Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
File: RN9Py46lHhjSkIBcj1Dw30NA29U.mft (raw, json)
Hash identifier: nYU/QzjtstHOFz5IATEzxchskNot8U3nb3TWUoikCEk=
Subject key identifier: 7D:65:F0:B3:9B:A0:A8:8C:30:52:4C:C7:83:E5:41:B1:5E:9C:91:34
Authority key identifier: 44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
Certificate issuer: /CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Certificate serial: 0197B6D768B8F93AFCCF397E8937FEFA7241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
Manifest number: 0410
Signing time: Sat 28 Jun 2025 14:00:59 +0000
Manifest this update: Sat 28 Jun 2025 14:00:59 +0000
Manifest next update: Sun 29 Jun 2025 14:00:59 +0000
Files and hashes: 1: Blmy2f8OWilx5iyKeJl19yxz130.roa (hash: hBJbqMLATjqE7T1aEx82BrgYKE+8rAT6ZSYbo8s5Glc=)
2: RN9Py46lHhjSkIBcj1Dw30NA29U.crl (hash: R8RNl08qgMeL6RclFy4EA83pfOSOtGFzmmO0ioN6/RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:68:b8:f9:3a:fc:cf:39:7e:89:37:fe:fa:72:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Validity
Not Before: Jun 28 14:00:59 2025 GMT
Not After : Jun 29 14:00:59 2025 GMT
Subject: CN=7d65f0b39ba0a88c30524cc783e541b15e9c9134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fe:d6:35:21:e5:fb:b2:c4:62:24:38:d2:d2:
55:3e:0f:1b:fd:6f:ff:2d:72:8e:54:39:31:af:85:
3a:e6:9f:76:3e:50:64:dd:32:b5:46:18:99:c8:cb:
e5:73:01:d6:d7:2e:7f:5b:54:ef:56:fa:3e:e9:cc:
02:18:8b:8a:a1:54:06:63:a6:70:1c:11:02:6b:8b:
5b:33:1f:50:6f:0a:6d:04:34:f8:ba:15:ad:87:b0:
a6:30:be:1b:9c:dc:ae:f3:dd:56:37:35:91:7e:4f:
54:16:d8:69:be:90:42:cf:5e:6e:ff:f3:4e:67:2e:
e7:52:25:87:df:b9:3b:e8:e4:4b:fb:1a:3a:8b:20:
fb:63:d9:fa:c6:f3:21:60:47:77:8f:26:2b:5d:2d:
97:9a:80:7e:51:79:6c:d4:7a:3e:2c:1c:30:ce:0e:
a0:66:4f:23:e2:68:30:c3:d7:d7:1f:dc:05:13:a4:
70:71:1c:34:9a:64:dd:f0:8a:b5:b4:14:79:b1:22:
3c:f0:c5:7c:5e:62:17:82:43:b9:5b:34:e9:f2:c1:
00:06:a5:6d:3e:03:35:ac:66:c8:2e:10:e9:b5:f4:
c6:23:f2:3f:73:85:88:d4:66:4b:15:17:4c:49:e0:
9b:87:03:84:b6:48:54:2a:75:93:5c:24:57:f0:ea:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:65:F0:B3:9B:A0:A8:8C:30:52:4C:C7:83:E5:41:B1:5E:9C:91:34
X509v3 Authority Key Identifier:
keyid:44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d5:f6:41:f9:1a:7c:96:1e:38:8d:0e:c4:ed:5d:55:e0:66:
9e:e9:30:5d:7b:50:5f:80:fc:48:29:a9:97:cd:01:c0:44:f8:
92:81:07:52:18:d4:c3:c3:68:f0:20:70:9b:bf:60:ac:ea:c6:
c8:2c:c1:13:fb:62:bf:ad:5e:b1:fb:b2:45:37:66:12:56:19:
e7:7e:e7:ca:be:7c:d7:fd:1c:9f:40:32:60:d9:ca:3b:cb:63:
e5:8a:8c:47:2a:ca:5e:df:47:62:5e:00:3c:f3:cb:d0:fa:29:
89:74:4e:9b:a7:f7:35:f1:6d:76:e0:15:77:b1:46:49:5e:95:
97:f0:e3:2b:b2:f2:9b:00:69:f6:e7:7e:e8:92:3a:17:12:ed:
c8:5a:79:eb:de:c9:ec:28:3f:cf:18:40:c3:51:bd:3c:f8:ca:
48:b6:d8:ab:37:27:f9:12:df:dc:fe:73:94:a2:ad:88:53:29:
42:48:f0:a2:18:48:0d:02:2f:ed:1e:59:7c:80:e9:93:97:35:
fd:b1:be:3d:fc:f4:2a:17:a9:f3:af:56:20:0a:18:4e:ea:f8:
5f:12:c8:65:e1:3d:09:b4:79:e3:23:ef:d3:e3:37:65:37:99:
72:be:57:98:d3:dd:ac:08:0c:0b:19:7f:48:01:57:7d:cf:7e:
58:0e:8c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:13 2025 by rpki-client