Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
File: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft (raw, json)
Hash identifier: vvXIOC9E6Z2twywbDDTn77k855Pb7+y7AddzLyZ52kY=
Subject key identifier: 69:58:00:7B:DB:F8:1F:FE:9A:55:3E:94:10:B6:99:C5:20:F6:40:E5
Authority key identifier: F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
Certificate issuer: /CN=f4dcb5741e29352ddd42469270178506008a4140
Certificate serial: 0197C4CA2C955CB15818D32A3A82FB29BAB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
Manifest number: 0228
Signing time: Tue 01 Jul 2025 07:01:13 +0000
Manifest this update: Tue 01 Jul 2025 07:01:13 +0000
Manifest next update: Wed 02 Jul 2025 07:01:13 +0000
Files and hashes: 1: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl (hash: 3tK3362ielzIOEUf3BJagU0jrDqT+0XwF8V+k1HKPrA=)
2: T3T0ZkFQFPUc2BEd0op7sYAz8XA.roa (hash: WuXt/ChkvGDFgO8WDo1RKpja79/oAcXrCCkvEETR+EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:ca:2c:95:5c:b1:58:18:d3:2a:3a:82:fb:29:ba:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dcb5741e29352ddd42469270178506008a4140
Validity
Not Before: Jul 1 07:01:13 2025 GMT
Not After : Jul 2 07:01:13 2025 GMT
Subject: CN=6958007bdbf81ffe9a553e9410b699c520f640e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b8:11:64:82:4e:5e:4d:01:be:ed:98:d2:ae:
9a:d7:83:d7:80:df:ee:d8:70:27:52:9c:60:bc:dd:
f8:b2:71:a5:9d:da:8a:37:49:bc:e2:fe:85:23:ff:
e6:e4:18:bc:19:6d:d1:ca:9d:dd:cd:17:9f:0d:2a:
08:6f:da:3a:59:0e:5c:39:8f:e6:df:d0:c2:40:2c:
18:7c:32:52:cd:7e:ae:2a:a7:0c:f6:d1:bd:87:36:
d1:bd:60:6d:8a:29:d5:df:45:17:22:eb:c6:45:c5:
58:7f:5e:ce:86:5a:10:d3:6c:bb:e4:54:06:d9:65:
e6:1b:99:77:fd:78:6b:2a:c5:0b:3f:6d:39:2d:39:
56:c0:20:e5:46:ef:33:43:8e:aa:82:38:ef:4e:81:
04:86:92:4b:ed:6a:4d:f3:0c:74:95:3a:c4:d8:58:
44:58:84:d0:d6:25:6e:a0:cc:0d:61:9d:ef:9f:7b:
20:08:39:8e:58:72:25:c4:f3:e9:19:9a:d2:88:c8:
b7:cc:88:f1:08:a4:c5:56:f6:be:67:e7:49:32:6d:
cd:05:93:d7:b1:7d:f7:36:2c:9b:10:66:22:bd:7a:
84:78:21:83:ac:2e:a7:7c:bb:fd:d8:69:cd:76:e3:
d3:08:e2:48:3e:84:53:7a:06:a0:23:b1:9d:98:57:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:58:00:7B:DB:F8:1F:FE:9A:55:3E:94:10:B6:99:C5:20:F6:40:E5
X509v3 Authority Key Identifier:
keyid:F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3e:39:7a:35:f8:eb:c9:21:f8:88:19:7e:99:c2:9a:85:6a:
c8:a8:c2:f4:ed:16:07:de:24:49:35:0a:41:00:a2:6e:ad:0a:
e3:50:dd:10:ac:ba:45:b8:88:cd:b0:86:66:4f:9b:4e:01:35:
16:4e:51:5b:50:e8:c6:b1:b8:29:ed:10:07:9e:d3:65:a7:10:
0c:e4:a7:f3:c2:98:b6:fd:f8:6e:1e:a3:be:7d:25:a0:71:73:
8b:fc:e5:5a:b1:e1:9f:77:30:d6:f1:5d:d9:74:57:95:d3:e5:
af:59:73:1f:74:2b:66:ce:97:b7:a4:83:3c:65:0c:3f:46:ee:
5b:6b:f8:17:17:25:cf:e6:20:54:a1:2b:b2:05:3d:c9:c0:bd:
a3:63:77:a6:62:94:f8:06:83:5b:50:bf:31:5b:16:fc:39:ea:
ae:75:88:b7:33:a0:8b:3e:43:a4:2a:ec:1c:12:bd:95:00:c1:
58:41:a8:8d:17:db:e9:27:72:e1:25:d4:7e:32:1b:56:53:a2:
e4:d4:76:fd:f3:e1:02:51:66:18:c1:3c:6d:d2:62:b3:05:b8:
fe:0d:5f:25:47:4e:22:43:0f:79:15:7c:fb:00:4d:ab:1d:4a:
23:8b:45:32:de:1d:74:f3:58:03:5c:6d:96:8c:2e:1f:73:6d:
64:7e:d8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:15:50 2025 by rpki-client