Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier: fMQmvZjcgQLvIG2Lkp+1SIYQqiv//Z5sWitcpMOSVis=
Subject key identifier: E4:A8:B7:F0:D7:5D:1D:18:05:C1:64:47:4C:26:A8:4A:E3:54:C9:C8
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial: 01976F2C81FEE849FA0D0B4EB41E75234EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number: 151F
Signing time: Sat 14 Jun 2025 16:01:17 +0000
Manifest this update: Sat 14 Jun 2025 16:01:17 +0000
Manifest next update: Sun 15 Jun 2025 16:01:17 +0000
Files and hashes: 1: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: hf2Y/FYML61i/QJtJQRgtMtAiTTlG5tVoNdCbGhe0FQ=)
2: opYZOi4k9YDcS_3foMnJJa-4gCI.roa (hash: VbpgC06Lnc7NWswjuIad3/ZduRJ+GtOZh31gorgG7Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:81:fe:e8:49:fa:0d:0b:4e:b4:1e:75:23:4e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Validity
Not Before: Jun 14 16:01:17 2025 GMT
Not After : Jun 15 16:01:17 2025 GMT
Subject: CN=e4a8b7f0d75d1d1805c164474c26a84ae354c9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:f0:a1:c5:8f:5c:d7:ef:b8:39:d3:e3:0f:
2d:b1:1f:b0:7f:62:2f:40:d8:54:a6:a0:a2:be:d2:
80:6c:a4:00:80:c8:92:b8:a5:2b:89:2b:b5:e7:28:
b9:bf:b0:d0:e7:43:29:2f:e4:e9:27:32:ee:cf:4b:
d5:4a:7d:e9:a5:cc:29:41:7b:77:df:67:20:30:ea:
6a:f2:b1:c8:86:b2:3a:e4:46:82:b4:83:f7:04:70:
a1:07:1d:49:99:47:92:90:21:84:63:eb:11:5b:df:
85:e6:3a:02:3b:11:16:55:65:d0:c1:7b:5b:be:a9:
c5:40:23:26:77:db:b1:0b:4b:01:09:eb:f3:ca:fc:
13:e0:f1:ee:b5:2a:b5:67:ee:36:7c:3b:75:c6:da:
a0:c7:73:b4:12:a7:c0:42:af:94:b8:aa:85:37:19:
e9:d7:c3:b1:ed:06:76:40:0a:9f:f1:9c:60:08:d3:
3e:82:d9:05:dd:9c:e4:54:10:46:7a:f3:13:46:c1:
ad:da:f3:46:4c:84:29:01:fe:7a:f5:a3:47:3c:4b:
bf:73:5f:92:3b:e8:2b:89:61:bc:81:0a:e6:23:47:
98:54:d6:c5:47:3b:c9:42:a7:92:cd:d1:f1:27:77:
1f:36:dd:56:0d:28:29:6c:2b:78:a4:99:82:55:32:
bf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A8:B7:F0:D7:5D:1D:18:05:C1:64:47:4C:26:A8:4A:E3:54:C9:C8
X509v3 Authority Key Identifier:
keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:32:df:6c:d9:6c:de:09:63:55:80:af:09:8c:8c:1c:87:80:
02:cf:b8:95:0c:65:8a:f5:7d:22:46:c8:17:1f:7e:27:9c:c0:
3e:73:ef:3d:01:a5:4c:f9:06:0f:ec:3e:e9:14:cb:7d:77:58:
5c:a4:c7:de:7e:10:21:95:c0:6b:38:00:20:8f:d7:60:ba:c5:
c6:ce:09:22:04:de:48:71:de:30:bd:57:46:b2:3c:21:f3:6a:
42:d4:67:de:34:40:44:72:b2:0e:e4:7e:37:5d:9d:66:c0:f1:
dd:6b:eb:03:78:21:44:96:1a:80:2b:ba:39:81:77:20:fa:d7:
6a:47:bb:d9:5f:fc:93:f5:3e:70:d0:d4:99:6b:85:94:9a:de:
17:47:81:53:81:83:af:f5:f2:61:07:36:35:75:5a:a6:d4:23:
95:7c:49:a1:5d:e7:36:6f:e6:1a:fc:6f:1f:56:96:b0:14:89:
1e:82:d5:46:41:1d:80:b8:f5:b8:41:19:1a:0d:cd:c0:8a:05:
7e:53:85:71:6d:b1:a4:7c:2b:87:87:41:9a:e5:c6:97:60:3f:
cd:4b:99:c7:5c:35:fc:91:76:e9:59:62:0b:ac:ca:93:4a:a6:
51:e2:96:d7:81:7e:ce:de:74:2d:a1:2a:cd:14:6b:c9:52:5a:
4a:8c:15:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:54:33 2025 by rpki-client