Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
File: 9Y3yxGnJeIlfhFgCTFBugByPsho.mft (raw, json)
Hash identifier: 5wZA8ez10KwKoo9C3wN4AAPMlA69IeVqdWs6tYvoBBw=
Subject key identifier: 38:8B:3B:1B:9D:AC:A2:8B:52:DF:DD:65:48:73:52:F9:10:4D:94:E8
Authority key identifier: F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
Certificate issuer: /CN=f58df2c469c978895f8458024c506e801c8fb21a
Certificate serial: 01976E1972061E1489FB3BE8C8D172576AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
Manifest number: 1317
Signing time: Sat 14 Jun 2025 11:00:50 +0000
Manifest this update: Sat 14 Jun 2025 11:00:50 +0000
Manifest next update: Sun 15 Jun 2025 11:00:50 +0000
Files and hashes: 1: 9Y3yxGnJeIlfhFgCTFBugByPsho.crl (hash: bFNjdk6hreOggYtrGucBfufeoW9oP/2TE3u50YeRVNs=)
2: uTgF90O7aHLO_G7cSzTbj_nzdao.roa (hash: lwZMpyCYU1xDcN6IVFSHMP6G+054GMvXirawB6lbtsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:72:06:1e:14:89:fb:3b:e8:c8:d1:72:57:6a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58df2c469c978895f8458024c506e801c8fb21a
Validity
Not Before: Jun 14 11:00:50 2025 GMT
Not After : Jun 15 11:00:50 2025 GMT
Subject: CN=388b3b1b9daca28b52dfdd65487352f9104d94e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:44:fb:34:f0:78:7d:f5:97:2c:7f:5f:50:
d2:07:fc:3d:38:ef:8d:a0:bd:a2:41:8c:eb:44:5e:
8c:80:ae:af:8e:b0:b5:85:5f:3f:2e:5f:49:54:42:
27:74:3d:7f:e5:7f:0a:71:8e:99:2a:65:b7:11:30:
76:47:b7:8a:05:a7:25:b5:5e:82:3d:91:8d:2c:ac:
30:9d:a6:5e:d0:2a:a6:59:4f:d5:a9:af:60:87:c1:
80:73:dd:a3:0b:a9:e6:0a:7a:ba:16:73:41:9b:70:
be:30:0b:3a:78:87:e5:83:ec:3e:ad:8a:3f:0d:cd:
f1:a4:00:8e:4a:ea:d0:fd:e6:a9:35:ee:48:33:16:
1b:39:01:e3:ad:ec:aa:34:f1:3c:db:5f:22:12:32:
2c:ea:09:b8:7e:5f:a1:a9:1b:04:ae:a1:b9:ed:9b:
25:34:0f:21:d4:15:7d:6d:3d:94:94:13:7b:22:c3:
19:99:11:63:e7:c9:da:ba:38:b5:49:1a:0d:d0:4c:
69:13:4f:df:3c:71:73:0f:b5:c2:5b:70:ef:53:f1:
8d:a2:2a:23:94:9d:cf:5f:15:a4:49:d2:02:38:1f:
f1:e9:b8:44:d2:2d:97:d1:02:39:fc:aa:0f:16:a8:
cf:54:f2:f6:c8:41:76:2d:98:b6:0f:8f:c3:56:b0:
31:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8B:3B:1B:9D:AC:A2:8B:52:DF:DD:65:48:73:52:F9:10:4D:94:E8
X509v3 Authority Key Identifier:
keyid:F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:9e:f5:47:4b:e7:6c:39:e8:9f:9e:2e:4d:06:e6:4e:04:c1:
87:12:40:ad:1f:f1:6e:ea:1d:11:36:ed:16:38:c0:48:a0:23:
95:1d:a4:af:cf:24:97:69:ab:24:f3:53:7d:5c:36:3e:55:16:
63:1e:7b:aa:bb:2f:38:90:2e:e2:38:20:e5:ee:00:4e:fd:e8:
47:70:49:4a:d1:94:60:09:26:2e:d9:d4:4a:e0:bb:74:3d:91:
be:b3:91:7d:c8:85:c6:bb:ce:70:96:67:40:71:24:42:1e:c3:
bf:8b:cc:67:3e:02:12:b5:11:a2:79:56:a4:82:dc:b0:ee:6d:
a7:3f:f4:88:62:6b:14:7b:a0:25:a4:f9:5c:72:e9:00:48:fb:
3f:09:1b:9c:e8:79:83:b1:ae:fc:f7:c0:d1:94:df:9a:ba:d1:
66:cb:ea:74:9d:26:8b:5c:c0:21:08:e1:fe:21:64:30:78:b8:
60:a5:d3:77:54:b0:66:74:7f:dc:ed:e8:e4:40:e2:d2:d2:5d:
97:ff:cd:32:b2:6a:95:42:ff:a0:17:b0:54:f8:0b:af:d9:31:
1b:5c:b6:35:d8:94:29:f4:f1:23:ef:e6:bb:73:50:53:52:5d:
5a:c5:7a:f1:80:d6:3f:e5:0e:ed:d5:42:a1:00:48:4a:61:65:
51:ce:b8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:04:20 2025 by rpki-client