Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier: +5oklES5218QvzLzFluXx+uTDIvFJDhvqcmxfpwCRrQ=
Subject key identifier: A9:78:20:C3:33:2A:AE:D3:3B:E6:68:0C:74:A3:3D:6D:C1:4D:04:D7
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer: /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial: 01977941735B899770ECF3D3E9BCE25ED88A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number: 0C76
Signing time: Mon 16 Jun 2025 15:00:21 +0000
Manifest this update: Mon 16 Jun 2025 15:00:21 +0000
Manifest next update: Tue 17 Jun 2025 15:00:21 +0000
Files and hashes: 1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: hce++76DFaJFRhKY5cYHG27cLN0965dRmVxPhqvfC9M=)
2: lTwG7fexEhfG1KlVMWVQwuwbbtc.roa (hash: bfD7+ofvPCOaA8CmUpbLhJtSVYv9giSBukJUfQkg6wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:41:73:5b:89:97:70:ec:f3:d3:e9:bc:e2:5e:d8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Validity
Not Before: Jun 16 15:00:21 2025 GMT
Not After : Jun 17 15:00:21 2025 GMT
Subject: CN=a97820c3332aaed33be6680c74a33d6dc14d04d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:76:8d:0b:20:13:95:6a:90:b6:55:eb:2f:6f:
d0:e6:62:af:be:e9:04:12:c7:61:eb:0c:74:fc:f3:
b4:95:f3:33:ed:58:f3:c9:bb:eb:f8:42:14:d9:a6:
91:f5:d9:08:38:f1:0a:c4:0c:7b:ad:c5:55:5f:95:
b0:ce:7d:02:5f:1d:15:07:22:6d:1c:28:76:77:de:
7a:cc:0c:98:4b:dd:6e:5c:79:b8:69:f9:4e:c1:7a:
d2:25:76:a2:6f:2a:25:f4:8b:3f:46:79:73:5a:d6:
a6:a1:f9:3e:81:21:98:22:14:0c:8f:b3:a8:a8:6a:
99:c9:d9:aa:aa:60:3e:19:4b:32:e7:28:7d:a8:f7:
c2:88:0c:9e:37:17:c2:a2:6e:92:2f:d4:89:25:73:
28:dc:ca:2d:37:2b:47:2b:c8:8f:82:32:7e:32:11:
74:7e:81:5f:f4:e1:ce:81:e9:1a:7c:ca:0a:14:aa:
36:7b:9a:74:e5:9b:ba:a8:07:6f:79:f4:08:35:bb:
99:09:a6:e8:0a:f3:1a:72:02:37:68:c5:14:7b:39:
e2:03:92:08:66:a6:23:fe:fa:6e:89:98:39:e5:2c:
0f:0a:16:23:59:b2:55:d6:21:a6:e8:99:da:1b:b3:
0b:0d:1c:e8:d8:96:80:63:cc:9f:d3:46:91:33:1f:
3d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:78:20:C3:33:2A:AE:D3:3B:E6:68:0C:74:A3:3D:6D:C1:4D:04:D7
X509v3 Authority Key Identifier:
keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:86:d5:9f:b6:32:bb:6e:e5:c7:45:3f:65:6b:0b:d4:64:d5:
02:68:c3:f1:86:86:71:fb:d4:60:a4:c1:66:9c:66:b2:94:db:
85:f7:a6:55:68:c1:c2:cf:46:68:1f:0e:ad:f2:9d:33:d8:9e:
4b:6f:dd:1c:1d:3d:7c:d5:f4:37:40:95:2e:c8:25:2d:f2:8d:
8d:f7:fc:12:f4:66:36:20:15:73:a9:f1:dd:f4:06:7d:89:c0:
17:e5:81:47:2f:c9:fe:ae:68:f7:bc:14:a6:16:b1:ad:6d:14:
28:af:71:69:91:af:2d:0e:04:32:35:1f:fb:7e:43:32:4c:91:
8a:2d:66:88:71:d7:c1:10:1e:84:20:f7:9f:85:c2:6c:bd:32:
f8:fe:9a:27:36:a0:ad:37:7b:1b:c9:82:20:86:5a:61:23:92:
18:c9:ca:0a:ff:a2:b8:7a:f4:73:9a:d8:ce:bb:fd:1a:9a:84:
75:c1:7d:3b:db:bb:4d:08:bf:51:d5:0e:1a:07:b5:78:b5:1b:
78:6b:8f:8e:af:e2:30:2b:be:10:e9:e1:0b:60:ea:08:ab:1a:
db:45:9b:84:21:36:cb:c8:1a:27:ec:e5:53:86:f3:4e:a8:b9:
89:10:9b:d0:99:36:79:92:3d:6a:54:0c:0a:60:7d:81:c8:7c:
c5:30:46:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:18:24 2025 by rpki-client