Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
File: 9X2cj_wgS2294BIFMDvfi1BjiqY.mft (raw, json)
Hash identifier: uM7LZogpG3GgaPrmeWYkFS1qttHhSl3xzK9iMIKOdSw=
Subject key identifier: 0F:E3:95:AE:24:5B:0F:F2:04:F4:0E:8E:BC:F1:E2:85:89:07:73:93
Authority key identifier: F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
Certificate issuer: /CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Certificate serial: 0197B8212FB538A401ABC5E443528AE8C321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
Manifest number: BB
Signing time: Sat 28 Jun 2025 20:01:12 +0000
Manifest this update: Sat 28 Jun 2025 20:01:12 +0000
Manifest next update: Sun 29 Jun 2025 20:01:12 +0000
Files and hashes: 1: 9X2cj_wgS2294BIFMDvfi1BjiqY.crl (hash: otGwLUSOgfDX12cEPZBRm3W3WMSqtyyQoMGi3f7ekbw=)
2: blFPI1QT3vGyXWS1-axkqAT7T1o.roa (hash: 9ZF4v61ldXuDLq/JdKEO0mrKJOTY13vVthxskJAXAEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:2f:b5:38:a4:01:ab:c5:e4:43:52:8a:e8:c3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Validity
Not Before: Jun 28 20:01:12 2025 GMT
Not After : Jun 29 20:01:12 2025 GMT
Subject: CN=0fe395ae245b0ff204f40e8ebcf1e28589077393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:72:ca:3a:58:af:b3:03:a7:98:8c:06:21:bf:
73:f2:64:02:1e:bd:0f:55:69:d3:70:c0:d4:ed:ef:
a9:6d:a4:dc:82:2e:31:dc:24:b4:51:3e:6c:2d:d6:
62:e5:5e:a9:c1:cd:bf:5f:41:e1:06:9b:52:ac:ec:
16:cf:ab:07:d3:85:14:3b:b0:e2:05:e5:10:c1:f5:
49:33:20:63:f6:06:65:e2:fd:77:00:97:f6:b1:00:
52:4f:07:cc:87:72:6c:9e:5c:1b:13:0a:a7:0c:87:
2d:1d:7a:4f:4d:e6:87:df:23:2e:e1:42:7b:71:11:
c5:64:d5:eb:96:7f:3c:07:21:ae:e7:0a:0e:7b:e3:
47:11:97:d5:98:18:fc:3e:0b:9a:dc:ad:64:ad:aa:
c7:f1:44:98:da:df:58:40:27:45:26:99:45:d3:bc:
3b:1e:af:cc:2f:97:db:44:d9:76:ea:33:8f:34:61:
3e:ab:7d:07:28:86:80:2a:ee:62:e2:9e:33:22:99:
28:02:8d:cb:91:16:e2:47:a6:74:5a:71:b7:72:7e:
e7:d2:84:e2:d6:e1:32:13:21:3b:51:48:6f:95:13:
02:74:92:9f:a2:ef:9c:a3:13:d9:a2:bc:9a:20:c9:
04:2f:ad:6c:b6:7e:92:5c:4d:30:54:30:15:92:16:
65:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E3:95:AE:24:5B:0F:F2:04:F4:0E:8E:BC:F1:E2:85:89:07:73:93
X509v3 Authority Key Identifier:
keyid:F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:b3:83:73:3c:cf:da:ef:63:88:80:99:46:32:2c:1f:0c:2c:
c1:ea:f0:a6:5d:62:0f:e7:d7:50:de:98:e5:da:42:7f:df:3f:
e9:03:1e:b2:e2:54:14:eb:47:8e:0d:55:e8:29:e8:90:68:38:
e2:e8:07:70:e3:57:f5:24:5e:2c:39:da:ab:09:53:fc:62:aa:
7a:ac:28:7f:14:cd:26:f0:43:ae:cd:26:be:17:2d:a3:79:49:
59:a7:16:2d:4d:e5:9a:79:cb:db:60:df:b4:ec:41:29:da:e7:
67:55:b1:aa:c5:dd:9e:ab:30:21:b2:fb:2f:0e:bf:c7:33:ac:
8c:5a:00:e5:c2:e5:73:9b:66:cc:cc:ed:ca:25:18:bd:e9:31:
35:db:d7:91:dd:05:2b:2d:5e:c3:f4:b2:da:c4:55:d7:4c:96:
67:f1:99:32:83:0c:d7:28:30:6e:2f:86:02:b9:74:1d:f5:f9:
63:3b:ed:79:63:a0:fb:2c:1a:2b:08:29:0c:92:01:73:19:78:
c7:c8:f2:02:a3:5e:f3:7a:24:e8:d0:5d:29:be:11:cc:48:7c:
8a:62:4b:3d:e4:af:ea:34:1a:66:95:80:b1:ce:7d:f7:c7:cc:
65:b9:ea:de:63:00:2c:55:38:78:c2:2b:22:7a:45:b6:92:24:
80:ae:26:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:08 2025 by rpki-client