Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
File: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft (raw, json)
Hash identifier: om6ktWPRC7pzZDb+M4R8xxUISYfaOfwGIylGwvviFNE=
Subject key identifier: FC:A5:C7:C3:08:F1:5D:8C:A9:0F:6D:4F:E6:F5:AA:CA:EB:2E:82:7A
Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
Certificate issuer: /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Certificate serial: 01978733D842A821C298AC2744D1E2342844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
Manifest number: 159C
Signing time: Thu 19 Jun 2025 08:00:11 +0000
Manifest this update: Thu 19 Jun 2025 08:00:11 +0000
Manifest next update: Fri 20 Jun 2025 08:00:11 +0000
Files and hashes: 1: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl (hash: e59XPu7zo/LGAShklW7GFo4LgWBEDy+A4pqyu6g/cJI=)
2: gGwKnYfvhCn5nwp-acIqahsS3nA.roa (hash: Rj4EAnxstBQ29bzxEKAGqDAmg0fXQP5ck4gqOBpaqb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:33:d8:42:a8:21:c2:98:ac:27:44:d1:e2:34:28:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Validity
Not Before: Jun 19 08:00:11 2025 GMT
Not After : Jun 20 08:00:11 2025 GMT
Subject: CN=fca5c7c308f15d8ca90f6d4fe6f5aacaeb2e827a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:56:9d:c5:b3:27:a9:9d:62:4e:cf:75:ff:
02:61:77:82:d7:b6:a1:20:25:1e:24:a5:17:c0:ef:
b9:13:0d:d4:00:aa:aa:79:75:62:82:5c:62:94:17:
e0:7a:36:90:b9:ac:eb:3c:ff:d1:a0:5b:35:a1:9b:
e9:74:f5:07:9c:fa:22:05:dc:4e:56:0e:9d:4a:b1:
d4:82:30:00:56:7c:b2:8f:b0:e2:7d:fd:3d:14:d8:
36:0a:5c:ce:72:ca:a7:69:1c:c4:64:99:7b:b7:b3:
77:19:3e:0e:ae:63:88:81:a1:49:76:e3:c0:39:d8:
52:5f:d3:03:b2:71:b3:b2:73:b3:85:4b:ae:ab:7c:
ba:3b:8f:1c:23:da:83:e5:ad:b1:c5:6c:0a:39:cc:
1b:d2:bb:68:17:f6:66:91:08:2a:b0:d1:eb:dc:60:
82:e7:bf:57:43:2d:20:a7:0f:82:2d:b0:35:64:b8:
50:30:71:67:c4:0a:2d:ca:81:0b:4a:ad:13:c4:c8:
75:87:10:4f:9e:78:25:a9:ee:ae:9e:3b:ff:07:64:
50:84:74:b4:f5:8c:e5:cd:c1:56:cb:c1:b6:51:be:
17:09:22:61:66:08:39:49:d7:fb:77:5a:f5:9e:ef:
ea:c4:01:b8:e1:c2:5a:3b:e0:0e:d1:8c:8d:fa:0a:
bb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A5:C7:C3:08:F1:5D:8C:A9:0F:6D:4F:E6:F5:AA:CA:EB:2E:82:7A
X509v3 Authority Key Identifier:
keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4e:fa:ed:9a:14:de:02:09:9c:0e:5f:02:5e:06:44:96:fd:
38:fd:d7:8e:99:ad:04:4b:e7:b1:e7:23:b7:d1:43:c3:66:3c:
ee:b7:5c:90:b7:24:c0:56:79:2a:10:e8:78:46:c0:82:da:fc:
3d:fe:56:51:dd:83:71:aa:a1:91:2f:61:0e:e6:e2:22:3d:8b:
91:fb:f6:29:8d:76:2e:8d:bb:2b:96:f4:ed:99:fe:43:7c:13:
5d:c4:b1:1c:c4:d7:46:3b:1d:71:7d:39:f0:31:f9:a8:cd:98:
dc:22:e6:c3:18:91:f8:ad:e6:32:29:6f:e8:9b:ca:54:7c:7f:
00:21:c3:e7:ea:3a:0a:36:5e:bd:cf:39:e5:55:08:e5:db:55:
c8:b8:0e:80:a7:34:09:ab:d4:c9:b2:c1:f1:8e:c1:56:8c:08:
65:05:37:b8:dc:54:b9:26:a3:80:7d:75:df:3f:07:d5:6c:b8:
e2:13:b4:16:42:3a:c8:fe:50:02:c9:11:46:7b:07:83:11:a4:
6f:ba:71:6e:d5:0a:5f:c9:aa:ef:d6:e8:5e:f8:ee:a8:da:6c:
30:9a:68:83:9e:b1:d9:ef:40:b4:61:a5:0e:ac:32:66:50:cd:
e2:d1:cd:80:26:30:fe:d2:d2:ed:47:fa:0e:34:9f:ea:21:16:
0d:e7:b6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:23:11 2025 by rpki-client