Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
File: h9qWV60f35jec4uxmnPv0NsLOio.mft (raw, json)
Hash identifier: sVr0Ng1Y2q/kHV74i9+z/F0SmBMzBkkUnF+51h2zTe8=
Subject key identifier: F9:64:B6:9E:98:1D:61:FA:57:D8:2B:59:06:85:A3:3D:99:75:78:4B
Authority key identifier: 87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
Certificate issuer: /CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Certificate serial: 0197B6A107C0EDA829AEFBC7B3176418B69E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
Manifest number: 54
Signing time: Sat 28 Jun 2025 13:01:35 +0000
Manifest this update: Sat 28 Jun 2025 13:01:35 +0000
Manifest next update: Sun 29 Jun 2025 13:01:35 +0000
Files and hashes: 1: 2GTFPZ68uVkX8Ryfbx92fDQ9upI.roa (hash: lvp+RlxYyEIMygF5MN9RWgH0GLslbYAMM+G4pVyVmkU=)
2: h9qWV60f35jec4uxmnPv0NsLOio.crl (hash: tZk0itrT+rYtXuG7razoZcNLL7sDhh16uSqoIRoIcg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:07:c0:ed:a8:29:ae:fb:c7:b3:17:64:18:b6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Validity
Not Before: Jun 28 13:01:35 2025 GMT
Not After : Jun 29 13:01:35 2025 GMT
Subject: CN=f964b69e981d61fa57d82b590685a33d9975784b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:87:0b:61:6c:ba:55:7f:f5:e1:df:86:f3:
8f:f4:d3:6a:c6:9d:6a:2a:7d:90:4e:2a:8d:a7:2b:
b4:de:92:9a:60:1c:76:a2:c5:e2:d5:e9:05:fc:d6:
ce:6d:5b:db:cc:4c:1b:9a:9e:6b:5d:e8:9b:70:62:
65:47:b3:27:72:ce:44:a6:68:7b:42:6b:14:4c:90:
9b:30:7b:70:33:2f:b3:28:b5:f6:1e:e1:38:ec:bf:
31:46:97:98:12:64:d6:18:13:10:62:a8:a2:a1:5a:
4f:a6:9c:2a:ed:a0:0e:46:da:7e:5c:4b:6e:7a:ff:
04:61:79:71:a6:7f:1a:4e:b3:16:31:73:62:4b:ed:
d6:39:86:cf:55:ec:cc:c5:da:29:13:18:d3:cd:1f:
8b:56:42:75:00:bc:9a:cf:12:9e:8a:45:0d:70:cb:
39:5d:0f:9e:66:0c:49:aa:b4:e6:30:67:79:66:dc:
7c:24:7b:6a:a5:a8:ea:2a:f8:cd:21:66:61:89:5a:
b4:20:e7:e5:07:13:1a:7b:a6:e1:eb:e6:5e:75:53:
3b:7a:fd:ae:a1:de:63:17:4b:6c:88:04:ce:fd:33:
5c:3c:af:5a:a9:58:b6:49:26:97:7a:61:ac:95:b8:
a3:ed:07:c1:4d:c0:4a:92:d4:54:5d:87:3c:6d:1a:
32:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:64:B6:9E:98:1D:61:FA:57:D8:2B:59:06:85:A3:3D:99:75:78:4B
X509v3 Authority Key Identifier:
keyid:87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fe:67:7b:d4:72:a7:c2:1a:2f:b5:df:42:fb:d3:b4:ba:53:
b8:e9:05:d4:2d:7f:47:cb:67:cb:a2:45:16:24:1f:78:61:be:
80:bb:da:bb:fc:31:2e:2c:04:5f:d2:41:da:71:82:14:e0:fb:
11:a5:05:44:46:20:00:54:09:1e:48:09:f2:9d:a5:cd:7b:6c:
db:71:71:43:f8:fa:66:1e:d1:78:29:1b:fc:64:46:a3:e4:aa:
a1:cf:b7:81:ac:db:30:aa:d0:72:53:f6:8e:b4:83:3c:a6:6d:
25:95:c2:dc:03:6f:70:73:ff:aa:83:2d:94:01:6a:7e:1f:c6:
78:7e:63:ed:22:01:98:ad:8a:67:6b:aa:20:93:fa:3f:63:b2:
d9:11:38:41:b5:c1:2b:81:ef:0f:12:53:f7:f2:d3:92:62:8f:
c5:a4:ad:2c:be:e3:8b:08:4c:5d:dc:08:2b:0f:95:ea:ea:70:
f0:e9:32:17:cf:31:3b:bd:05:ad:af:aa:c9:d2:db:76:90:80:
00:64:88:39:23:62:44:9c:db:c3:b6:21:3c:c5:9c:b6:f9:0a:
6a:76:67:59:97:0d:04:91:1b:4f:88:27:9b:0e:83:c3:9a:cc:
17:0b:91:23:ab:85:b9:83:ba:ae:6e:19:80:18:65:42:03:f3:
a2:12:99:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:37:52 2025 by rpki-client