Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft
File: 9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft (raw, json)
Hash identifier: rfyaPk0AQJ3Qmi3G9U123DvrnvR5akJXTo3VzKaO738=
Subject key identifier: B4:5A:5C:B6:3F:8C:37:98:26:4B:0C:7C:91:E6:EC:FF:4C:3C:67:CC
Authority key identifier: F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A
Certificate issuer: /CN=f58acd43c0033b13b88bb397415583aa51d9303a
Certificate serial: 0197C501015A105F4FD09FD2ED4F546654B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft
Manifest number: 0B38
Signing time: Tue 01 Jul 2025 08:01:06 +0000
Manifest this update: Tue 01 Jul 2025 08:01:06 +0000
Manifest next update: Wed 02 Jul 2025 08:01:06 +0000
Files and hashes: 1: 1UQBMdlNIZpuxIjnKkgzjfvJqNM.roa (hash: UTR1XEenqcPOEfPniiaYd7rNcv8miNRFy/ZF8QAlsyg=)
2: 7CQK4uvhSVq6o2wWxOh9gTQ5PNA.roa (hash: DkMR/Y4unY7wIHXEWKNCRJfO23Nc5dcWAz953GA+1qE=)
3: 9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl (hash: uE619/bRveoYALAb0vYnraNV7x5ueGioTCBUjMPWayY=)
4: WeTCj5MkYCzvVik2-EKKBNmp8H4.roa (hash: PNmIO1vYOijeHMCQXtkzfyn0VP6CUVr/x//KeB07G6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:01:01:5a:10:5f:4f:d0:9f:d2:ed:4f:54:66:54:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58acd43c0033b13b88bb397415583aa51d9303a
Validity
Not Before: Jul 1 08:01:06 2025 GMT
Not After : Jul 2 08:01:06 2025 GMT
Subject: CN=b45a5cb63f8c3798264b0c7c91e6ecff4c3c67cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7c:fb:1d:2d:0d:b0:a3:a3:c9:28:e4:6c:70:
55:d8:a5:e5:5c:29:f5:b1:17:65:18:7e:b0:61:6c:
e5:5f:d5:c5:a1:f5:ad:30:d5:59:d0:f6:b5:be:e6:
07:d3:6e:2b:14:85:03:d8:f2:c2:0f:a2:37:d2:bc:
33:a9:8d:53:91:3a:55:4c:8f:83:87:b0:ce:3e:e3:
30:a4:15:4b:fc:bb:07:92:71:9d:8b:ce:18:d0:1a:
49:79:a2:83:78:7e:69:22:37:17:ae:8f:b8:34:38:
c1:2a:56:04:c5:92:5f:24:0a:85:0c:1a:f9:71:b3:
8e:8a:32:7a:dd:6b:7d:20:2e:00:be:40:6c:30:21:
a9:c9:6a:78:1b:90:76:e7:4a:d5:f6:2e:c0:a8:53:
bc:54:98:96:89:b9:08:9e:bc:a4:81:10:bf:db:f7:
55:3b:b0:48:c7:0e:d0:76:85:86:c2:28:2f:de:82:
a5:4e:1d:96:56:40:b3:04:c0:b9:40:18:8c:56:31:
67:a6:b3:be:a6:b8:0b:81:c6:54:54:68:f3:f9:c5:
d6:0e:76:27:f1:23:9b:e7:ea:d5:0f:3c:e2:0e:f6:
b4:55:da:e8:84:f0:d0:06:65:04:dd:3d:9c:cd:7d:
3d:6a:6e:f2:5f:86:a0:6c:fa:7b:ff:40:75:3a:57:
9d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5A:5C:B6:3F:8C:37:98:26:4B:0C:7C:91:E6:EC:FF:4C:3C:67:CC
X509v3 Authority Key Identifier:
keyid:F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:30:8b:3a:86:f1:f6:d1:47:96:91:85:8f:0a:2f:59:cb:c9:
0c:95:3e:5f:af:55:88:72:63:d2:e5:ea:24:a2:4b:b3:3c:ad:
f5:88:38:fd:00:f1:f7:e7:9f:d4:7d:8a:65:eb:55:f1:37:7c:
f8:8b:95:33:7e:15:70:b3:4d:e1:0f:e9:9e:e6:c7:00:45:00:
e7:b8:f2:6d:e0:c2:9c:f1:a9:eb:51:d3:e3:7e:8e:f5:8c:d0:
31:d6:7f:ca:a2:b7:74:e2:50:5c:ca:2b:90:59:32:43:1c:cf:
53:48:0a:c0:5b:e8:ca:e1:62:19:3b:fc:19:7e:52:fe:45:54:
00:a8:4a:b6:9c:40:e5:d3:b5:19:3b:01:0a:f8:af:84:fc:a7:
89:3d:07:15:5b:a1:bd:b2:37:b5:bf:3f:ee:a0:e9:26:35:9c:
62:fd:cf:e0:28:6a:90:ae:fb:05:18:c9:1b:3c:80:60:24:1f:
26:d8:3f:c5:53:54:e9:61:58:d9:f7:04:26:f1:72:7b:77:23:
2b:23:21:0b:5a:43:97:be:0a:48:b9:4d:5b:da:c8:33:d5:06:
3d:37:d1:27:f8:86:58:56:40:28:25:8b:26:a5:10:ac:c4:75:
a0:c1:8a:de:88:40:4a:cc:39:20:75:1b:5e:51:d1:0d:93:27:
c9:70:ea:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:40:35 2025 by rpki-client