Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: 5vXsgWrCm9VzPUIpqTcdk8/liOXnSAavSJs3ZmFIwSg=
Subject key identifier: 8F:6F:C3:17:A1:41:BC:A9:12:D4:3C:BD:1C:28:AC:F1:F6:8E:F2:26
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 0197B70F27810A91D9EC499A41F7B71D0BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 091E
Signing time: Sat 28 Jun 2025 15:01:53 +0000
Manifest this update: Sat 28 Jun 2025 15:01:53 +0000
Manifest next update: Sun 29 Jun 2025 15:01:53 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: wSIHWoUKWyE9IQgaFi8VSLL6t79ZAOLCxvmKUk6M6EY=)
2: vnQYA6POl1a8tK2ZzQU1CNh2rSU.roa (hash: cwo0eDB9nxSSyKe/qdMpdoKv9t3e96TKN+bq+LM4mpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:27:81:0a:91:d9:ec:49:9a:41:f7:b7:1d:0b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: Jun 28 15:01:53 2025 GMT
Not After : Jun 29 15:01:53 2025 GMT
Subject: CN=8f6fc317a141bca912d43cbd1c28acf1f68ef226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4c:7e:a3:9e:74:5a:e2:5e:e4:a5:13:7a:6e:
5c:03:a8:62:df:59:58:35:32:33:9d:32:d0:f2:25:
d4:ab:61:1f:32:f2:6f:12:d7:fb:9b:6e:9e:49:76:
56:9b:c9:0b:a5:55:35:96:7b:34:af:30:93:59:9f:
87:27:34:48:ba:2e:00:b1:12:b5:6b:42:dc:28:2b:
a2:51:3c:e9:6e:dd:75:69:c8:be:64:b3:38:58:d3:
c4:ff:2d:ab:84:c7:5e:34:3e:10:02:2f:f7:71:b8:
4b:c1:4a:72:6d:66:df:e5:a5:04:66:dc:5c:ce:5a:
e5:b1:3d:f4:f5:15:1f:da:69:c8:0c:93:dd:6d:1c:
4f:a8:ce:25:7b:78:1b:6c:b4:05:19:2c:cd:64:17:
92:94:f5:67:66:5e:ef:bc:8b:db:3b:c9:9c:24:b5:
e8:c1:2e:98:01:a4:ff:62:b2:4e:da:72:a8:c1:33:
f5:86:d4:c3:9f:b5:dc:03:f2:36:4e:b8:56:fd:18:
3d:ab:7d:22:dc:d1:44:fb:23:04:f2:0b:12:1a:ed:
cc:ec:cc:d6:d3:d6:a2:b5:47:20:c7:e0:9d:a6:55:
4a:1d:e0:94:e3:62:92:40:4c:5f:2c:db:8f:cf:9d:
b8:9e:12:ae:66:1b:48:7f:eb:a9:76:62:1e:1f:05:
0a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6F:C3:17:A1:41:BC:A9:12:D4:3C:BD:1C:28:AC:F1:F6:8E:F2:26
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ae:d0:ab:96:5e:9e:3a:45:8a:f8:85:38:51:f6:c4:3e:1b:
4a:ce:8c:5b:5d:99:b1:f0:43:0d:e2:de:5c:1d:52:1b:21:26:
4d:d9:db:e0:52:ff:d4:35:15:03:3f:a9:66:d9:9e:28:c4:53:
4c:ec:0d:ef:8b:f0:3c:50:f6:53:0d:d1:2e:8e:24:c5:b8:34:
4c:27:74:90:b1:03:9f:5d:b6:ca:ba:4b:f0:6d:bb:4a:1a:8b:
69:7c:e1:48:a7:6e:19:39:3f:f6:3c:82:d7:81:e6:10:99:f1:
e7:5d:0d:1b:8d:ab:da:12:65:a4:c8:09:69:c2:b1:e0:56:b8:
fb:9c:d0:22:d1:30:22:46:f4:14:77:2a:7d:da:2b:52:b0:1c:
83:89:53:c1:0b:95:99:d0:72:25:b2:6f:22:5b:28:99:2a:68:
1c:58:9a:d9:0b:28:ac:24:54:42:ed:17:56:94:ff:9b:32:b9:
52:a7:68:15:02:92:47:e6:ce:fe:cd:9f:46:3e:8c:70:f0:95:
38:26:c7:4b:4b:bf:df:02:73:99:b8:aa:18:26:9b:06:bd:bd:
0a:80:c6:2e:f1:34:94:34:0e:82:e7:fb:48:2f:9f:f2:88:b7:
78:b5:ba:69:0f:58:ae:f8:11:9d:a6:a6:1c:be:7f:8a:57:5f:
ca:ae:07:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:49 2025 by rpki-client