Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
File: IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft (raw, json)
Hash identifier: 87+flV0sj4aLEZ5Wfp7lgpFmBB4EPbsCGo8+wOumfic=
Subject key identifier: 07:94:CC:03:45:51:5B:6E:E6:73:C0:0A:ED:CB:FF:86:12:73:AD:00
Authority key identifier: 22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
Certificate issuer: /CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Certificate serial: 0197692A1121ECC8AA85A3A53AB2025D56E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
Manifest number: 0C09
Signing time: Fri 13 Jun 2025 12:00:53 +0000
Manifest this update: Fri 13 Jun 2025 12:00:53 +0000
Manifest next update: Sat 14 Jun 2025 12:00:53 +0000
Files and hashes: 1: IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl (hash: Vy63izDnEI8As/dDK/rpfoBiFHiL6QSW+0/+HG4LDgc=)
2: gJhF5evxe8g-iDe3hBXACq-nKPk.roa (hash: qM5+n5uw27ndltKhnl7N0lO0fW10CmbET7TyhvcxHok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:2a:11:21:ec:c8:aa:85:a3:a5:3a:b2:02:5d:56:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Validity
Not Before: Jun 13 12:00:53 2025 GMT
Not After : Jun 14 12:00:53 2025 GMT
Subject: CN=0794cc0345515b6ee673c00aedcbff861273ad00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:ec:07:02:f1:f1:b6:4c:9d:c3:d9:ac:26:
16:11:26:20:98:4a:93:13:79:5f:e1:d1:2f:6d:d0:
0e:05:88:d4:ab:be:aa:99:a0:64:6e:92:f5:94:69:
f9:25:88:3b:d3:d3:21:9f:a5:88:41:60:15:0e:f4:
56:86:e9:7d:ae:51:16:17:09:c2:a1:58:65:2d:00:
d8:14:07:f3:78:ce:01:8e:fa:48:ca:13:be:59:96:
1e:d1:82:a0:45:aa:d3:99:13:bc:79:4a:d7:a9:48:
dc:81:c7:4d:5e:98:39:b4:a8:ec:96:55:8b:26:1a:
03:53:00:45:92:35:e8:24:f5:77:d6:50:9b:e8:6f:
c1:2f:37:13:5d:fa:0c:7d:f6:e7:86:d1:48:17:5f:
8f:37:4a:a8:46:3f:e2:47:76:17:ad:73:b3:f6:62:
8d:bd:52:39:a1:bd:fe:24:c1:b9:1f:53:21:e5:22:
44:07:ea:96:13:4b:ae:7c:7a:f3:93:f6:5e:92:69:
b9:ba:8e:ea:a1:ba:73:91:bc:27:6a:27:c5:5c:ed:
6c:0f:dd:81:db:1d:54:4c:8c:26:78:07:9f:d4:55:
b6:0d:73:fa:58:48:5b:b4:47:7e:9e:2b:d1:3f:7a:
73:aa:95:c5:64:6d:1b:53:62:24:8b:27:89:3d:35:
c6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:94:CC:03:45:51:5B:6E:E6:73:C0:0A:ED:CB:FF:86:12:73:AD:00
X509v3 Authority Key Identifier:
keyid:22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:04:c1:4c:bf:8b:27:f7:11:c3:ee:86:10:5b:e4:31:45:05:
02:a1:a8:25:8b:02:0f:65:f9:78:30:5c:b9:4f:c0:d7:f6:3c:
ca:d3:45:aa:5c:2c:35:69:02:ac:a3:4f:20:d0:37:db:95:da:
9b:0d:97:bf:1c:38:09:32:19:f2:9a:00:f0:9e:b8:d9:7c:c5:
45:32:50:ee:c3:bb:fa:02:09:c4:4a:af:65:ae:ea:06:44:49:
ab:c0:ab:ca:3a:cb:df:a3:ee:f1:b9:2a:bd:36:17:1b:80:55:
49:58:eb:10:3f:84:71:c7:f9:a4:a9:3c:b5:42:ad:9f:ac:6d:
01:21:8c:79:c2:e8:4a:6c:f9:c4:48:11:94:20:88:33:fa:06:
61:3e:0b:46:2d:80:b8:d1:99:07:68:5e:cd:57:96:fa:73:2b:
85:72:f9:a0:c1:75:75:c1:28:4d:06:0a:cc:6b:53:19:77:83:
37:28:8b:66:39:0c:a2:80:68:d2:14:50:1e:86:aa:b0:d1:4a:
9e:ba:df:ab:51:65:12:a6:45:99:f8:af:a5:f6:ac:96:ad:fc:
a0:c4:f1:2c:0f:1f:d7:95:11:7b:6e:02:87:85:67:ef:43:89:
7b:dd:38:58:50:bc:bc:0e:b9:dc:32:88:84:d2:81:0d:7b:94:
90:2c:d4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:38 2025 by rpki-client