Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
File: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft (raw, json)
Hash identifier: u7qgwq0qOdr2ztQKOZGtMbAjkWnaKedibH3+Vn4Vg/Q=
Subject key identifier: 08:12:07:84:93:57:AF:89:E1:2C:FD:98:D4:05:79:06:23:85:0D:31
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Certificate issuer: /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial: 0197B6D74700F569DC9AF50BDA98E8153686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
Manifest number: 0AD1
Signing time: Sat 28 Jun 2025 14:00:51 +0000
Manifest this update: Sat 28 Jun 2025 14:00:51 +0000
Manifest next update: Sun 29 Jun 2025 14:00:51 +0000
Files and hashes: 1: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl (hash: PhgsHfmHRC/iRVG1oO339MFD2aZ9UOaMlWpD5jP8jn0=)
2: cQb4a56386hwKkX2XTV23EzTpVI.roa (hash: T6mT7SHm8VLGp8LXtDhfbm2F1razovLuYTeTLKEqGFE=)
3: gQRYgjDqN747YcFSZ_0L7G8Y0Qw.roa (hash: knELgWCfA/Sf8Z/AQKl4MF48MxHULiqnBptb464jAhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:47:00:f5:69:dc:9a:f5:0b:da:98:e8:15:36:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Validity
Not Before: Jun 28 14:00:51 2025 GMT
Not After : Jun 29 14:00:51 2025 GMT
Subject: CN=081207849357af89e12cfd98d405790623850d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:35:24:e2:36:5c:ca:90:74:8e:a4:44:92:
61:45:fc:dc:b4:40:91:f2:c6:10:9c:07:d4:58:e6:
ec:2c:ef:8d:48:15:4c:bf:8f:71:01:26:9c:66:68:
97:81:3a:c6:89:02:dd:13:92:b4:1f:2b:ca:eb:5b:
0e:4e:9b:5d:2b:63:12:23:ed:1a:84:24:ec:b9:3f:
da:78:35:32:bc:c9:d5:63:59:4f:98:65:6a:01:f3:
4e:51:fc:38:a5:d2:24:db:ac:f0:88:ee:f5:42:56:
39:71:25:8e:7a:f6:6c:3d:0a:21:11:50:d2:40:f1:
ff:b7:a0:3b:21:bf:c4:0b:3d:ef:44:70:d2:bc:5e:
56:85:de:cc:0d:86:c4:89:4f:f4:52:49:75:7b:bf:
61:5c:6f:3e:e0:e1:c8:b0:13:fa:a8:ee:20:b1:a4:
07:ea:cf:77:d8:12:a1:07:94:08:10:23:fe:25:ba:
29:a6:59:8d:fb:0d:06:57:3c:27:07:68:a1:8a:48:
55:c6:05:23:41:8b:c8:21:4d:5e:85:fe:af:45:27:
f9:a9:04:ad:74:bd:0b:74:71:ef:51:08:82:04:22:
97:09:0c:82:e2:cf:40:10:9c:dd:b5:24:57:ba:ce:
f2:52:af:de:50:67:fd:6f:7b:05:95:3b:82:90:d4:
99:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:12:07:84:93:57:AF:89:E1:2C:FD:98:D4:05:79:06:23:85:0D:31
X509v3 Authority Key Identifier:
keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:73:b8:ca:ac:3d:fd:02:de:c7:79:54:04:94:5d:34:1f:40:
46:c9:42:98:97:13:43:6c:2b:2f:ca:74:b9:27:00:55:f7:85:
c7:81:bf:95:63:6e:72:0b:d7:f3:94:99:cc:a6:42:2a:13:2e:
8f:36:19:76:c0:a4:ae:84:16:fb:6f:8a:53:1c:50:95:cf:70:
c2:6a:b4:bf:2b:f9:24:1a:10:1a:6d:eb:23:2c:cf:ab:a2:8e:
d7:68:6f:fb:5d:0d:7e:81:4d:f6:12:2b:e0:75:69:e2:c0:c9:
90:27:b9:64:86:49:9a:a7:97:89:4f:d2:7a:8f:71:91:c5:8f:
fe:21:47:99:45:e5:83:6a:92:98:6f:ae:52:be:eb:00:5e:62:
73:47:7c:97:f5:9e:fd:ec:0f:8c:38:47:dd:ef:42:dd:b9:37:
54:6f:b8:13:3f:7d:1a:65:7a:34:73:a5:a9:fa:1e:b5:a4:34:
9d:72:7e:69:6b:54:f9:01:15:5f:66:ff:d2:ab:cf:7f:be:b9:
34:0c:97:25:2c:35:60:2f:16:41:75:ae:f9:62:35:f6:54:e1:
62:b9:58:b0:af:eb:95:20:5f:17:1f:85:94:e1:9c:70:95:89:
4d:5c:a7:0b:20:80:d7:89:0f:d5:46:cc:46:4e:f0:ac:f4:a6:
b8:c0:78:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:39 2025 by rpki-client