Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
File: _x9hW5GDn1HtOltTdTsnsCx22pU.mft (raw, json)
Hash identifier: 84TFCgqF28DkvGV3Mt+aZmDG26miV3WvdWc3V6OMtq4=
Subject key identifier: B9:CF:62:C9:34:E2:B6:73:C6:E7:C0:24:10:F6:76:D1:D4:7F:45:E8
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 0197B7450B22794F7F9D0186EC6A6A48B625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 16:00:44 +0000
Manifest this update: Sat 28 Jun 2025 16:00:44 +0000
Manifest next update: Sun 29 Jun 2025 16:00:44 +0000
Files and hashes: 1: 7a7WUL8xvDPo2P-5omM4jYtGU5Y.roa (hash: UostfHkB3oR0Iku8D5pESC2eAmHKknmIvGYXu5RiVk8=)
2: E72VdoRs1WH4lPVFyfKcgtxOU8Q.roa (hash: LmX4spgkKMlRcTCE+F8dcGQpsB1FUNFcfYjRwXtYks0=)
3: _x9hW5GDn1HtOltTdTsnsCx22pU.crl (hash: gxl6rbTKtq3XwofQgrjA48hQJNQ2CNRgT84JUYIN6SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:0b:22:79:4f:7f:9d:01:86:ec:6a:6a:48:b6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Jun 28 16:00:44 2025 GMT
Not After : Jun 29 16:00:44 2025 GMT
Subject: CN=b9cf62c934e2b673c6e7c02410f676d1d47f45e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8e:d5:8f:a6:c3:0c:30:52:d1:76:8f:44:31:
ee:c2:20:8f:e3:ba:0a:3a:72:6a:1e:2b:1d:6b:20:
50:61:19:17:e9:a5:a1:64:ac:1a:f7:20:a6:27:23:
2b:bc:01:9b:a3:57:f1:b4:19:e7:06:30:64:b8:57:
73:2a:d1:e2:4b:ba:3c:43:95:ac:da:bb:c2:85:13:
0a:56:9f:2a:41:c7:a8:f8:00:d9:56:22:67:28:72:
0e:4c:0e:63:c7:03:fa:df:94:59:85:97:af:c3:e2:
f2:3b:dd:7c:32:85:c2:88:65:f7:7b:f0:91:ec:cf:
c6:82:f2:0f:0f:0f:de:1f:3f:3b:a1:09:bd:fe:c8:
db:72:75:a5:6e:cd:04:2a:bc:c5:7e:92:9e:cd:5d:
eb:b5:9d:b0:1b:87:17:93:27:88:5d:ca:bd:9d:e7:
c6:d6:96:e1:19:78:60:3d:a9:75:ab:e9:1a:98:f3:
7d:39:cc:29:fe:20:24:fc:79:20:35:9c:5b:5d:04:
e3:91:de:b2:b0:06:16:fb:ba:f9:5e:b3:3e:70:6f:
55:ee:6c:bf:3e:8d:7c:11:46:04:94:c8:a8:83:ae:
ee:1f:7f:a8:ad:e8:f1:65:4c:e8:e3:f7:e8:93:cd:
de:b6:14:d2:38:06:c1:6d:82:6e:23:96:8c:b7:16:
e7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CF:62:C9:34:E2:B6:73:C6:E7:C0:24:10:F6:76:D1:D4:7F:45:E8
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:4e:bb:fb:7a:39:ae:46:ce:da:f2:88:bf:92:b3:18:ea:df:
27:fa:12:4e:83:cb:ab:1f:b2:b2:08:be:1f:e3:24:9a:14:bc:
60:5b:90:7b:5c:3d:4b:c9:e5:a9:53:ff:52:05:c0:8b:83:84:
fd:72:34:72:99:dc:c0:23:f6:06:18:f6:fe:a0:c6:b2:53:61:
44:0a:10:e3:1f:b9:e3:d5:a2:f7:76:0c:65:b5:95:e5:1a:2b:
a9:7b:ef:1d:88:0b:a1:08:88:f4:df:c8:4c:ab:a4:9f:b7:d0:
85:27:bf:e3:af:8b:90:13:37:ae:35:89:36:fc:c1:4a:0c:12:
11:21:e3:5b:73:25:d4:7c:8f:c9:00:a5:9d:74:f7:e0:5d:88:
e2:36:c9:ac:3c:a0:a2:7c:fe:f1:08:74:59:ec:1e:55:08:f0:
af:2c:de:e4:3f:d9:6b:7a:76:6b:79:d1:32:79:74:3e:0e:49:
e5:b4:75:75:8a:a9:79:a2:84:eb:30:4a:6d:82:05:2a:81:4e:
38:21:87:8b:2c:0e:55:8a:ca:c0:c8:1b:0a:79:06:42:66:e7:
81:f4:3b:4d:8b:d3:37:02:6e:64:66:26:9e:93:7f:ad:01:1d:
8a:c7:24:65:db:91:f4:fe:05:e9:53:58:18:fc:4e:47:a4:72:
30:e4:ea:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:40 2025 by rpki-client