Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
File: _im9i7SagJlrRg9QKO1SqOBXwLE.mft (raw, json)
Hash identifier: nEzatQBypWk8DIgpNnHCkyrSACENxUmiumtxbu99ogA=
Subject key identifier: 4E:90:80:69:2B:57:B7:C4:6F:2B:5A:7B:0F:FC:7F:77:8C:D9:29:EB
Authority key identifier: FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
Certificate issuer: /CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Certificate serial: 0197B6A10B94AA48A91F1F281D0787FA4710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
Manifest number: 136A
Signing time: Sat 28 Jun 2025 13:01:36 +0000
Manifest this update: Sat 28 Jun 2025 13:01:36 +0000
Manifest next update: Sun 29 Jun 2025 13:01:36 +0000
Files and hashes: 1: GKGUA1ULBuEBg6UZcKqTCkNmhrM.roa (hash: S+MOcu2hV7fbEQM0gv8ckh0dyXeXiOXULnIXULZ3i+k=)
2: _im9i7SagJlrRg9QKO1SqOBXwLE.crl (hash: VEiCnbrzYxAv60hJK8KxiYDFBFE0FKB0BE1QaH87nUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:0b:94:aa:48:a9:1f:1f:28:1d:07:87:fa:47:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Validity
Not Before: Jun 28 13:01:36 2025 GMT
Not After : Jun 29 13:01:36 2025 GMT
Subject: CN=4e9080692b57b7c46f2b5a7b0ffc7f778cd929eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b2:2b:27:4a:98:11:fa:65:1f:90:86:42:0b:
06:65:95:da:9b:f2:02:bf:d9:aa:b0:6a:c0:ae:af:
f7:05:d3:40:a2:36:fd:e9:4c:07:65:a8:d8:e7:12:
58:d7:8a:9a:2f:e2:c0:e0:b3:31:07:4a:b4:90:ed:
01:74:0c:75:3a:97:54:5d:8d:b4:44:66:a2:6d:db:
14:34:25:e0:5e:62:1e:58:4e:5f:0e:e1:99:2b:70:
39:2a:74:5a:00:d5:a4:49:15:6b:96:e6:32:cb:32:
49:0a:d5:42:d3:84:b6:2c:6b:54:18:2d:f0:e2:f2:
10:c1:a5:03:26:d4:d6:a7:e9:2d:b0:cb:3a:1f:b5:
ea:14:4d:f4:6a:05:49:2a:79:67:99:35:b3:62:77:
7b:ab:22:96:49:78:7a:fd:9a:63:57:ed:ab:01:87:
e9:bc:dd:ec:f8:12:f2:21:03:ff:b2:f0:36:6b:ef:
0f:21:56:93:8c:06:cd:7f:68:84:e3:9a:fc:cb:b2:
99:a8:86:e6:58:50:2b:ab:33:d2:1e:5d:2e:57:27:
ce:e6:b8:58:a0:e8:a5:dc:fa:f3:24:2f:f2:05:be:
44:7c:04:67:e5:de:4c:21:2c:61:48:03:40:37:79:
c4:ba:63:67:1a:bd:6b:95:a9:e3:93:d4:dc:49:d0:
76:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:90:80:69:2B:57:B7:C4:6F:2B:5A:7B:0F:FC:7F:77:8C:D9:29:EB
X509v3 Authority Key Identifier:
keyid:FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9b:dc:7a:3b:88:91:21:e1:a2:4f:8c:3b:2b:7e:dd:53:73:
10:e6:fd:3a:2b:b6:b3:ac:c5:11:41:64:ca:63:a7:e7:31:76:
69:77:35:03:06:b7:5b:b7:1f:7d:c6:22:fe:bf:9e:20:d0:b5:
66:b3:67:15:84:40:58:35:cd:68:a9:45:22:2f:33:01:d4:9f:
93:f2:f4:34:31:85:99:35:f6:5c:a8:4b:bc:e5:12:e4:3b:a8:
e4:d8:e7:81:98:1d:93:cf:c1:65:34:06:00:44:61:ba:be:41:
60:16:91:dc:a2:d3:60:15:18:13:7b:96:b8:73:8b:48:88:20:
db:d1:ad:9e:a1:92:7f:c6:af:b1:19:51:1e:1e:83:98:cd:53:
3b:22:c8:29:12:cf:20:8d:2a:70:92:84:3d:e9:57:32:ed:75:
b1:f6:af:9f:f5:ee:e5:ab:f0:0c:7d:14:75:25:c3:da:0f:8d:
d0:dc:ea:b8:de:fc:aa:35:04:49:c0:61:c2:c5:29:02:3f:f1:
78:37:92:31:0e:6f:43:27:82:6f:0d:01:35:3b:0a:47:9b:5a:
2f:05:4c:af:c7:93:8a:1f:bf:04:f7:6e:c0:1a:a3:c3:e2:e6:
0f:f8:56:5b:c5:73:43:39:91:90:94:6b:37:1b:3f:49:87:d5:
d6:87:19:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:54 2025 by rpki-client