Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
File: 9Is_DGqHwEW9z_q9kA24iSvnAuE.mft (raw, json)
Hash identifier: bxstWYEdspv1QeY9yOrUcnamotdTVAZ/Uyrkwu8PUvI=
Subject key identifier: F9:A0:2C:84:30:7C:94:E4:50:8B:72:6E:22:CE:ED:8E:1F:DA:15:37
Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
Certificate issuer: /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Certificate serial: 0197B7B3817FC31F3FEB7E6CE38F9E83DE27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 18:01:23 +0000
Manifest this update: Sat 28 Jun 2025 18:01:23 +0000
Manifest next update: Sun 29 Jun 2025 18:01:23 +0000
Files and hashes: 1: 9Is_DGqHwEW9z_q9kA24iSvnAuE.crl (hash: 0W6yTVeCx7br1PWnxT1raE0s/GlxuO1HGPAOfWd9/YU=)
2: Hg9ZafaXQ8rLTSt-HMnDH0lT2yU.roa (hash: 0HTHXkqvlWJxm74CgwKZLUkDjsOUoGNMgHyD7nKaILk=)
3: dUq-3e7AXs3N0NZXA1WRrQbzyIw.roa (hash: 6zZ3aXPzck3AwBDGQRuh+epBnP8VFiXbdP1xY7RBv1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:81:7f:c3:1f:3f:eb:7e:6c:e3:8f:9e:83:de:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Validity
Not Before: Jun 28 18:01:23 2025 GMT
Not After : Jun 29 18:01:23 2025 GMT
Subject: CN=f9a02c84307c94e4508b726e22ceed8e1fda1537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:39:d4:31:7c:89:5c:60:06:54:64:59:5b:68:
93:05:c1:5a:4d:c1:c3:55:e6:84:df:9a:ff:f3:5e:
56:c8:a1:7f:41:2b:4a:eb:ca:95:f1:15:1e:a6:f0:
cf:64:2a:42:00:53:45:81:e7:f9:d1:aa:ac:d4:03:
8c:f5:f3:18:57:f4:96:72:68:b3:2b:1c:a5:6b:24:
a3:27:eb:88:91:15:49:98:77:d7:a7:36:87:c0:c7:
5d:f5:da:93:68:c4:b6:3f:d3:f9:8c:26:48:36:b7:
9d:23:66:d2:09:a3:ff:75:16:b2:b7:3f:18:7f:72:
a1:2a:a3:6c:c5:9b:42:c1:84:4a:9f:d8:a3:c5:e8:
e9:5b:3a:df:06:eb:fc:fd:d9:ab:b5:06:6a:12:74:
3c:6a:49:2c:2c:49:5e:94:39:c2:54:d8:81:6e:f5:
fe:ec:ac:2c:bc:2d:93:02:43:99:2b:c5:ff:0a:5a:
f2:58:c4:52:81:59:46:c7:36:e8:ca:ca:06:5d:9c:
35:1f:84:e4:0e:e4:f4:8d:d3:a5:29:46:1d:31:4b:
57:ad:8b:53:4f:02:bf:ee:3e:bc:48:64:cc:f0:7e:
c7:1b:10:4e:71:ac:2c:a4:07:55:72:4f:92:21:7a:
f1:81:20:97:26:6d:70:7d:21:b8:58:92:a8:59:bf:
96:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A0:2C:84:30:7C:94:E4:50:8B:72:6E:22:CE:ED:8E:1F:DA:15:37
X509v3 Authority Key Identifier:
keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3c:69:59:87:9e:72:24:96:31:49:2b:fb:81:80:bd:80:15:
c5:23:3b:42:01:ed:aa:92:37:76:80:09:0b:ce:ab:4c:9c:23:
0f:be:0e:15:06:f6:af:16:78:7b:8a:ed:ca:1d:bb:94:47:29:
66:f7:8c:35:a4:a7:34:2f:dd:fa:c1:5d:73:07:df:89:82:08:
ab:16:92:dd:f5:9a:46:32:27:ab:30:ac:97:57:4c:47:d8:a2:
5f:55:e2:9e:d7:90:9e:2f:d7:db:19:a3:74:dc:a5:d0:7c:9d:
8a:ab:fc:97:19:fe:98:eb:41:58:60:7d:86:45:79:1c:30:9c:
02:b4:8f:ac:c4:c6:22:55:51:7a:3e:5f:bd:24:3e:42:57:a6:
f9:41:83:8c:84:f9:42:d6:f4:7a:22:1e:c5:8b:ec:d7:80:3e:
ee:cc:75:cc:b4:82:44:b9:61:74:8f:00:88:53:e5:c9:86:ad:
67:da:29:fe:a8:57:99:3f:b9:db:a9:99:ac:a4:84:c6:bd:e7:
2c:88:29:61:a9:49:5b:6b:d1:0b:99:c3:01:59:fc:7e:7f:4e:
37:2a:4f:b3:23:5b:d2:76:fa:f5:76:17:6c:29:9f:56:37:68:
b6:2c:5c:91:24:a8:e3:2e:7b:72:02:e5:52:5f:0f:75:fb:72:
2b:99:29:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:04 2025 by rpki-client