Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier: 9fsyoGjEbd/hEO+4/Y/eSSwdCo2iem9mVyM1rpkLEf0=
Subject key identifier: D5:9D:8C:18:F6:CA:CE:35:61:8E:B0:3B:C2:C3:38:72:F2:09:3E:76
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 0197B6D78040447EFDB4ABDE75DC4693480F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number: 1545
Signing time: Sat 28 Jun 2025 14:01:05 +0000
Manifest this update: Sat 28 Jun 2025 14:01:05 +0000
Manifest next update: Sun 29 Jun 2025 14:01:05 +0000
Files and hashes: 1: 7Q18JYmAuxaMa6IHufbofG2Nif4.roa (hash: SgEEylWwu8UHfA3f6YmbRxIxeIe/WWwb7mO+pnXONBI=)
2: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: 8G2NZq4jIeQcTw1RnDZ4OTE84oAtjK5h77OJQvFfrSI=)
3: zzW0oiISqz8GtZ1LDC69YbNiON4.roa (hash: qDXsu9oGWoasH8gnG9BaDFXmdIAxeKxrhPwrD6gYHG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:80:40:44:7e:fd:b4:ab:de:75:dc:46:93:48:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Jun 28 14:01:05 2025 GMT
Not After : Jun 29 14:01:05 2025 GMT
Subject: CN=d59d8c18f6cace35618eb03bc2c33872f2093e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c4:59:4a:17:0c:04:e0:b1:d1:c6:41:0f:11:
a5:28:d1:c2:43:f3:d2:8a:9c:f4:c3:7b:76:11:c2:
00:22:1c:8c:ea:8a:51:5b:23:93:ae:0d:2b:a8:26:
d9:92:05:4c:6f:a4:f8:a7:37:24:6d:04:f3:28:45:
ee:18:90:1b:e9:a6:78:90:43:66:78:ca:aa:6d:7b:
0b:f0:6c:de:da:bf:2f:7f:fe:43:3c:a8:eb:4c:78:
f2:33:bf:ef:00:b8:9a:6f:e8:8a:1d:32:f1:a0:df:
d5:5c:0e:d6:e0:21:84:19:2a:c5:8e:8b:e5:cf:f6:
be:7d:d4:e8:98:a2:a3:66:99:97:0c:a9:63:39:ca:
f7:86:5e:60:22:a3:d7:29:25:33:87:6d:94:3a:f7:
35:3a:79:8f:9b:cd:62:3b:3f:89:93:0c:7a:9c:d2:
45:08:b6:68:ea:24:56:57:0b:70:51:78:c6:4b:0c:
da:f6:3c:d2:70:1c:f5:d8:ae:75:ab:50:1b:d9:5f:
1f:09:30:9c:89:d3:e9:a6:c1:c6:21:c2:5c:e9:7b:
91:90:55:71:37:ac:34:04:86:8a:21:39:e2:59:aa:
7a:ba:ab:04:f0:8f:0c:b3:bc:86:37:e2:98:41:22:
a8:2c:81:16:be:e0:04:6b:e8:4e:5b:ca:7e:6d:75:
5c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9D:8C:18:F6:CA:CE:35:61:8E:B0:3B:C2:C3:38:72:F2:09:3E:76
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1a:1e:92:c2:5a:1a:ad:3a:43:6d:33:2d:64:0c:a1:7a:3e:
b9:1a:68:63:63:06:8b:a7:64:38:e1:d2:5e:3a:a2:7a:50:a4:
7c:2d:e8:2c:41:62:8c:e4:27:6c:19:cd:ad:ee:f5:4c:e6:c0:
30:47:1c:0a:db:7d:63:e5:49:10:c2:09:a5:a1:00:64:17:88:
68:3e:3f:ff:b3:78:be:5d:33:f5:d1:2e:58:2c:5d:2f:a1:e9:
c3:78:ce:01:2d:4a:ce:8e:5c:05:79:99:d8:c8:8e:1c:89:87:
f1:c6:b4:16:b0:09:2a:cb:bd:a3:21:ab:7d:a5:3e:a8:32:89:
75:16:94:f3:c9:3c:57:e4:b8:04:93:24:3e:74:45:0f:25:1e:
a3:ef:e2:b4:f0:35:03:b5:4d:24:52:45:ff:71:0a:fa:6a:81:
3b:6c:56:5b:e6:61:2c:83:07:30:a6:7d:d8:f5:57:33:61:c2:
96:64:bb:be:7b:3e:a0:63:49:b6:de:fd:6c:c2:70:a6:3b:f0:
a9:e0:be:96:43:b8:bf:cd:8d:78:3c:11:fd:71:e8:86:83:0e:
f8:de:d3:ab:0a:f2:d0:d5:a5:6d:61:37:18:43:69:66:72:9a:
50:d5:c6:12:a2:c8:96:c7:d7:0e:5c:ef:28:e8:2c:50:07:73:
2b:21:43:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:15 2025 by rpki-client