Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
File: 9-VkfNC39yK-1FafN7i_j5JTjPU.mft (raw, json)
Hash identifier: tif8TmhTxOjDRpTelHtivlxjnQb1bjCLFI57ozFTsqs=
Subject key identifier: C1:93:DE:88:EC:0D:8C:67:80:D4:37:98:3A:50:CE:64:3A:CF:5C:C9
Authority key identifier: F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
Certificate issuer: /CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Certificate serial: 0197B77CD010EBD1333CA5E50FA5916A85FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
Manifest number: 11D7
Signing time: Sat 28 Jun 2025 17:01:39 +0000
Manifest this update: Sat 28 Jun 2025 17:01:39 +0000
Manifest next update: Sun 29 Jun 2025 17:01:39 +0000
Files and hashes: 1: 9-VkfNC39yK-1FafN7i_j5JTjPU.crl (hash: h0zZGrINVU0iROFoDcXvH3KEJTM9cyntFzRT/XSwn+c=)
2: DBhdVQnWbQeKdQzgQiCpHErXzhE.roa (hash: ke+PE6qJEQ9z2GmlNhQtn8qkPU8ewvFXiEh0aYxuqOo=)
3: q1OrwBnOgNGg_tS0zZoAzPBHw1c.roa (hash: aaFqVy4+hGHKy39rpTWrEUIWgkLIuK6ZgSAREjkESF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d0:10:eb:d1:33:3c:a5:e5:0f:a5:91:6a:85:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Validity
Not Before: Jun 28 17:01:39 2025 GMT
Not After : Jun 29 17:01:39 2025 GMT
Subject: CN=c193de88ec0d8c6780d437983a50ce643acf5cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d7:71:bc:9d:85:e6:c2:b8:df:86:43:30:34:
9b:59:2b:12:58:2c:e8:97:ec:b9:d0:91:3d:60:80:
29:ca:1b:05:0f:50:14:c8:f6:89:f2:5b:bf:07:fb:
cc:04:58:71:79:32:88:b2:27:b2:dc:1f:7f:5b:e0:
a0:a7:02:41:89:06:25:5c:bc:ae:ec:eb:7b:25:0a:
be:2d:64:69:cb:a6:75:c2:51:a7:d3:00:75:b6:46:
9e:1a:fe:d1:a6:9c:8b:1f:9a:ef:c4:85:3a:6d:9c:
67:cd:79:66:75:bb:89:3e:96:b2:ef:7f:0b:af:29:
12:59:a1:9f:be:eb:64:b5:1c:5e:2c:a8:2e:41:b1:
6d:68:7e:b5:74:e9:89:f0:02:3a:09:2c:86:b4:93:
71:5d:88:3e:9a:8c:e9:97:e0:19:88:8d:07:3a:ca:
58:d7:77:80:ae:58:b3:5c:eb:c3:95:22:ea:86:d2:
5b:a2:cd:f0:3a:01:d2:63:84:e6:10:96:5b:f2:e9:
07:cb:93:b2:e8:5a:c9:b2:23:ea:53:e9:11:78:9c:
fe:9d:3e:29:e8:e2:a1:66:8a:ed:fd:1e:ef:26:1b:
82:7f:0d:dd:3c:e5:bf:84:dc:ec:d8:54:f1:d6:54:
96:5a:38:08:ab:8a:90:19:1a:17:2c:75:b6:28:24:
32:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:93:DE:88:EC:0D:8C:67:80:D4:37:98:3A:50:CE:64:3A:CF:5C:C9
X509v3 Authority Key Identifier:
keyid:F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:50:0c:05:e0:75:79:d8:7c:ac:e7:c1:e3:80:91:9b:f7:dd:
99:da:7b:12:70:17:c6:e1:6c:40:ab:09:ae:a1:d4:b8:6e:91:
6b:45:8c:5c:c2:69:c5:bf:43:75:fc:e0:b1:69:45:f5:af:97:
a8:89:9c:14:df:3c:a0:80:8a:b9:20:e8:8a:1d:05:05:45:b0:
25:8d:52:93:43:96:3a:ee:6a:0f:ca:74:66:dc:1e:c3:42:b4:
50:a9:95:bb:0d:09:e7:87:88:f4:9f:7b:cd:b7:a9:4e:be:16:
8b:8e:e6:2b:0f:11:85:79:4f:a6:29:b8:66:ef:11:49:5d:c7:
63:ab:40:f1:c5:14:a1:73:3c:5c:1e:2d:48:e9:ce:d0:13:73:
c4:2d:e9:ee:23:a0:e3:66:a2:0c:b8:54:69:66:55:b2:e0:5b:
1f:6c:9f:b5:17:c6:4b:d5:ff:f4:09:6e:5e:89:8d:d5:c9:7f:
a6:eb:db:8c:cf:f1:0e:69:08:1d:f4:64:5a:37:cd:fc:14:d8:
0c:67:ae:d0:11:65:2a:db:89:f9:fb:79:9e:f1:3e:fd:34:20:
fd:42:6a:4c:c2:42:7d:f0:62:f9:6b:5b:67:e7:ef:21:c6:fa:
87:2e:5d:8e:ea:62:42:be:9e:71:a5:42:9e:07:7f:f2:1d:bf:
63:e0:77:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:41:29 2025 by rpki-client