ZTIRNyrUBhKxADCKuFZk4KacGqmxOIZNp3I=
Subject key identifier: 68:E9:5E:23:85:65:CE:88:56:02:D7:08:08:05:CD:8B:30:D1:44:A6
Authority key identifier: F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
Certificate issuer: /CN=f5346d3edbec6da72780722c0a41abeea63661d8
Certificate serial: 0197692A1A4B6C6409CDE8E8D9414D5004FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 12:00:56 +0000
Manifest this update: Fri 13 Jun 2025 12:00:56 +0000
Manifest next update: Sat 14 Jun 2025 12:00:56 +0000
Files and hashes: 1: 9TRtPtvsbacngHIsCkGr7qY2Ydg.crl (hash: nF5otjzvQRLRS9zFULyWHM9Y2RubVHMhezcic4/MOJ0=)
2: Ru57e4KJGmCNDXrPayGNrM1Z2dE.roa (hash: PjkMG0o3XCBX2V0z1wG5kUtXFYLyKVu1bhkUTY6FzyU=)
3: nRY6f0HmJ7S8CYmolnmrtVb1JGw.roa (hash: jhgaQrPs/TQq82v7wbUyYwj7VfBFttXWHM8WTx1fF9k=)
4: wn3IojBdCy5Wl_2EBruQi7YNS44.roa (hash: 1KdRgMRZAJuO8z+H0eUMB9aA/0ER0ehetz8BXxZxUoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:2a:1a:4b:6c:64:09:cd:e8:e8:d9:41:4d:50:04:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5346d3edbec6da72780722c0a41abeea63661d8
Validity
Not Before: Jun 13 12:00:56 2025 GMT
Not After : Jun 14 12:00:56 2025 GMT
Subject: CN=68e95e238565ce885602d7080805cd8b30d144a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b1:7f:df:11:45:5c:8f:8c:36:eb:a1:c1:e8:
3d:db:c7:53:fc:ab:e7:55:dc:11:8f:54:24:d0:9f:
e1:48:7f:5a:38:3c:fb:70:96:66:73:f2:f8:2e:34:
1e:93:7b:de:22:fd:19:ab:f0:e2:5e:4a:e2:c3:54:
ec:88:b6:80:f0:bb:1c:dd:df:58:bc:62:c2:4a:d6:
55:6c:52:d1:1c:e5:49:8a:00:17:08:55:64:80:c6:
20:cb:33:f5:61:49:c4:95:bd:08:b2:94:51:1f:04:
c7:ea:c3:3b:0e:b5:90:d2:f6:63:e6:eb:b1:5d:55:
07:56:b0:66:92:fc:6d:b4:c9:24:5d:40:7c:21:d4:
ef:cc:b8:86:1e:ed:14:6d:3e:b7:5a:f8:3a:7d:dc:
0c:73:f0:dd:49:3d:7e:5e:b8:15:2b:0f:cf:97:bf:
f0:61:d2:3b:9d:f8:79:7e:90:b9:22:ce:d7:f8:79:
70:58:00:6a:ec:b5:1c:26:c5:ab:fa:d2:8b:8e:d6:
06:7b:77:34:7e:63:3e:37:02:91:14:f0:7c:62:63:
7d:10:3a:57:aa:cd:f2:a2:7a:8a:7d:cd:09:de:3e:
b5:ff:1a:23:a9:07:1d:92:9d:e3:74:e7:b5:3f:ec:
41:dd:37:c8:49:78:d8:17:e4:21:74:0f:7f:e2:d4:
20:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E9:5E:23:85:65:CE:88:56:02:D7:08:08:05:CD:8B:30:D1:44:A6
X509v3 Authority Key Identifier:
keyid:F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:ce:54:3e:f7:aa:d1:9f:43:d2:7c:a5:3f:58:92:a2:2e:d6:
82:da:6b:fd:45:e8:48:3b:05:7a:cc:3f:8f:39:0d:27:27:88:
27:7c:0c:53:d8:53:e5:e7:45:16:37:9a:e5:11:f5:b8:f2:ee:
fd:ca:bc:63:4f:70:14:1d:28:91:1f:d6:bf:60:6b:c7:0f:9c:
26:41:6c:7f:99:a8:d4:9b:53:9b:29:16:e0:30:f2:4b:b6:30:
df:e5:86:a4:f0:27:78:ea:69:f7:86:c1:9d:e8:f0:32:c3:0c:
b0:a7:2b:6f:d9:e0:5d:3a:68:fd:ec:df:90:dc:c3:8c:f6:2c:
05:c5:b5:86:40:d6:75:9f:7c:83:9d:1a:3a:85:bc:89:a1:be:
77:8a:1e:be:3d:c6:3f:7b:43:05:0f:6a:1d:79:5f:74:99:0e:
88:9b:e3:67:9b:3c:ff:c4:af:6b:6d:88:9b:2b:b6:53:f7:4e:
df:9e:b9:13:e7:be:ea:49:c9:a7:9d:b7:f7:51:13:1e:1c:40:
dd:a4:45:1f:12:b4:1c:47:f9:d7:d8:e3:ac:40:66:d8:77:1a:
7b:23:4d:95:ef:4a:f5:54:2d:ea:6d:29:fe:e7:f0:88:4e:0b:
a8:de:19:e5:38:24:cd:25:3e:7f:34:29:88:a8:2d:f1:3d:34:
fe:ff:84:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:30 2025 by rpki-client