Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
File: r9v0VgEKm9FJQcoskcpTPn71F4o.mft (raw, json)
Hash identifier: QdAALNlrC7u5krgS4ceI7Gi1+v6HPGNhLvX36QM0E8c=
Subject key identifier: E8:CC:07:DD:5A:AF:3D:EC:D9:6C:DF:A4:0C:A8:32:BA:E1:50:13:78
Authority key identifier: AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
Certificate issuer: /CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Certificate serial: 0197B6A1F31C40BBC2ABBEEBBA4928A2E8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
Manifest number: 0E8D
Signing time: Sat 28 Jun 2025 13:02:36 +0000
Manifest this update: Sat 28 Jun 2025 13:02:36 +0000
Manifest next update: Sun 29 Jun 2025 13:02:36 +0000
Files and hashes: 1: ajkzuEH8FnXzD6y9WqgTkvcAyWQ.roa (hash: ezeCzHTBFnMMCDhX8NkCA6ybD9xQfKuL+xUd+x4C3b4=)
2: r9v0VgEKm9FJQcoskcpTPn71F4o.crl (hash: X108S7N/xM3fnaBQkSrruntN7vU0nBGfeCP6R7sPhnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f3:1c:40:bb:c2:ab:be:eb:ba:49:28:a2:e8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Validity
Not Before: Jun 28 13:02:36 2025 GMT
Not After : Jun 29 13:02:36 2025 GMT
Subject: CN=e8cc07dd5aaf3decd96cdfa40ca832bae1501378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:72:04:04:ee:fd:06:66:ad:5b:a8:be:98:
b9:19:e3:41:77:b7:25:ff:1f:61:25:1a:84:e2:99:
49:d7:12:cf:21:86:a0:68:f6:20:e4:1b:0d:26:d4:
57:bc:49:fb:4d:48:a0:ec:f2:31:e8:49:a0:05:60:
39:38:eb:54:55:79:77:d8:e1:12:ea:ec:3a:a5:53:
2f:fb:8b:df:70:45:d2:1d:b7:29:66:72:8b:4c:ea:
3b:f0:b5:08:cf:7e:48:2f:79:8a:f6:45:08:23:11:
fb:6f:06:e0:6b:a9:b8:3f:73:22:f4:17:b6:04:a5:
19:cb:61:63:d7:68:4e:23:d4:88:35:d6:fc:ec:17:
6a:8c:08:20:b6:54:0b:40:26:33:2e:2d:4e:4f:10:
d8:b5:23:c1:a6:44:02:69:34:71:13:05:32:88:7b:
0c:8d:83:e2:12:ae:56:93:08:1c:34:cb:47:d8:ef:
1f:ae:15:54:08:94:19:9f:27:dc:c5:bc:58:38:8c:
a4:7e:ea:09:9d:72:82:d0:5a:16:d4:8e:f6:0c:4e:
3a:41:f5:8d:28:5c:3f:13:92:30:2a:1c:af:94:e8:
0b:47:48:b2:c8:c9:18:c9:6b:c2:29:03:26:23:3e:
8d:8c:e8:01:0e:56:8a:c1:a9:77:6f:e7:0b:c7:49:
6c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CC:07:DD:5A:AF:3D:EC:D9:6C:DF:A4:0C:A8:32:BA:E1:50:13:78
X509v3 Authority Key Identifier:
keyid:AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1d:ee:f5:a6:43:27:74:e2:a6:cf:60:ff:fa:84:c7:c6:dc:
61:40:27:a7:83:b6:93:ec:43:0b:65:c3:65:e6:1a:bf:2c:f0:
0a:52:86:a3:ef:59:22:74:82:e2:4e:ff:db:18:30:42:fa:d4:
5f:5e:e5:ba:e6:1e:ba:eb:fd:64:a0:a5:dd:d5:66:d9:cf:79:
dd:16:1a:e9:77:fd:38:f9:16:af:de:31:62:1d:7e:2f:7a:f6:
a3:26:1f:2d:b0:2d:de:99:6b:c1:82:32:bf:f5:4f:cf:14:1a:
c8:e5:18:55:f6:b3:84:88:9f:38:75:96:3b:e7:76:5a:e2:85:
d4:70:d8:08:56:3e:ab:51:9c:01:59:5e:22:5c:41:be:fb:f8:
86:38:53:a7:66:54:71:7b:69:e1:b2:1f:40:74:e5:8e:51:b3:
d3:1e:63:8a:95:9d:3b:58:77:80:89:ab:1f:33:d4:bf:c4:52:
62:44:af:1c:26:32:12:da:c8:54:e7:78:dc:03:23:6e:dc:3c:
e6:5e:0a:b5:32:88:cc:b7:00:f4:0e:c9:67:93:13:6b:54:ef:
10:96:7d:33:e7:45:0a:74:c8:42:36:bb:50:1c:58:31:fe:6e:
92:ba:6a:fa:77:33:1b:f0:96:69:71:01:89:0f:9e:2c:7d:b1:
51:4e:1a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:24:09 2025 by rpki-client