Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
File: 9XwaqtuDIN2EMjVFjPLFy_RwStY.mft (raw, json)
Hash identifier: kbahUGHKTli33p/9AFRe8FYPlLq06SPjHtLZpwEPtk0=
Subject key identifier: A9:06:48:AE:F9:D8:3F:E0:40:22:03:DF:CC:8A:A6:1A:FA:7D:FA:EE
Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
Certificate issuer: /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Certificate serial: 01976D744E10DADC9F6EF0CB148E9E9A69E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
Manifest number: 077B
Signing time: Sat 14 Jun 2025 08:00:28 +0000
Manifest this update: Sat 14 Jun 2025 08:00:28 +0000
Manifest next update: Sun 15 Jun 2025 08:00:28 +0000
Files and hashes: 1: 9XwaqtuDIN2EMjVFjPLFy_RwStY.crl (hash: wZ+VtGf4SG6uwmBc6rLclxwH1OWd4HQ5FIi9T+SQn+4=)
2: MP9C5tlE4sTN1JTDz4jlrkAW_YU.roa (hash: 2Qb7MzrDpByF3hW1GYmCH1FHWyuhYVmQ2YbJ0M55AAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:4e:10:da:dc:9f:6e:f0:cb:14:8e:9e:9a:69:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Validity
Not Before: Jun 14 08:00:28 2025 GMT
Not After : Jun 15 08:00:28 2025 GMT
Subject: CN=a90648aef9d83fe0402203dfcc8aa61afa7dfaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:98:1c:5b:fc:55:d7:25:ad:04:a2:8e:31:ee:
98:22:51:30:01:14:94:9c:3a:2a:9b:00:e4:0f:86:
48:6a:de:cf:bd:74:8f:13:43:23:aa:88:3c:4e:32:
ef:0e:70:44:f3:4c:6a:55:5a:b1:04:8a:93:53:3b:
26:e4:5d:53:51:f5:46:c3:1d:51:3c:40:ec:9d:d6:
e1:96:e3:74:1f:6c:fa:63:4d:75:97:83:3c:d9:9b:
92:91:33:c7:22:fe:3a:e2:1c:c8:4d:37:6a:14:6c:
e3:a7:a0:a1:cc:7f:63:9a:8d:e8:4b:7c:f7:a6:40:
d7:15:99:9e:0e:d5:d0:a7:ab:66:4b:17:4a:d2:d3:
b3:bc:0f:d3:5e:3c:11:cc:70:0b:74:e2:40:4a:cf:
32:4d:3d:22:09:e3:5e:bd:84:71:0e:df:76:53:68:
f6:c6:2f:dd:84:b5:09:ff:19:3a:38:3c:02:86:c0:
2c:f5:39:00:11:6f:50:62:b0:be:b8:cf:ce:e5:f2:
99:12:81:f4:ad:3b:4a:71:1a:d4:26:90:c5:1d:60:
be:c7:53:4c:04:0d:97:b2:44:9e:7a:ab:48:d9:7e:
03:1b:82:14:04:0c:a3:8e:17:86:6f:41:50:91:39:
b7:54:7d:f4:7d:76:c4:c2:78:91:88:6c:f3:e2:66:
66:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:06:48:AE:F9:D8:3F:E0:40:22:03:DF:CC:8A:A6:1A:FA:7D:FA:EE
X509v3 Authority Key Identifier:
keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f8:4a:a2:55:67:90:27:da:f4:66:70:03:67:e5:40:85:e8:
b8:f0:42:ed:c1:aa:f5:a3:16:50:ff:90:19:a3:24:19:b9:e7:
55:b3:cf:fa:5c:83:a3:1a:3e:c2:40:77:c7:93:f0:f0:f5:a9:
e0:32:e5:71:07:e2:5e:41:bf:a2:72:95:0a:34:3e:51:cc:78:
ec:ce:7e:cc:d1:0e:e5:c6:27:09:f0:99:5b:bc:88:79:ed:78:
eb:55:02:81:a2:86:ce:ea:7d:a7:db:04:59:48:e1:c2:25:76:
12:57:8c:7b:f1:bf:3b:b6:36:a7:a5:18:df:ac:1c:a7:0d:cc:
0b:c8:ba:1f:7d:a8:41:27:ff:4e:68:a3:f3:7b:fd:a2:49:21:
ea:2b:bf:89:2d:be:a4:ac:b1:38:ad:e4:7c:35:05:90:50:ba:
8e:eb:6d:ec:16:62:c5:f1:b5:a1:08:0d:02:6f:fe:59:dd:7d:
3b:b2:cf:9d:00:4e:f2:81:a6:57:23:38:23:48:b4:bd:32:7c:
e2:8a:f1:5c:0d:f0:08:20:95:06:c8:c9:55:d6:90:8c:27:30:
14:64:44:3c:b5:46:0d:29:4e:75:37:ae:c3:a0:eb:ab:0e:5a:
ae:5b:f2:c7:dd:a4:73:4f:f2:64:10:b8:81:3f:97:6f:91:87:
99:32:89:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:55:29 2025 by rpki-client