Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
File: 9q7W1c5BV5fBKF9-9v0EPGRm594.mft (raw, json)
Hash identifier: isYPCK06hKcqeJB9N96jVCXT6DEZyiuWYUIG5OxmB4c=
Subject key identifier: 19:CF:DF:51:94:F6:F6:24:48:8B:61:F7:15:64:99:DD:E3:8D:C1:E7
Authority key identifier: F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
Certificate issuer: /CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Certificate serial: 0197B88EEFBA370AEEB525C18F30D9C92EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
Manifest number: 0AAA
Signing time: Sat 28 Jun 2025 22:01:04 +0000
Manifest this update: Sat 28 Jun 2025 22:01:04 +0000
Manifest next update: Sun 29 Jun 2025 22:01:04 +0000
Files and hashes: 1: 9q7W1c5BV5fBKF9-9v0EPGRm594.crl (hash: x41AtLqfMRq611RhlYI/gpbtymQ44yNiVW+6/7JYF50=)
2: ziQt4Au1b87EcX3IQE4F3MWkDm8.roa (hash: KUoOZI3FZormf07wPCHQ5jctubRO3hNmnfHFtLKB4fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:ef:ba:37:0a:ee:b5:25:c1:8f:30:d9:c9:2e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Validity
Not Before: Jun 28 22:01:04 2025 GMT
Not After : Jun 29 22:01:04 2025 GMT
Subject: CN=19cfdf5194f6f624488b61f7156499dde38dc1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:e9:ce:53:f4:b5:9e:c3:ab:82:c0:37:c4:
79:5b:2c:4c:07:b5:36:b8:22:7c:a8:9e:ca:5f:3f:
5e:0e:ab:8c:cd:85:30:90:87:a7:34:01:9e:b1:c6:
b4:ab:6f:d1:42:7b:0f:05:45:fc:1d:41:92:3d:b2:
ed:1e:e4:42:20:28:56:0c:25:38:ba:0b:44:dd:2b:
fb:8d:9f:c1:6d:05:e4:3a:04:90:7c:af:e7:da:bb:
51:a2:0c:bb:60:4b:5e:79:71:79:33:a2:88:fa:b0:
65:96:91:35:01:10:3a:5f:da:97:91:84:c7:91:d8:
27:86:8b:ad:bf:93:70:84:dc:2e:ed:b7:33:9f:d9:
c8:dc:3a:af:c2:42:99:f3:19:dd:d5:72:97:56:21:
dc:85:ed:6a:c6:fe:ca:a7:f2:7b:9b:ca:72:e9:72:
20:99:0a:8b:0a:d1:51:d8:37:30:ac:f9:d8:3c:78:
6e:8a:04:bd:38:19:50:d5:37:3e:af:cb:2c:cf:7d:
0c:02:fb:5d:a5:c9:26:7b:11:93:79:c5:e8:6c:df:
c8:6a:4a:4f:b7:e8:0a:5b:c7:41:4c:d7:5f:02:17:
b9:ad:50:83:09:0e:7d:77:c2:0c:19:c4:bc:cc:d8:
13:a7:35:31:09:9b:36:4f:89:30:0a:f3:df:6f:3d:
4f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CF:DF:51:94:F6:F6:24:48:8B:61:F7:15:64:99:DD:E3:8D:C1:E7
X509v3 Authority Key Identifier:
keyid:F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3b:a5:e3:ae:12:f3:3e:cf:9b:4d:44:9b:25:03:6e:3d:4b:
d3:db:99:d5:d0:09:16:b8:1c:ea:4a:7e:67:08:01:73:04:de:
3b:93:b8:98:67:36:1c:bc:25:74:d2:6c:8e:39:2d:88:37:33:
4e:fb:aa:08:dc:50:e3:cf:fe:66:9f:32:88:77:2b:01:27:c0:
5d:89:3d:7d:e1:73:f2:7d:af:84:17:f6:74:4a:fc:66:7b:66:
fd:ed:38:c6:f0:c2:b6:2c:10:3b:fa:4d:1f:9b:a7:d1:dd:5f:
bb:7a:cd:8a:f5:3f:14:20:b9:32:fa:f4:dd:18:44:89:3d:4b:
57:8e:52:63:80:07:b4:e5:df:38:ce:68:cf:1f:5e:82:84:59:
7d:31:81:74:68:74:5f:60:7f:34:5e:21:2d:44:ba:d8:1a:ef:
4d:cc:ce:21:9d:3e:17:ca:53:96:a5:34:6b:15:76:43:64:4f:
0e:75:3c:33:37:09:75:ab:b3:7f:a0:c5:c3:c6:30:40:b2:e2:
6a:42:ae:35:54:fd:68:18:b0:e7:44:d1:22:a4:79:ad:18:b8:
7d:f8:dd:b4:b6:58:10:ff:c9:5b:04:70:ba:7f:33:8d:1f:2a:
ec:3c:18:18:db:85:f3:cf:fc:57:21:d3:f1:a6:e8:f4:89:68:
d8:a9:e6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:41:10 2025 by rpki-client