Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier: xC6RMVlqf0B0gYFkh+x65Z71q4F3mubctWGV9k6R/q8=
Subject key identifier: 6A:71:96:34:33:19:F3:E5:15:0D:F1:5A:A4:AC:40:F5:28:30:D8:81
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer: /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial: 0197D2F3E6E408A6B1345DBA9B2A29AA6264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number: 05A8
Signing time: Fri 04 Jul 2025 01:01:29 +0000
Manifest this update: Fri 04 Jul 2025 01:01:29 +0000
Manifest next update: Sat 05 Jul 2025 01:01:29 +0000
Files and hashes: 1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: njdvGdIag/ylXfiX+w3teamFrfhyRYvLSEx7lxVuwKY=)
2: iKhGCzGlkdUH-YeR40es_shy-iQ.roa (hash: UctZx1wGvAAr9xLOczqP8p1as4JR/y4gz7WSAX7sYrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:f3:e6:e4:08:a6:b1:34:5d:ba:9b:2a:29:aa:62:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
Validity
Not Before: Jul 4 01:01:29 2025 GMT
Not After : Jul 5 01:01:29 2025 GMT
Subject: CN=6a7196343319f3e5150df15aa4ac40f52830d881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:c4:cf:6b:b3:08:1c:34:ba:21:b5:72:b8:
35:20:3d:6e:6a:ed:da:bd:e9:89:c0:91:7c:4b:c1:
1d:da:d9:16:9c:4b:b7:e3:e4:0c:a9:93:4d:8b:ac:
ad:02:2f:e8:4d:49:ff:3b:0f:20:77:97:13:7c:a1:
99:f0:af:69:aa:2b:85:e7:12:15:fe:a2:e8:99:2f:
1d:a2:af:c6:ce:6a:6e:5f:16:75:12:b2:ec:7f:08:
73:b1:c5:24:08:a9:a7:ad:76:94:38:48:77:d7:a5:
11:77:3a:31:6b:94:23:f6:8f:3b:c4:2b:76:c7:f8:
e5:2c:22:ad:fa:2c:42:e1:bf:5d:b3:0e:87:46:d7:
8d:e2:e1:40:78:da:df:6f:10:fc:53:66:01:4e:6a:
46:5e:e3:2f:9c:8b:86:8e:e0:44:a9:36:58:03:87:
24:e2:18:29:4c:80:96:5f:19:1a:6d:df:b9:7a:eb:
74:4e:25:0e:32:4a:52:8d:ac:9c:44:24:17:a3:35:
ef:16:c3:1d:af:7f:c3:73:8a:86:a4:2b:c0:e1:f8:
9c:aa:42:15:e8:44:44:c4:0d:32:79:11:95:ed:4d:
cb:83:a1:1d:f1:d8:86:c2:95:e6:59:3c:5d:45:03:
2c:49:8d:66:77:0a:cb:bd:23:53:8e:d2:4e:af:24:
46:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:71:96:34:33:19:F3:E5:15:0D:F1:5A:A4:AC:40:F5:28:30:D8:81
X509v3 Authority Key Identifier:
keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:08:21:28:93:2d:22:b1:f1:8a:a2:1b:17:37:2c:91:16:2f:
f9:90:ee:c0:96:e7:af:50:4e:eb:cd:c0:87:8e:e1:1e:ce:c6:
cc:6a:43:06:6d:d4:1e:be:9c:03:a0:30:c5:83:64:36:b5:67:
4e:88:e9:f6:da:9e:6b:cb:9f:46:9f:0c:da:a5:3b:76:9f:b0:
58:27:72:c3:d5:a0:78:d0:c2:0d:b5:6a:92:2f:6b:98:30:30:
92:bf:8c:56:00:74:81:bf:5e:ea:06:b8:5a:e8:79:63:50:74:
f0:a5:27:fd:ae:b3:89:16:48:18:94:6f:1b:fd:04:ce:f8:cb:
cf:3c:4e:d5:1d:d9:69:e6:73:4a:07:fe:e8:cd:74:f8:c7:2c:
cf:e7:b9:9c:f8:1e:75:59:c1:d0:66:32:dd:62:7f:9d:f0:45:
92:56:f2:67:d4:42:6f:f5:94:9f:a1:ec:e3:c9:0d:d5:e0:18:
b6:cb:73:6a:ee:4c:3c:4a:30:c3:49:4d:24:66:e3:48:da:0c:
bc:35:07:e6:ff:c1:d1:3c:40:e9:94:c8:d1:df:11:32:20:32:
e3:99:a3:30:a5:de:49:00:3d:8e:5d:b6:fd:ff:2c:fc:02:b3:
30:a3:75:57:d2:72:82:2a:02:af:85:6d:dd:a5:bd:a3:e7:4f:
15:d1:ff:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:38:44 2025 by rpki-client