Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
File: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft (raw, json)
Hash identifier: sPyspxf2j0246tlhLiCTkekitRt4XBI8DwpaDOdwMwA=
Subject key identifier: AD:37:C6:27:E3:BA:9C:4E:F2:FC:01:70:2B:DE:CF:A4:CC:69:D8:EB
Authority key identifier: F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
Certificate issuer: /CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Certificate serial: 0197B89047FCA8CF50DC3CB05EE89DEDC98D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
Manifest number: 02B4
Signing time: Sat 28 Jun 2025 22:02:32 +0000
Manifest this update: Sat 28 Jun 2025 22:02:32 +0000
Manifest next update: Sun 29 Jun 2025 22:02:32 +0000
Files and hashes: 1: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl (hash: UDRLTs3het1PtOa+hPlrO1PWNZtsPykvkIJqiRUp4NE=)
2: OHGF750j4DJGNc1Oe80dc-FWYaY.roa (hash: h+xssOn739NLfAUDZmv5GlRt0V3PO+xTJdzfH9zAWE8=)
3: _HF2gqhC9uCDDnAOpKs3WUfmbDo.roa (hash: QhESuMW1F4EzEaEsL+0TS0hEypm5aO6tHQYl52gTh58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:47:fc:a8:cf:50:dc:3c:b0:5e:e8:9d:ed:c9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Validity
Not Before: Jun 28 22:02:32 2025 GMT
Not After : Jun 29 22:02:32 2025 GMT
Subject: CN=ad37c627e3ba9c4ef2fc01702bdecfa4cc69d8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:d0:0b:2a:51:71:fb:1f:af:d7:d8:9a:71:
3c:8a:5e:80:4a:ff:99:fe:46:0f:92:ae:9e:f6:bc:
b5:21:03:73:23:e2:b1:1c:ff:ca:96:1e:9e:7c:5a:
6d:a7:86:e0:85:de:9a:63:6a:55:99:01:ab:75:d3:
e9:ef:ec:2e:c9:34:28:55:85:2b:b3:a9:c5:59:8a:
1c:e0:83:ef:cd:89:38:f2:d5:1a:02:68:4f:68:31:
89:2c:41:aa:03:34:9f:58:54:f4:4b:d4:88:43:67:
57:96:d2:5e:65:d5:ca:f6:87:7e:77:0f:0c:6f:ab:
7c:e5:07:c2:d3:ae:f2:03:c8:c4:5b:7f:b5:b5:51:
c0:85:03:eb:ce:76:02:29:67:a4:04:40:e9:65:16:
f5:b9:cc:6d:cb:b7:fa:41:d9:2b:81:7e:3f:f0:dd:
37:16:9a:a4:3e:ac:99:5a:2e:b8:2d:61:f1:53:d1:
23:5c:fb:5b:b1:21:17:85:3b:48:86:4d:62:1a:da:
66:42:81:31:d4:16:f2:1d:8c:bd:83:66:26:5b:f7:
98:f2:8a:27:48:38:43:44:fd:f1:6b:70:22:25:a5:
f3:d4:a4:0b:12:b6:57:28:6a:1b:a8:fe:d6:a7:25:
0c:04:d5:3f:7b:c2:1a:ea:9b:8d:d2:73:39:8f:7b:
d8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:37:C6:27:E3:BA:9C:4E:F2:FC:01:70:2B:DE:CF:A4:CC:69:D8:EB
X509v3 Authority Key Identifier:
keyid:F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b7:30:cf:39:81:6f:ae:5f:d9:e3:9f:cf:89:f3:82:ff:8a:
fe:3e:01:04:2e:a4:79:a7:b5:f3:c0:c9:51:2c:02:10:b9:8b:
57:47:c4:f1:4b:1c:8e:b2:3e:c2:45:25:e0:d2:15:cd:85:e7:
89:89:2e:d3:20:0f:a0:3b:c3:c6:b4:01:ad:f9:bd:4e:db:b0:
9f:4f:b0:66:91:89:65:96:bd:49:32:c5:54:52:c5:e9:0d:73:
2e:8c:93:ea:56:f8:14:f4:54:a8:e9:35:6e:ae:88:cf:8f:a9:
16:47:44:69:e6:3c:25:e0:1e:1c:0f:fa:8a:c1:ec:44:03:cc:
2f:6f:26:a4:c1:43:93:46:f7:bf:1a:c5:89:12:22:b4:17:71:
36:82:11:d5:77:76:ce:75:57:11:09:d6:c7:9d:1a:32:9b:bc:
8c:8f:17:00:5e:17:84:da:07:61:2e:7e:28:80:41:4b:96:2e:
35:ea:a5:40:ed:d1:65:ad:69:43:62:cb:42:03:3d:7a:72:a5:
5e:f6:05:6c:13:1d:c1:2b:db:48:79:a1:e4:dd:d5:c7:52:40:
51:74:67:00:12:c2:d4:fa:de:5f:87:bd:95:39:73:dd:52:7d:
45:6c:c0:d1:e4:5d:b2:f3:5c:2d:bd:0e:93:bb:3f:c9:60:76:
eb:1b:fb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:23 2025 by rpki-client