Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json)
Hash identifier: kF2OQX3pSL71HZ4J5bgY1j4UsOBbgTKq/ibqRca7Vac=
Subject key identifier: B1:54:BC:E0:B1:D2:67:73:28:1B:29:41:EA:A0:E0:74:5E:2F:72:74
Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Certificate serial: 0197B74547CC95EAD7B602D8E23EC99595B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
Manifest number: 0910
Signing time: Sat 28 Jun 2025 16:01:00 +0000
Manifest this update: Sat 28 Jun 2025 16:01:00 +0000
Manifest next update: Sun 29 Jun 2025 16:01:00 +0000
Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: eNn8ZF7Dc3wFMQLUUt57rtTs5AKP9nlAOOoYGX4uMBE=)
2: mhXII1TmoI3urvchZmrd238HnqI.roa (hash: ymkQlbzHXOVaEGzGKdRpU2whYkKkdIgkhGPuabVJPyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:47:cc:95:ea:d7:b6:02:d8:e2:3e:c9:95:95:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Validity
Not Before: Jun 28 16:01:00 2025 GMT
Not After : Jun 29 16:01:00 2025 GMT
Subject: CN=b154bce0b1d26773281b2941eaa0e0745e2f7274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:10:89:32:f1:f1:66:7b:ee:6c:10:35:46:
0a:f6:8e:d0:b8:02:74:9b:0d:d6:35:cd:08:2c:90:
40:84:2a:bc:23:ac:30:05:e8:c7:b4:58:04:11:fe:
44:1f:04:15:3c:d3:d9:07:9b:7d:b2:ef:c9:00:d5:
31:ed:60:56:46:9b:f4:02:89:29:62:71:df:b3:6b:
87:95:9a:15:bb:9d:fc:cd:92:91:9d:28:bd:22:06:
0c:21:ae:3b:7a:02:1b:2b:44:fc:6b:ba:37:64:96:
4b:5a:05:b9:1c:54:c3:c3:e9:0d:3a:86:2f:d4:26:
30:fe:f0:4e:fc:28:ca:30:36:3d:4e:df:58:78:77:
58:fd:10:03:b4:ed:a3:54:bd:69:f7:a2:e9:bc:01:
73:ee:a3:aa:c5:db:42:02:38:3d:35:f8:7a:d6:9d:
4c:83:42:38:97:2a:d0:2d:5b:ee:4c:53:86:e2:c7:
1d:2c:db:06:94:bf:e3:40:bb:9c:2a:59:73:c2:e0:
a9:fd:47:3c:43:71:e0:52:4c:6d:04:e8:bf:49:98:
00:cb:76:2f:0a:95:57:df:cc:7e:99:79:25:c6:b1:
63:f5:d4:fe:b3:d9:c6:ba:16:ff:00:55:b7:ca:28:
e7:b9:28:3a:24:12:d8:ad:a2:b0:88:00:1c:26:bf:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:54:BC:E0:B1:D2:67:73:28:1B:29:41:EA:A0:E0:74:5E:2F:72:74
X509v3 Authority Key Identifier:
keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9a:42:6e:f7:f3:8e:f1:69:4b:ea:9b:44:6a:e5:85:01:6b:
44:cd:68:06:41:64:d9:f7:fd:28:e3:66:f7:c4:0c:a6:ca:ca:
a0:30:13:00:83:1f:60:15:7a:04:fb:46:ea:af:26:ec:68:d8:
15:64:0a:51:12:08:a9:c7:b0:fb:75:88:7e:2e:76:98:68:77:
c4:6f:78:13:3d:cf:dc:2a:5e:29:3b:66:16:45:fe:1b:9f:53:
29:60:a4:a4:40:ef:fe:67:e6:47:e7:10:df:36:1a:92:eb:78:
e9:18:63:8a:9f:0a:e6:ff:57:20:93:50:dd:40:58:69:20:f2:
ba:fb:15:6e:34:5b:24:11:96:8f:92:51:4f:8d:61:31:4c:cc:
ac:99:09:23:ca:ce:40:ff:e7:7c:d9:4d:98:8e:99:c5:2b:b1:
54:c2:b8:ed:c4:91:05:bd:7e:cd:ab:44:44:bd:11:ab:bd:72:
b1:d6:84:c0:8b:8d:6b:f1:ed:80:40:b6:f8:b9:35:17:e4:a7:
63:be:bb:7a:c3:22:7e:85:5c:29:11:c0:2f:f0:12:13:d1:5f:
6b:19:53:83:8c:49:7d:3c:f6:e3:59:39:93:45:55:ad:d8:5f:
55:2e:6e:8f:8a:c4:2d:a3:7c:1b:b9:4a:3e:20:c0:4b:ea:5f:
3d:ff:bd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:49 2025 by rpki-client