Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
File: S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json)
Hash identifier: ULC7On7OJ12DTdGmO0AAKAhjqvaNOSI8/6eS4qTGRzM=
Subject key identifier: 88:28:8E:D4:2A:FB:3C:D1:1A:EE:16:33:53:D8:13:BF:35:2A:59:3E
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial: 0197B745BFDF266D6C16EA66E7E31608C48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
Manifest number: 06F6
Signing time: Sat 28 Jun 2025 16:01:31 +0000
Manifest this update: Sat 28 Jun 2025 16:01:31 +0000
Manifest next update: Sun 29 Jun 2025 16:01:31 +0000
Files and hashes: 1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: EqQq/LNm1cQfInon3TzX5xnjtt4FvbxjyApE9aQi7/A=)
2: uNPxSzoBaXvBOJFQn-2SS8eLdrE.roa (hash: aQ7mvpV3ivI5FkoVAB6sSeBflcpGk3YWeApRgwYyH1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:bf:df:26:6d:6c:16:ea:66:e7:e3:16:08:c4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Validity
Not Before: Jun 28 16:01:31 2025 GMT
Not After : Jun 29 16:01:31 2025 GMT
Subject: CN=88288ed42afb3cd11aee163353d813bf352a593e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:88:3e:89:c3:c4:95:a8:ef:5d:07:45:23:cb:
3a:c5:f6:38:48:a4:23:77:a1:63:93:df:6b:ba:f5:
bb:87:6e:49:35:69:13:b3:e4:21:6d:f1:99:9d:4e:
51:b0:b1:c0:7d:9a:06:56:9e:93:6a:de:8f:81:96:
8b:f9:8e:07:9f:c6:76:5d:03:5d:dc:f1:ce:2f:76:
11:77:7b:1f:3e:6d:99:3e:bb:b6:a4:0f:88:07:d9:
d1:73:ab:75:f9:fa:94:14:e0:d7:ec:4f:3f:56:26:
8f:6b:ae:62:f6:72:f4:6e:34:44:be:97:38:e1:90:
2e:d8:ff:d0:11:92:d8:62:8a:fc:3a:45:4d:b1:c7:
9f:08:2a:92:a5:b9:bc:8c:ba:62:76:94:5f:c1:da:
33:c3:26:f5:06:f6:b3:48:28:f2:3d:1e:c1:a0:d8:
aa:0e:2c:27:1b:9b:86:1a:95:88:ec:3e:28:fc:d9:
08:64:0f:fa:b9:63:27:78:fa:83:13:03:1e:97:17:
a1:04:5a:2f:0e:67:e3:d7:57:52:1e:06:82:2e:37:
74:e7:fc:84:a2:f8:ed:c4:e5:c2:7a:f4:84:ac:ad:
3b:e0:64:73:a7:41:26:c2:6a:de:aa:20:37:5e:9f:
fa:72:c4:ce:85:bc:1a:92:ef:b0:ed:18:4c:2b:ee:
be:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:28:8E:D4:2A:FB:3C:D1:1A:EE:16:33:53:D8:13:BF:35:2A:59:3E
X509v3 Authority Key Identifier:
keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b8:f5:45:df:f0:6d:89:55:a0:30:1f:bc:28:57:20:12:8b:
59:4e:4c:d9:63:05:8e:6e:04:70:e3:02:e5:4a:ee:e1:03:d5:
4d:8f:f6:6e:9c:8a:c1:a1:4a:5c:68:58:93:64:25:d7:41:f9:
69:9a:6d:cd:93:dc:93:8d:07:d9:a6:25:52:e8:d7:2c:04:e9:
cc:40:09:f3:0a:b3:e9:99:cc:3a:58:ff:25:7a:5b:73:ba:b0:
1b:0d:74:a7:02:f2:ae:fb:5f:3d:48:26:88:7d:47:e7:f7:d1:
7b:59:80:a4:ff:8f:3b:66:87:6d:ca:42:f4:5b:5d:de:7b:43:
62:d8:a1:e6:76:35:ce:bc:87:2c:89:cd:f4:14:d1:df:b6:57:
7d:4c:b1:0d:b2:f6:6a:a9:ea:2b:d2:b5:18:1b:3a:44:17:a1:
e8:d8:96:f4:60:3b:5c:18:8d:8d:9a:2f:0a:8d:84:53:70:06:
fd:7a:de:e8:93:42:32:55:e3:b9:b4:0b:32:ce:24:9b:68:22:
95:ee:42:24:a2:9c:60:b2:9d:c8:be:8a:64:bc:a3:1f:05:20:
27:8f:84:a2:23:ae:10:d7:6b:cd:74:fa:55:77:bf:83:39:ad:
1f:57:4f:21:ed:0e:bf:bf:00:b2:93:d8:65:00:ca:90:67:1c:
a0:2e:bb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:48 2025 by rpki-client