Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
File: 9p8HIQsohLT-pQe94id5WyZAYu0.mft (raw, json)
Hash identifier: oB6Y7hcIxc6tHDXSPgCUVjvHXgB+yiKBdx6HQZoaXyQ=
Subject key identifier: 1C:B5:6B:49:30:71:05:1F:61:CB:24:F2:0C:04:98:89:B5:15:02:26
Authority key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
Certificate issuer: /CN=f69f07210b2884b4fea507bde227795b264062ed
Certificate serial: 0197771C67CA6A4B41B3D15BC67D9149D408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
Manifest number: 029F
Signing time: Mon 16 Jun 2025 05:00:39 +0000
Manifest this update: Mon 16 Jun 2025 05:00:39 +0000
Manifest next update: Tue 17 Jun 2025 05:00:39 +0000
Files and hashes: 1: 9p8HIQsohLT-pQe94id5WyZAYu0.crl (hash: pJUeddvk2+ckKXzat1wuqkZPjQ3jjyxlmA3TPh1kYFQ=)
2: jYwiLy6C8PrH1zmVRebb5xoCcHg.roa (hash: B/91TwKxBsOKKHQE6s1Ydkjq/nj0hd3T+71Ppy1e7kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:67:ca:6a:4b:41:b3:d1:5b:c6:7d:91:49:d4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69f07210b2884b4fea507bde227795b264062ed
Validity
Not Before: Jun 16 05:00:39 2025 GMT
Not After : Jun 17 05:00:39 2025 GMT
Subject: CN=1cb56b493071051f61cb24f20c049889b5150226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:dc:ad:64:3e:6c:b8:14:e3:27:c5:d5:f7:
71:f7:87:3e:92:df:4f:15:1c:58:39:b7:cc:d4:29:
33:5e:40:6b:ae:0f:d9:d4:bf:b8:9e:9a:57:7d:1d:
7a:5d:82:22:5e:80:ea:df:97:eb:f4:87:16:3a:8b:
58:9b:77:d7:03:29:88:85:7e:d8:5f:9b:0b:e2:58:
90:55:97:fe:04:b9:f0:99:aa:47:88:af:d3:f4:c1:
5a:e6:30:59:f4:ae:93:bd:fc:cb:7e:2d:a4:be:68:
a6:30:ae:ec:4e:82:d2:a3:a3:40:ae:41:bb:c9:3d:
f4:d2:52:2a:d3:3d:8f:b9:ec:3c:95:4b:e5:92:5e:
42:77:78:23:fb:5f:6f:1f:6c:51:18:4f:a9:c7:db:
84:0d:d9:63:e2:64:7a:ed:61:ce:f8:8e:31:3e:a9:
1c:d3:04:53:bf:37:12:ee:0e:75:78:42:f2:e8:7d:
c0:68:80:8b:e3:0b:ae:f4:74:bb:03:5b:db:e9:17:
bb:c2:07:5d:69:c7:be:66:ce:17:73:c9:30:b4:f5:
35:10:1e:02:b9:71:4a:4b:56:b4:70:ba:e9:25:22:
d4:a8:1c:c4:d9:73:ce:d4:ca:31:30:05:2d:fb:41:
10:3b:b0:1d:45:54:09:c4:ea:2f:9d:a4:9e:e9:4b:
32:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B5:6B:49:30:71:05:1F:61:CB:24:F2:0C:04:98:89:B5:15:02:26
X509v3 Authority Key Identifier:
keyid:F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:10:72:ab:3c:60:f7:25:a4:85:d3:0b:e9:78:6a:e7:f8:d8:
9f:fc:43:d5:98:93:53:75:d1:96:26:8a:c0:d0:b6:c4:5e:2b:
88:5c:58:d4:1d:18:f7:73:70:31:45:6f:19:0c:14:3c:1a:fd:
b4:10:79:4f:25:dc:c1:ad:db:d4:82:82:55:89:1a:b7:3c:f0:
8c:9e:4b:ef:7d:1b:fb:af:ad:88:dd:3b:01:7a:4f:e1:07:c1:
45:d4:49:bb:6e:d1:e4:ab:65:87:b3:66:ce:99:79:cf:c3:a4:
9d:4c:cc:30:93:b9:59:c2:08:85:a6:44:62:b2:1f:a2:ab:f6:
90:9e:15:f3:40:2a:3f:39:24:0e:31:ad:bf:9c:f8:73:e9:bf:
ce:70:3c:d2:20:9d:cd:8a:24:0d:6c:a0:05:db:9a:b2:a1:9c:
14:6c:34:3c:60:19:84:bd:d2:9f:8a:8c:39:70:51:fb:fe:65:
75:8d:6c:05:1f:88:7d:f1:5e:be:a6:86:6a:0e:bc:7c:e4:18:
bf:a9:0d:eb:98:83:2e:0a:af:b2:19:76:80:e4:87:47:2a:5e:
7d:92:5b:4a:7f:31:0e:89:5f:60:01:d7:06:4d:03:74:b3:ea:
e4:99:17:5d:10:fe:7d:70:51:03:ee:88:49:7a:09:25:d2:51:
f5:d8:6f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:33:57 2025 by rpki-client