Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier: hXjtD6F1U4zpc4i7XvN7EyoLQPvOgm99OtEBjgyRitw=
Subject key identifier: 9D:7F:2C:F2:B0:86:48:5D:C0:2D:6F:16:30:B2:FF:69:D2:F1:65:46
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial: 0197C1247A1B371B1B351628E36AC145E5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number: 0C9F
Signing time: Mon 30 Jun 2025 14:01:22 +0000
Manifest this update: Mon 30 Jun 2025 14:01:22 +0000
Manifest next update: Tue 01 Jul 2025 14:01:22 +0000
Files and hashes: 1: 1QST1OPlWGgU_KfeCd6-eSc5Fws.roa (hash: 0IX3SPWo/YRidApWFZTcBmj27iQz+V20vqeZhxHtpTk=)
2: UOcYa9_wijcIRHEowaEFsvhzcW4.roa (hash: tUwVIAhXZ1HVd/+8k4HpFkWguLhngA3Bv+h1B/N8dK4=)
3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: g6Uer11zPq810VLy7byCGaO5SD5kJwzj6QOA/ER47+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:24:7a:1b:37:1b:1b:35:16:28:e3:6a:c1:45:e5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Validity
Not Before: Jun 30 14:01:22 2025 GMT
Not After : Jul 1 14:01:22 2025 GMT
Subject: CN=9d7f2cf2b086485dc02d6f1630b2ff69d2f16546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4f:4c:99:cf:70:75:66:f5:e3:7d:ba:bd:90:
79:fc:db:8e:ad:02:8e:a0:7c:e8:a3:56:c0:ff:3c:
32:64:0b:48:ed:8c:80:b4:65:b6:33:c0:68:06:8b:
49:2f:41:10:3c:8c:4e:63:55:09:46:33:e3:fb:ef:
2b:cf:5f:f3:3f:a6:10:23:db:11:73:89:5b:72:64:
80:bb:c9:4c:f0:a8:37:9d:b4:14:bf:c7:25:63:8e:
ea:38:37:17:2e:7a:e1:50:7e:53:28:9c:53:56:89:
84:ac:59:ed:80:a2:13:1c:31:23:29:63:ca:cb:32:
55:4e:f2:64:c9:4d:ca:08:2f:54:ff:82:74:65:0f:
a0:28:e3:d7:3e:61:e6:33:bd:6e:93:da:15:fb:db:
18:39:6c:5f:d3:90:8c:27:59:67:81:cb:5e:f6:4b:
18:3d:db:f5:60:2b:95:de:6c:04:9b:ee:4d:5c:1f:
65:08:a4:3f:ec:6f:dc:ce:b9:92:5c:ee:be:42:5c:
66:54:11:0f:d8:30:ba:49:f5:d3:71:5b:42:e5:80:
cd:d3:b3:2b:44:93:15:3f:08:67:1e:98:3a:45:51:
b1:27:0f:43:4b:44:49:06:45:21:98:3b:9f:7f:04:
7f:1b:e7:41:46:c3:ba:ca:3b:28:ff:06:a8:d6:42:
23:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7F:2C:F2:B0:86:48:5D:C0:2D:6F:16:30:B2:FF:69:D2:F1:65:46
X509v3 Authority Key Identifier:
keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7e:da:a5:1b:6e:81:88:83:a0:ae:8d:e1:5b:ac:13:6f:7b:
32:ac:3c:79:f3:f5:1d:27:d0:d0:3d:41:66:99:56:a7:71:6b:
69:9b:7a:a5:12:45:cd:38:7a:8d:22:f3:9e:6b:99:bf:55:46:
37:0c:30:0c:fd:b6:6f:cf:cd:f8:96:fc:cf:fd:09:13:0e:2e:
b0:ed:af:12:3f:41:65:3c:7c:ba:69:90:3e:1f:0a:7c:e2:ae:
ba:f5:0f:9d:13:df:61:09:93:d6:2b:70:5b:4e:bc:0f:a9:8f:
9e:5b:53:f4:21:7e:b6:4f:57:ac:8e:f6:7a:88:29:61:ea:eb:
09:f4:47:3a:de:d8:2f:28:07:42:c6:2c:72:f2:76:0e:00:77:
72:7b:c6:60:b6:cf:37:8f:a5:6c:f0:0a:9d:b9:e0:c4:0d:2e:
27:d1:e9:1f:fc:87:3c:75:6e:42:96:d3:74:e9:96:20:d0:ca:
30:53:5f:e3:f9:44:13:31:1d:fa:cd:e2:aa:f2:fb:db:08:47:
bc:31:f0:c4:42:7c:5d:cc:b4:58:e0:cf:25:a5:c6:7f:63:d6:
0f:37:b3:81:8d:c2:83:91:48:8a:2d:8f:a6:ae:47:bb:e9:23:
53:1b:70:d3:5e:0d:70:d7:5c:4c:3f:2c:52:ea:3d:5f:0d:30:
0a:fe:ea:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:40:51 2025 by rpki-client