Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier: XN3H3dQR8gAE8Bsdq5zNjb+VZ9C/3/Gsw4wjUOsv23Q=
Subject key identifier: 91:C1:1A:61:67:F0:0C:AA:FF:C4:70:2E:85:C0:A0:AB:50:FF:AE:7A
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial: 0197B5C502B3DA3A71B794A74B3B1B713A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number: 09DE
Signing time: Sat 28 Jun 2025 09:01:16 +0000
Manifest this update: Sat 28 Jun 2025 09:01:16 +0000
Manifest next update: Sun 29 Jun 2025 09:01:16 +0000
Files and hashes: 1: 9jRjdTO7fBkjcFHt1fnUnaX_T3k.roa (hash: 3WY7AgxSwDZyrJrZX0H0mFMYrwb18tzFjzAuAbCSY+Q=)
2: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: Bal8TpNdKM4MUt0GP2skq1o5dh4mPQcNrv0M+VuwHSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:02:b3:da:3a:71:b7:94:a7:4b:3b:1b:71:3a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Validity
Not Before: Jun 28 09:01:16 2025 GMT
Not After : Jun 29 09:01:16 2025 GMT
Subject: CN=91c11a6167f00caaffc4702e85c0a0ab50ffae7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:28:26:60:47:c3:25:34:4e:ef:bb:ba:48:4b:
51:0e:d4:21:52:c3:93:5c:24:fc:82:52:e2:e5:74:
e4:f6:f6:45:b4:56:bd:84:70:09:e4:ff:1c:0f:3c:
93:c4:84:2c:29:5a:db:7a:a9:3a:16:e1:06:5c:40:
92:19:74:85:00:9c:b7:13:f9:c6:db:2a:e2:ed:c6:
6c:2b:bf:e1:4e:38:a6:c4:8c:a3:75:11:2e:5c:28:
ca:f4:d2:cc:53:75:f8:ce:82:f3:39:33:89:aa:09:
83:74:79:cc:e6:f8:46:3a:d6:82:ed:47:4c:28:c5:
93:25:4b:c3:3a:33:46:6d:d5:8d:86:df:5b:b1:af:
b4:c2:98:28:ed:96:66:76:79:c5:ce:54:81:e4:30:
89:46:e8:1b:43:8e:b5:69:16:99:b4:6c:0c:d9:23:
4d:46:55:ea:d3:f8:9d:05:0b:90:80:ba:18:f1:00:
aa:6f:e1:69:69:79:1c:0f:9f:99:67:92:99:b8:c3:
c7:24:03:5e:c8:96:8a:e3:59:b9:24:f6:ac:e9:73:
f4:da:e1:a7:7b:61:e3:99:5e:1f:2e:45:b6:a5:69:
83:29:5d:37:a7:ca:0f:27:72:ee:ac:f7:11:a0:e4:
c7:7e:98:70:8d:c6:ab:d1:2a:5b:b2:db:8f:04:1f:
98:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C1:1A:61:67:F0:0C:AA:FF:C4:70:2E:85:C0:A0:AB:50:FF:AE:7A
X509v3 Authority Key Identifier:
keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:65:c3:70:f9:95:13:2b:7f:78:09:92:3e:87:23:ce:29:06:
01:c8:e3:44:94:2c:9a:2a:32:94:bb:50:0f:68:b6:6d:f5:e2:
71:5e:56:32:b6:82:e5:74:5a:a1:cb:01:cc:c7:dd:6e:ee:58:
f4:de:9d:2c:e7:89:0a:e8:1f:e9:4c:35:f8:2a:f9:88:8d:ed:
f1:e1:17:82:9a:5d:03:44:a9:cd:71:b7:8c:53:70:ee:65:41:
b4:10:f9:ed:e2:8a:57:7c:fd:74:9f:40:eb:36:09:d0:61:1a:
f1:5c:41:80:54:d8:89:83:d9:5d:8b:8f:33:76:1e:75:be:db:
6e:f4:04:b0:c1:d9:d1:28:91:be:ad:8c:47:d6:9d:87:df:08:
a9:38:93:d7:0d:9c:d8:71:66:c9:a2:23:bc:3f:59:3b:27:15:
61:6c:33:57:bc:fb:9b:a6:7f:9b:66:75:3e:76:05:c4:a3:d9:
a8:d1:67:c0:be:72:87:07:db:5f:e6:e5:28:b1:48:b5:85:ad:
02:ff:38:b8:76:1e:4c:a8:6d:f8:3c:e4:77:a2:5b:18:8c:f7:
8d:2e:94:ff:ea:6b:4b:23:35:74:76:bc:4e:da:23:98:f6:f6:
00:30:0d:2c:77:32:95:de:67:79:51:14:a6:5e:d5:42:33:ed:
dc:be:e8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:44 2025 by rpki-client