Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
File: m9bIYDQsx5nCgHT2mXaKjsvapS4.mft (raw, json)
Hash identifier: eCRzqvPCxUaOihSqzUdKOJBR38jM5QtMNKKKSMyPTgw=
Subject key identifier: 8B:C4:8E:35:04:D9:7C:0A:DF:33:46:CD:5F:49:D9:58:67:E5:DF:FE
Authority key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
Certificate issuer: /CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Certificate serial: 01976C2AB2FB16CB89B7C667F331C3CEA2ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
Manifest number: 1335
Signing time: Sat 14 Jun 2025 02:00:27 +0000
Manifest this update: Sat 14 Jun 2025 02:00:27 +0000
Manifest next update: Sun 15 Jun 2025 02:00:27 +0000
Files and hashes: 1: E9yjq7sNmTyPb-NC6kzqBRLzrkw.roa (hash: Fv8DNDjTn+xqZTnmPhsaO+M3G5osAwVvGy2YaFQtoP4=)
2: m9bIYDQsx5nCgHT2mXaKjsvapS4.crl (hash: JYRDBvlILK33e/5ET5O/JggDAMA7zwyx6ULjB9VoWco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:b2:fb:16:cb:89:b7:c6:67:f3:31:c3:ce:a2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Validity
Not Before: Jun 14 02:00:27 2025 GMT
Not After : Jun 15 02:00:27 2025 GMT
Subject: CN=8bc48e3504d97c0adf3346cd5f49d95867e5dffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:43:8e:c7:bb:75:a3:20:9d:04:c9:25:15:
4b:98:b3:cd:7a:db:b0:4f:fe:79:df:73:32:cb:e8:
50:fb:ea:b4:01:07:f6:66:4a:21:14:59:d6:dd:5e:
a5:c8:20:00:79:64:40:ba:b9:9e:b6:f0:75:d2:30:
16:9d:a6:7b:ae:df:e9:af:62:9e:da:fc:11:eb:f5:
19:45:12:50:8f:75:77:82:a7:83:00:a9:d8:b6:87:
6a:72:d0:ed:46:34:79:df:ff:e9:f7:17:40:21:8b:
a9:b7:87:af:f1:17:9d:23:26:42:f3:c3:f0:21:cc:
99:e2:78:14:7b:51:90:61:a8:2f:8f:0b:11:28:09:
b9:60:0f:02:94:4f:15:27:66:82:3b:cc:b1:ea:b2:
8c:88:83:75:43:5f:56:8b:dc:e3:26:38:1d:a7:db:
c0:fa:03:ac:2d:4a:cd:c1:c1:ee:40:34:86:61:ab:
9a:cd:07:be:e9:86:26:f8:63:1a:44:c1:dd:30:cf:
5a:88:c6:f2:3f:d0:32:41:b0:81:1d:a6:20:4d:a5:
1f:dd:03:39:0e:75:8b:f5:4e:a3:d5:13:3d:10:c1:
bb:8e:f3:d9:ad:a2:09:bd:72:54:af:b6:a2:50:5e:
6a:6b:10:87:ce:d0:87:d4:6d:30:21:d8:7f:41:c0:
f2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C4:8E:35:04:D9:7C:0A:DF:33:46:CD:5F:49:D9:58:67:E5:DF:FE
X509v3 Authority Key Identifier:
keyid:9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6d:6e:8d:0d:b6:86:f5:67:8e:c4:16:21:a9:63:79:96:e9:
cc:68:b2:6b:dd:2b:1b:e0:8c:09:61:8b:c5:0e:69:02:d7:5a:
1b:ec:00:11:b7:5b:e8:7a:f7:d6:0c:03:41:f6:01:ea:d4:89:
28:17:65:3b:96:32:64:08:75:93:df:9c:32:8b:f9:c0:16:18:
6e:6a:3b:a6:38:9d:7b:7a:78:3d:2e:b0:ec:57:b2:51:69:9e:
f8:4f:04:77:04:25:f3:ca:07:e4:a3:ed:fd:c4:7e:91:32:50:
dc:00:f1:93:c6:5e:92:4b:08:3c:2a:63:34:e6:c3:c4:65:b1:
80:a5:8c:cf:b9:92:ad:c4:3b:d1:4a:80:14:33:a0:0b:e7:f4:
17:3f:01:38:d5:2b:0c:a5:07:92:c5:00:51:c8:ff:92:5a:41:
ad:46:9a:6f:38:18:7b:f3:5d:1d:d0:13:4f:3f:f1:0f:1e:57:
d5:a4:1f:11:28:54:f5:b1:a4:ea:5d:d0:60:a5:d0:1c:69:86:
47:02:71:7b:61:18:02:e1:0a:17:89:d0:51:03:a7:bb:ce:7f:
30:4c:72:75:e6:d9:4c:9b:0f:48:67:e6:f0:b8:9f:2b:c9:6a:
fe:f8:db:11:d2:2b:a9:68:26:84:ee:17:85:b7:9a:bf:bd:0a:
04:c0:ab:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:19:50 2025 by rpki-client