Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
File: 9LndnjT-ZtdROJA3CPjOH700LWQ.mft (raw, json)
Hash identifier: LWurhPo2tWCI9zVSI3mQDiNLmNpZg3d5dbxdCwVEtHY=
Subject key identifier: C5:49:C2:FA:FA:9D:70:D0:89:16:C8:13:27:71:75:9A:55:6D:8C:9B
Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Certificate serial: 0197CBDF02F43A2112D59CD285D35EF3C157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
Manifest number: 15C3
Signing time: Wed 02 Jul 2025 16:01:19 +0000
Manifest this update: Wed 02 Jul 2025 16:01:19 +0000
Manifest next update: Thu 03 Jul 2025 16:01:19 +0000
Files and hashes: 1: 9KjqbMoowr4zIwC0vIDCLJx3OPk.roa (hash: P/sEcAl8BwOGFXxtB8+HWMsFUjWpgx7ANde/4kLha4c=)
2: 9LndnjT-ZtdROJA3CPjOH700LWQ.crl (hash: P3dHQiYB7Eynfiey7uuFKsr6TAqocLD4iIo4ZjEHEjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:df:02:f4:3a:21:12:d5:9c:d2:85:d3:5e:f3:c1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Validity
Not Before: Jul 2 16:01:19 2025 GMT
Not After : Jul 3 16:01:19 2025 GMT
Subject: CN=c549c2fafa9d70d08916c8132771759a556d8c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:d0:3a:a1:85:ef:f2:03:f2:33:dc:10:aa:
e2:34:e9:cb:06:8b:bf:53:45:4a:33:e8:01:99:b7:
80:79:69:59:8d:ca:80:bd:82:09:33:fe:37:9a:45:
9b:7c:a6:92:32:10:6b:b3:74:07:15:bc:12:91:61:
a1:41:9b:c4:ab:a4:04:d2:89:4e:ee:47:9d:6e:86:
a9:b3:b1:23:58:5d:d9:ed:5a:c3:74:2b:77:43:a7:
5b:c8:a8:6c:15:b3:51:d5:c4:f6:b4:bb:25:d8:85:
04:b2:d4:c3:c7:40:ca:06:c9:1a:0b:0d:b8:d5:17:
9e:02:2a:d0:4d:03:27:f3:71:b5:a3:e1:23:5f:32:
21:7e:e9:cd:2b:95:e7:bf:53:42:90:9e:b2:2d:19:
74:3b:76:9f:0b:d5:25:37:87:da:37:3e:50:bc:5f:
3b:bb:39:aa:aa:f0:54:10:d7:72:96:84:aa:f3:a8:
f2:64:bd:b2:f7:df:2d:fc:1d:e2:48:ec:e3:4c:c2:
aa:88:a2:6c:c7:2e:7a:a4:92:5f:a9:a2:02:a4:2b:
45:1e:af:dc:48:75:26:ca:36:b1:77:b7:81:bf:7e:
c8:c8:92:75:08:9c:40:c6:c5:3d:40:61:e7:5b:28:
61:a0:82:cb:05:01:45:c2:43:a4:bc:ab:15:6a:f2:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:49:C2:FA:FA:9D:70:D0:89:16:C8:13:27:71:75:9A:55:6D:8C:9B
X509v3 Authority Key Identifier:
keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:70:d6:dd:65:8b:93:99:8a:ea:55:23:56:b0:b3:5e:cf:54:
3d:af:88:cf:4b:ce:fb:ce:27:e8:2d:35:78:2f:f0:ca:bd:c8:
5b:25:c9:a7:2d:3c:97:c7:73:5d:e1:d6:dc:27:2e:12:42:dd:
10:fe:b2:64:05:4b:80:22:09:a7:5a:1f:61:41:4d:14:0f:3f:
28:db:c9:81:af:a6:bb:a0:6b:8f:e2:a5:f7:d0:8c:f9:fd:81:
5f:c7:54:67:36:a1:c9:d2:d7:8e:57:67:df:68:d1:60:5e:de:
e4:82:85:36:ff:bd:7b:70:52:be:bd:7c:8a:af:19:6b:e8:2d:
53:80:8d:97:e1:72:1f:7c:07:7c:9e:97:7f:56:2f:31:82:d7:
13:94:69:5d:cd:33:36:76:5e:e3:61:01:6d:6d:61:8b:09:92:
1c:d7:38:89:05:7b:94:91:a5:2d:2a:35:ec:0d:2e:88:17:84:
66:cc:13:3a:38:f9:dd:a6:f0:66:a3:01:a5:42:0c:54:49:45:
0d:4f:a5:13:3c:c6:08:9c:f3:af:c6:5c:af:43:2e:2e:ae:0e:
fa:3f:db:de:08:94:4b:4b:ff:4b:af:86:b0:69:ad:24:cc:5c:
8f:61:88:b0:9c:5a:8e:f4:dc:e6:fc:40:88:bc:03:44:31:7c:
54:aa:5b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:10:23 2025 by rpki-client