Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
File: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft (raw, json)
Hash identifier: ALiQCskjQt40MNRbYMlGWeEiDsw1ma+QwsStERI7gUs=
Subject key identifier: 66:F4:89:D4:14:6A:EA:07:CD:BC:13:6A:0A:4F:A9:A8:CB:B7:36:91
Authority key identifier: F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
Certificate issuer: /CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Certificate serial: 0197B6A0EA23DA11C9B60C99984FD74B42A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
Manifest number: 0421
Signing time: Sat 28 Jun 2025 13:01:28 +0000
Manifest this update: Sat 28 Jun 2025 13:01:28 +0000
Manifest next update: Sun 29 Jun 2025 13:01:28 +0000
Files and hashes: 1: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl (hash: jGG6g6Ps/cvRSNB/9Rvk7/keDtwiTD5A91gj1rMBmZ0=)
2: pcJxxqpyhZF6JL4G4VK7HBS4yYA.roa (hash: PZShrCQ10JtHGLNXwnmCPSpnucUc5Ex85jH4ClAc2jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ea:23:da:11:c9:b6:0c:99:98:4f:d7:4b:42:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Validity
Not Before: Jun 28 13:01:28 2025 GMT
Not After : Jun 29 13:01:28 2025 GMT
Subject: CN=66f489d4146aea07cdbc136a0a4fa9a8cbb73691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f4:c7:3b:25:ea:2d:38:b2:12:bc:75:87:ed:
b1:cb:77:e6:9f:34:04:d2:d7:f1:e2:67:0c:d0:eb:
93:12:1e:41:0e:82:fe:8d:92:84:52:27:64:10:59:
9f:9a:7f:6f:be:97:79:d5:58:c4:8a:b9:9f:e0:ae:
91:9f:d0:1e:c9:7f:ac:7f:67:ff:f2:1d:ca:b5:6e:
be:8d:ea:df:93:33:be:a4:d8:b6:27:20:04:ca:06:
45:05:da:02:a2:d1:f2:67:5c:1d:be:7d:08:c7:04:
42:29:96:fd:15:c9:ea:5c:6d:fd:a5:80:3b:64:d2:
6e:26:70:3c:d9:7d:6d:c3:10:6e:1a:b6:80:85:a0:
3d:5e:28:57:e2:8a:16:0f:ca:32:8e:6e:f4:5e:ae:
d4:21:fa:be:d3:e1:5a:c6:0c:a7:6b:84:c9:b5:38:
16:c7:2f:a0:c2:3c:da:0a:4f:6a:82:b4:08:65:1e:
62:5a:fb:7b:4c:99:49:99:53:4e:ed:79:6f:a6:70:
08:65:e1:dc:28:93:bb:56:c5:3c:7c:8d:bb:b6:9b:
01:49:fe:9b:be:69:bd:70:69:9d:ab:fb:e2:22:87:
45:76:82:9e:05:84:5a:2e:55:bc:4c:f2:a7:a8:bb:
e6:9c:d8:9a:9c:60:53:53:2a:7a:c8:f3:94:60:e1:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F4:89:D4:14:6A:EA:07:CD:BC:13:6A:0A:4F:A9:A8:CB:B7:36:91
X509v3 Authority Key Identifier:
keyid:F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f6:a4:9c:f8:8f:fd:14:63:7e:ee:ed:ea:92:4a:96:68:d3:
7c:fc:35:d3:0b:23:c7:dd:75:df:10:f3:6d:eb:92:91:20:a1:
08:f8:9e:62:ce:4d:01:a1:4f:8f:0b:4f:bc:c6:b9:7d:1c:7a:
b5:3b:0f:ff:ef:81:36:d3:29:5e:3a:f5:a2:31:a6:cb:66:73:
f6:54:00:ca:54:6d:33:e6:a6:37:49:58:fe:d2:71:30:76:c0:
7e:26:8a:e9:3e:f4:1b:dd:67:af:d3:dc:dd:a1:5c:fa:e5:74:
a1:7c:e5:05:c5:0c:7e:c9:06:0e:5d:05:8f:82:e1:39:55:00:
19:93:b9:62:91:fa:e2:4c:e4:98:87:4b:80:c9:28:1c:ab:cb:
dc:b1:15:7b:c6:dc:b6:a7:24:41:e0:ad:a4:84:99:4f:dd:3c:
05:9c:02:91:61:46:48:04:bd:15:18:59:d9:5f:21:32:88:6b:
d4:6a:d4:ee:d4:5a:6d:b0:3e:53:9b:c4:1e:05:ed:0f:54:89:
88:b1:8a:30:20:f5:d3:9f:ef:c1:6c:18:b3:c1:f5:c0:d2:14:
32:a7:58:04:39:68:d9:ee:a7:4d:4c:b8:7b:74:ab:00:ff:26:
76:df:c6:c3:1d:11:a1:97:f9:84:f8:e9:c8:4c:6d:6b:d6:e9:
c8:4f:36:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:10:30 2025 by rpki-client