Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
File: 9KWwQv5I7rEjvlbb-ejdogweoR0.mft (raw, json)
Hash identifier: y4PKZa6Sqdbc2DO9Fn7714u4mwPEoUgaxlHEO6SiQFs=
Subject key identifier: 52:A0:3A:41:84:F8:BC:8F:EA:C4:A9:7E:91:23:4E:C0:F3:5B:6C:0A
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial: 0197B7EA10D9885D66F870ABF8B001A21D46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 19:00:59 +0000
Manifest this update: Sat 28 Jun 2025 19:00:59 +0000
Manifest next update: Sun 29 Jun 2025 19:00:59 +0000
Files and hashes: 1: 9KWwQv5I7rEjvlbb-ejdogweoR0.crl (hash: Ms9DBXAvAOkPaRXoVivULTML8X8f8/JU2tXDJoVZCoU=)
2: BKaKCrIWJLW3Q862BmZ-Z-FQI78.roa (hash: zGv7kfCx9AyBiy/Vt4g16r88DKiDMl7S2RsrkRbPYxA=)
3: U6yxYsRAOLx1rVOUMfl1bHjQTqE.roa (hash: p5afCkYVQi7asNinB13X4z3pkTkHpo8/a9b5lnTy5To=)
4: hlFLNTPKu_nVGF692xwIYmZW2GU.roa (hash: c5Q2Sew+Iis+NOcJWfVvfa4Ocr0QgEd2RYjfl4HhWNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:10:d9:88:5d:66:f8:70:ab:f8:b0:01:a2:1d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Validity
Not Before: Jun 28 19:00:59 2025 GMT
Not After : Jun 29 19:00:59 2025 GMT
Subject: CN=52a03a4184f8bc8feac4a97e91234ec0f35b6c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:b0:ee:2b:dd:41:a4:9f:93:ce:1f:f6:78:
8e:4e:43:9a:16:92:77:64:b5:e5:e5:f9:ee:55:3a:
62:14:5b:5f:00:ed:8b:4b:47:56:4b:79:82:ce:cd:
7a:da:88:a3:c2:a6:37:1c:53:db:49:65:75:92:e8:
52:02:50:7f:d6:eb:49:e2:e1:f3:58:e5:f7:72:23:
a7:43:1f:d7:96:f1:e2:05:d0:db:d7:51:90:a3:c2:
6b:92:71:59:8f:b1:88:66:93:36:60:3d:51:09:25:
3d:a4:58:1d:6c:5a:11:67:d3:a1:e3:03:d0:d6:b2:
56:6d:8e:8b:0d:5c:ee:4e:70:65:31:a2:df:9f:2a:
56:eb:34:19:ec:40:6d:01:1d:99:66:5f:cb:01:85:
f0:89:5a:bd:7b:1b:a0:0e:7a:db:dc:82:4d:9e:ef:
1b:6c:97:22:06:25:c5:8f:7c:0a:67:2d:5a:73:a0:
b3:d5:e4:ef:7c:17:1a:04:35:80:8e:4e:9d:d1:2f:
f8:1d:aa:77:b0:21:cd:a5:ec:40:a2:20:bb:bb:8a:
b0:b7:6f:89:52:00:b9:70:03:68:45:db:b8:f8:98:
08:45:58:4a:29:b7:2b:27:86:ad:e3:05:0c:26:b0:
0e:a9:ac:a9:b2:3c:d0:c0:28:8c:80:1c:8f:c2:6a:
c0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A0:3A:41:84:F8:BC:8F:EA:C4:A9:7E:91:23:4E:C0:F3:5B:6C:0A
X509v3 Authority Key Identifier:
keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:86:95:a6:fd:7f:11:98:28:1c:3b:a6:a9:8d:78:e2:fb:38:
c1:46:32:47:d6:fa:8d:5d:f5:1b:b0:fd:75:48:55:ac:fb:a6:
00:88:be:2b:70:8f:ca:86:71:55:1d:c2:10:05:2d:87:74:2e:
df:99:a1:e8:d2:41:50:7b:1f:07:fa:32:28:97:75:b1:c6:8d:
7a:51:1d:5b:55:38:34:fe:59:87:79:c4:c9:ee:e1:b6:95:c1:
c9:24:25:cf:45:27:6c:33:25:fc:2b:e2:e0:48:86:d6:58:84:
1d:57:20:a9:4e:65:6d:71:23:b2:13:fd:31:b7:d5:c0:7c:12:
9d:3e:06:1a:dc:99:f9:9f:1b:1b:f8:8a:93:70:d7:01:32:fe:
96:f7:9e:0a:94:bb:14:41:87:74:73:72:81:0c:fc:e3:5f:c1:
47:22:0a:12:df:72:25:07:4e:38:68:89:8d:1d:b7:3c:c9:dc:
37:ed:9d:c8:96:c5:73:02:92:16:ed:c6:c3:64:26:17:18:2d:
fc:6e:bf:e5:96:57:b0:e4:80:3b:af:26:0d:71:a9:dc:60:eb:
77:a1:97:66:5e:8a:d8:d3:ff:c3:5a:a1:1d:d5:e8:37:bc:82:
02:72:20:d7:5f:be:38:34:fb:7e:48:42:5d:2c:41:1d:cb:37:
c2:62:ae:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:43 2025 by rpki-client