Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
File: 9XvH8urwyvppvuX6vmcSK0Nj_nI.mft (raw, json)
Hash identifier: 3RdU6/CRUoL/0iAzTu+3e8o7l7dONxP8sQVlt1KPL7k=
Subject key identifier: 0F:12:9B:A2:55:53:36:66:21:A6:A9:DE:33:4F:45:E4:CD:19:3D:D2
Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
Certificate issuer: /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Certificate serial: 01976F6318CE0E75B1729C825CEB49609AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 17:00:54 +0000
Manifest this update: Sat 14 Jun 2025 17:00:54 +0000
Manifest next update: Sun 15 Jun 2025 17:00:54 +0000
Files and hashes: 1: 9XvH8urwyvppvuX6vmcSK0Nj_nI.crl (hash: MGOZZ5wyn6lCXTI7PgiiL4r8LrJCGnziSOQJhln3cXw=)
2: KNQf97WzItrOYioPwLu-Tdh4fNc.roa (hash: RIjtWc8dl547OecCvbWgp63AohvHeAGZkMZVo9/tFEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:18:ce:0e:75:b1:72:9c:82:5c:eb:49:60:9a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Validity
Not Before: Jun 14 17:00:54 2025 GMT
Not After : Jun 15 17:00:54 2025 GMT
Subject: CN=0f129ba25553366621a6a9de334f45e4cd193dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:47:98:46:d8:35:64:2d:00:bd:89:66:9e:43:
90:30:1c:c2:b0:6c:5c:e1:48:17:7e:34:04:2c:19:
6d:b7:dc:7f:9e:b9:cc:9d:ed:29:31:76:1c:40:c0:
bd:c2:ef:5a:c9:14:61:85:c4:98:08:37:04:a0:51:
eb:a2:32:88:7a:10:cf:10:02:48:82:2c:79:55:dd:
b2:f5:1b:6e:02:07:6d:50:ad:a6:db:08:1f:f4:6f:
51:0a:44:73:ec:3c:5b:81:16:18:4d:eb:16:be:fb:
c8:99:a3:ae:96:34:b9:b0:10:44:3a:e2:ab:f0:38:
b1:97:37:4c:e6:2f:43:99:f7:c2:a5:62:13:49:fe:
2a:d9:a2:bd:13:6c:69:19:c3:ca:f5:9f:30:84:6d:
c7:bf:6c:58:69:cd:e4:fc:11:bf:69:d6:33:af:f5:
78:58:7d:40:cb:fe:fa:3b:ba:3b:21:2e:b1:b8:35:
7f:5d:2b:c2:82:ac:4a:b6:fb:37:99:5c:50:78:01:
51:ce:13:39:c4:d3:aa:4b:bc:b1:20:b9:88:9f:e4:
be:6e:7e:1b:f6:b4:28:c6:a2:6c:c0:80:1a:0e:81:
0e:c9:a2:3e:e2:fc:15:3d:90:7a:c1:ff:18:15:da:
83:16:b5:2d:c5:fc:7d:35:b4:8b:d6:81:cd:61:50:
3a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:12:9B:A2:55:53:36:66:21:A6:A9:DE:33:4F:45:E4:CD:19:3D:D2
X509v3 Authority Key Identifier:
keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:09:a0:33:53:b3:8c:21:06:35:86:c0:6d:1a:a0:64:0c:9b:
7c:76:21:36:f1:6d:8f:43:63:aa:b3:8f:8d:0b:1b:ef:88:8d:
d2:b3:9b:e1:87:a2:b4:59:cf:c0:67:c1:bf:85:a2:36:90:89:
bf:47:b2:1c:7d:25:9b:ec:98:ca:3d:2d:a8:7c:39:d5:1c:21:
27:30:57:6f:8b:0a:af:ae:02:16:e1:ab:8d:3c:ba:51:17:50:
15:e9:1d:51:ba:ab:4d:97:46:1a:8d:c7:4a:72:ce:f8:46:9f:
80:ef:81:40:24:37:32:7e:b2:a9:65:54:82:6a:7d:54:dd:50:
de:3b:c2:84:09:3c:b6:c4:8d:f4:de:ec:08:75:ee:52:59:b2:
b9:84:9c:dc:56:0a:73:51:38:0d:1f:f0:25:e5:55:a8:fb:d1:
fa:1d:3d:9c:7a:0b:1a:ab:a7:66:c8:df:99:83:40:75:d9:15:
70:86:0e:8f:5c:53:18:3d:c4:bd:b1:a3:b9:c6:2b:ea:66:c3:
d4:fd:84:47:38:64:17:48:85:ac:68:69:b4:92:c0:4b:5d:30:
86:a5:8f:2d:32:26:0b:c1:dc:4b:04:54:53:d8:62:f6:7d:60:
7c:10:72:dd:e7:4c:2a:e2:1a:07:6c:00:3a:8e:00:46:05:80:
83:95:c5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:57:05 2025 by rpki-client