
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
File: _a9B0EvGh9D_mK19QHaEdRxGyj4.mft (raw, json)
Hash identifier: y+t951gNVWtkJi8ZNgjPpOiacivNIK7NPjJvcUe2kuA=
Subject key identifier: 9C:4F:68:39:99:46:22:8F:CA:CA:71:40:26:71:0F:30:AC:13:69:68
Authority key identifier: FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E
Certificate issuer: /CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
Certificate serial: 0197B9D8C3A00D9F043E5D76949CF1D93F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
Manifest number: 4B
Signing time: Sun 29 Jun 2025 04:01:20 +0000
Manifest this update: Sun 29 Jun 2025 04:01:20 +0000
Manifest next update: Mon 30 Jun 2025 04:01:20 +0000
Files and hashes: 1: KAVL6kTny8TDOYbmZPaPDwl2wXM.roa (hash: aJfitKEgdn0yPAeBVox/YEVRIDod3KCN4Iqb7ST2CSs=)
2: _a9B0EvGh9D_mK19QHaEdRxGyj4.crl (hash: MDOXbqLgtVu78mhe8IZ9AxYEmBOeJZTyRQHOq9OUNhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:c3:a0:0d:9f:04:3e:5d:76:94:9c:f1:d9:3f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
Validity
Not Before: Jun 29 04:01:20 2025 GMT
Not After : Jun 30 04:01:20 2025 GMT
Subject: CN=9c4f68399946228fcaca714026710f30ac136968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f7:87:33:ea:a0:bf:2a:42:9b:61:90:d5:e9:
ce:6b:a5:81:cb:98:d7:b6:8d:5a:99:a6:93:f1:28:
54:9e:f6:49:b3:a5:94:6a:56:3e:87:19:4f:34:ea:
3f:2c:a7:24:f8:b3:2f:2e:43:4e:ab:9c:e2:1a:37:
cb:72:79:27:d4:48:ad:b6:7a:93:a7:3a:6f:df:f5:
77:d4:4e:df:79:6b:19:e9:6d:0b:60:f7:f7:46:ec:
00:ec:20:f3:82:ff:a1:e6:45:3c:67:a8:ed:1c:0b:
8b:f0:0c:d8:48:56:d9:d1:e7:9b:d6:8e:bd:3c:50:
db:04:c5:ee:39:25:fa:04:ba:f2:2b:a9:dc:5b:0a:
38:f8:cb:a5:5a:96:fc:9f:3e:79:b9:62:de:d4:01:
c8:fe:fa:3d:fe:46:0d:07:d1:78:15:72:d1:2f:bd:
16:6f:46:a7:16:a3:fa:ae:8f:e5:a0:50:d0:9b:b7:
c3:34:7f:70:d4:a7:25:5e:03:05:42:6d:2b:d7:83:
78:51:07:88:d9:7e:28:ca:a4:a6:57:de:57:91:51:
ec:bf:5c:d6:41:39:2a:d8:6b:b0:3e:fd:a5:5c:cc:
ff:a3:96:14:fa:ca:1a:0f:6c:47:b2:78:b6:7e:01:
7f:80:da:b2:f9:4d:a6:c5:44:4d:3c:c1:d7:8d:23:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4F:68:39:99:46:22:8F:CA:CA:71:40:26:71:0F:30:AC:13:69:68
X509v3 Authority Key Identifier:
keyid:FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:bc:2e:37:71:d0:ce:30:66:93:e6:eb:c0:38:bf:2f:be:ff:
6c:b1:35:75:65:35:ac:76:26:88:db:5e:e9:3a:16:0b:e8:8f:
af:6d:ad:f0:93:6b:55:83:17:11:15:49:e2:cf:b5:9b:c9:23:
68:4e:1b:41:8f:99:97:ad:be:2d:1d:fb:52:51:9e:3f:2e:08:
28:7a:13:07:ff:2a:74:1b:2d:ab:7f:0c:94:84:c4:25:c6:9d:
85:be:5d:fd:3a:a1:2b:35:4c:85:df:77:55:a8:6a:46:ac:0a:
b9:26:bb:8e:f5:3d:37:3f:f0:45:ac:b5:d7:90:88:ff:a5:69:
81:77:d5:61:5f:83:a8:26:d6:06:8f:8b:e6:30:ea:9c:ee:59:
e9:58:ed:b8:c3:e7:b1:dd:fa:b7:b5:fc:ae:d6:a1:ba:5d:56:
9a:21:61:cb:c3:a9:4c:b4:6a:46:3f:53:69:1a:30:87:32:27:
00:1d:1f:a2:bb:9f:1e:a4:c7:e5:e3:10:2a:4a:72:c7:fd:f5:
5c:12:14:7a:46:9d:37:62:27:1d:38:92:cd:2b:70:de:5b:a5:
71:3e:55:37:f8:2c:8c:f7:69:6b:26:53:ef:c2:f2:93:a8:04:
9b:cd:54:76:95:f1:ee:ee:38:82:e2:c8:ec:54:f4:13:65:cc:
db:4f:8b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:56:31 2025 by rpki-client