Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
File: 9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft (raw, json)
Hash identifier: ITTGJi7uF345bdsk0xqNmF06W0g6ts4QXKvq2gKvkAg=
Subject key identifier: DB:3F:83:35:96:22:EC:62:E3:CA:B3:10:F6:4A:67:DA:59:C6:01:9D
Authority key identifier: F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
Certificate issuer: /CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Certificate serial: 0197C56E9DFB54786D54BB70CDCB6FDA09BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 10:00:50 +0000
Manifest this update: Tue 01 Jul 2025 10:00:50 +0000
Manifest next update: Wed 02 Jul 2025 10:00:50 +0000
Files and hashes: 1: 9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl (hash: BjbIbauwSkvRX3VDtXVmIIT8fNeqfIQT+YG4YrqPTLY=)
2: LlgzLPbqvndzjINwUyqBSYNVUGU.roa (hash: XoxwnbkJ+YTYL7TqUKVjhOHoVLZf5ofK0CZEjvcyK/8=)
3: PGS1oZw9diLKm80xvba4ttY7lOY.roa (hash: cvoGOrBt83PsBex3WYE3oC8O/LqiWSgJX37kVGMXEQ8=)
4: a9e6waB73R-2gGYR6nbP9rwuh8I.roa (hash: 1oI2gE9eJeYPxxdSHWs9WVzpaBQMrNDfnP1js7RW/p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6e:9d:fb:54:78:6d:54:bb:70:cd:cb:6f:da:09:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Validity
Not Before: Jul 1 10:00:50 2025 GMT
Not After : Jul 2 10:00:50 2025 GMT
Subject: CN=db3f83359622ec62e3cab310f64a67da59c6019d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:a3:99:71:15:5a:56:60:47:d3:c0:d8:c1:
ef:6e:d5:f4:1d:76:16:52:41:22:6b:78:4a:b4:45:
4a:5e:25:68:4e:51:82:3c:9d:29:a1:52:65:0b:39:
27:37:e2:23:dd:07:8b:aa:51:83:36:01:74:00:ff:
e0:1e:6c:eb:81:76:07:13:05:67:68:9d:da:0c:55:
cd:70:26:95:31:eb:95:98:d2:2b:8c:2d:65:01:71:
80:56:dd:04:92:a2:37:6d:0f:ba:ff:7a:ec:23:4b:
34:1a:e5:95:bd:5b:ee:58:2e:cf:78:28:3b:6b:72:
2d:42:cd:be:78:d3:5e:a6:27:58:ef:da:a6:5b:bc:
c5:c7:65:f1:c3:60:8c:fc:bf:b7:ae:25:33:00:0a:
4e:60:bc:87:8e:36:3b:b0:4a:25:84:10:f6:24:92:
06:0b:e9:8c:e5:eb:3a:10:8b:31:36:10:fc:ea:8b:
60:60:df:2c:72:34:11:ed:df:58:70:11:f4:21:a5:
4a:4c:9f:c9:5c:bd:a5:38:45:6c:28:c1:d6:ea:75:
22:f5:8e:8e:38:bf:a2:c3:04:ba:1e:f3:ff:82:1b:
96:18:f8:72:a2:62:75:cc:9a:94:ad:ff:e8:77:f9:
7b:20:b6:32:5e:e2:53:15:6d:8c:e4:ee:99:c1:ca:
29:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3F:83:35:96:22:EC:62:E3:CA:B3:10:F6:4A:67:DA:59:C6:01:9D
X509v3 Authority Key Identifier:
keyid:F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:16:45:d7:e8:f7:6e:38:54:53:15:cf:0a:a0:85:cb:e7:b1:
13:19:67:4c:d1:85:4a:ad:94:f0:2f:ad:b0:bc:de:95:8a:0e:
5a:9f:57:0e:cb:29:06:b1:80:7a:ec:1c:13:7e:66:95:a5:cf:
58:7a:0f:ff:78:49:1f:b2:1c:7c:7d:1e:1f:4f:a2:0a:6f:c6:
e2:ab:08:20:53:19:6f:84:db:1b:bb:a4:ca:b5:81:9e:cf:f8:
fa:60:80:fc:38:8e:43:44:dd:97:2f:17:7d:ba:89:a9:35:54:
01:c6:aa:b4:2f:79:39:43:66:1b:9b:0e:7b:a2:60:b1:4f:4d:
cb:b1:61:d2:43:7a:b5:98:fd:1a:89:1e:8d:dc:42:a4:cf:37:
51:40:6a:6b:b5:46:76:89:8e:b7:93:13:6c:fd:36:85:21:c1:
cf:a5:a9:94:42:24:cb:f2:0b:6f:12:8c:85:49:a7:da:7d:c2:
d6:42:fa:74:28:72:36:5a:1a:b5:12:12:9f:97:fc:87:f1:c9:
f0:dc:be:4c:20:29:41:f3:1a:b5:90:1d:36:d6:5e:10:c2:b8:
28:ef:99:38:d5:de:83:99:6a:25:b6:18:29:da:90:51:34:70:
95:e8:4f:d5:df:cf:13:6c:33:76:b0:6f:78:cb:e3:4f:08:2f:
38:6f:61:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:11:42 2025 by rpki-client