Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
File: m1GT2EOvGT4kh1aGZzyViW6uNJc.mft (raw, json)
Hash identifier: mFq2SdE9+cFpcz2KzNcv/SgxpicB5dkmZgkOjzgvW04=
Subject key identifier: DE:D8:6F:43:1A:6F:74:0B:98:C7:FB:29:9E:18:B3:5A:30:E5:C5:8B
Authority key identifier: 9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
Certificate issuer: /CN=9b5193d843af193e24875686673c95896eae3497
Certificate serial: 01976D74460BBA83932F4EA1CE24280728D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
Manifest number: 099C
Signing time: Sat 14 Jun 2025 08:00:25 +0000
Manifest this update: Sat 14 Jun 2025 08:00:25 +0000
Manifest next update: Sun 15 Jun 2025 08:00:25 +0000
Files and hashes: 1: fzDOyXHw4ThoTSAi7ljnYyky0WE.roa (hash: b1cHh8j1rPir42V6XsC+HO+A+XYb+IZWauUQFAQdg78=)
2: m1GT2EOvGT4kh1aGZzyViW6uNJc.crl (hash: dVXpYTNwAZzwVaaa9Ez34TNDi8DlSOY/oBNSEkADT4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:46:0b:ba:83:93:2f:4e:a1:ce:24:28:07:28:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5193d843af193e24875686673c95896eae3497
Validity
Not Before: Jun 14 08:00:25 2025 GMT
Not After : Jun 15 08:00:25 2025 GMT
Subject: CN=ded86f431a6f740b98c7fb299e18b35a30e5c58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e7:19:b2:fb:85:3f:12:e7:40:fb:01:ff:7b:
bc:64:fc:2c:a1:76:77:a9:36:a1:ed:4b:c5:38:61:
05:3c:a8:5d:ae:3a:80:86:0a:83:85:0e:8a:a8:cb:
04:ab:6c:6e:a7:90:c4:f3:4f:85:d1:c9:60:cf:cd:
7a:3b:c5:3f:05:ee:d0:70:12:c4:a1:d2:b7:3a:8b:
39:90:9b:67:89:b0:3b:b6:8c:2e:df:26:a6:6b:9c:
d5:9a:60:36:c5:a9:5c:35:14:6f:2f:ef:32:70:36:
bf:0b:4e:8b:61:bf:ec:26:a4:41:e5:9d:7b:ad:39:
5c:cb:ef:eb:9d:fc:4b:67:68:96:f7:a6:dd:43:3b:
5a:8b:87:1a:22:d9:3b:39:eb:57:f3:bc:d7:66:65:
5e:79:61:e2:0e:37:d7:cd:ae:0a:d9:70:56:db:c9:
f8:0a:10:0d:9c:b8:26:2c:17:31:f4:c5:88:ee:a7:
8f:27:fd:92:4b:c1:09:59:2f:6a:bd:7f:1a:b6:3a:
ed:51:22:0b:ca:59:ca:5b:46:d7:54:9e:c1:c7:5a:
dd:86:00:a9:30:a9:a1:53:f5:77:10:a5:ce:34:d0:
68:0b:b0:7d:66:ca:c0:2a:62:3a:76:ce:0c:a0:05:
86:54:c0:9b:1f:e2:e8:8e:51:31:d2:22:81:d3:45:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D8:6F:43:1A:6F:74:0B:98:C7:FB:29:9E:18:B3:5A:30:E5:C5:8B
X509v3 Authority Key Identifier:
keyid:9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:cc:75:d3:06:53:b9:ce:04:22:58:20:e2:24:44:20:49:43:
82:2e:22:ce:7a:13:ce:d7:6f:52:36:eb:fa:d6:f6:3d:56:49:
41:6b:8b:c4:56:9e:6b:19:ca:b0:43:82:0d:99:27:24:a9:e7:
0b:7e:70:0b:d2:54:0f:48:1f:c5:37:9e:9b:e9:36:30:ea:f0:
c2:f8:b2:9e:42:14:26:83:62:77:0f:db:c5:3e:e3:01:f4:5f:
22:8b:85:e0:1e:47:8b:e3:a6:8b:89:78:50:55:57:08:f5:83:
0e:55:f5:c4:bc:34:17:88:9e:7d:3f:32:4f:2c:70:c4:b4:06:
17:05:9f:02:1e:92:b9:57:21:fa:d9:0d:1e:04:4a:73:00:2d:
b2:ff:8f:0a:43:b9:a3:70:ee:35:40:ab:32:00:c7:7c:44:46:
2c:4d:54:a7:24:d3:f9:95:e5:0f:fc:79:95:5c:4b:8f:c4:94:
33:53:87:5a:f2:be:64:03:7b:54:1d:37:b8:76:e7:8e:21:5c:
9a:eb:a2:f5:28:71:64:71:4c:62:98:ea:6a:4e:02:23:84:45:
34:bb:81:a3:53:ee:a5:60:8c:e7:f0:dd:89:07:76:e4:12:fc:
fa:75:48:a9:e3:6d:6b:61:9d:54:01:48:78:51:e6:5b:a8:ac:
56:4a:32:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:03:29 2025 by rpki-client