Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: ycfSOxQyvmHjd7y/icq8kqHSUd3xPvsIqYMgqHkN6nU=
Subject key identifier: 42:27:A4:C1:AE:1C:36:4B:B8:63:21:2D:94:4E:47:9A:AA:20:FB:CB
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 0197B70ED6E0C0103EA819B986513E0BF2FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:32 +0000
Manifest this update: Sat 28 Jun 2025 15:01:32 +0000
Manifest next update: Sun 29 Jun 2025 15:01:32 +0000
Files and hashes: 1: 1-Rgkx9BsEfikK5eKOgyodd6h4gY.roa (hash: CT7Rp9+Jw7zWR3AQw89KWuUkHEx7Im+IKlsSdQ20Nq8=)
2: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: GcTUGLRH0BJ3m6do1U0P7lIsCZ7SpHxamUXnc6kGgJc=)
3: JOUMaPpHTLs0B4CR5_freWlNIso.roa (hash: lQdFlW5I+9SlK8gtAYGtz3jqfCmzmwfXYR3qnMqPbFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d6:e0:c0:10:3e:a8:19:b9:86:51:3e:0b:f2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Jun 28 15:01:32 2025 GMT
Not After : Jun 29 15:01:32 2025 GMT
Subject: CN=4227a4c1ae1c364bb863212d944e479aaa20fbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:98:d0:38:cc:e7:dd:19:69:2f:5f:c9:07:
d6:7f:48:05:d4:0f:a2:89:bc:f3:f8:8d:64:58:2c:
da:75:3a:03:53:a2:b8:70:4d:17:0b:82:f2:0c:e7:
37:93:33:84:ca:cb:26:0e:20:d0:e0:87:76:f0:8d:
06:43:e2:85:d8:90:7d:c7:b8:88:b1:74:0e:d0:e8:
8d:a6:af:84:6a:00:91:b6:1d:53:88:ed:6e:41:73:
fa:cb:c1:9d:46:1b:e2:e8:41:b3:01:13:a2:40:1f:
24:b0:51:90:50:2c:1e:04:5c:76:b9:f5:60:c8:7c:
00:25:7d:8f:1c:4d:72:4f:68:8f:b5:82:a6:83:65:
8d:e6:9b:3c:b3:a7:40:e3:61:0e:fb:86:66:47:47:
5c:05:07:85:3c:0b:a7:5e:c7:48:fc:13:86:ea:0c:
37:ed:58:48:0a:6e:b3:e0:b0:a7:91:b7:ce:95:73:
cb:67:5d:45:65:f5:82:c2:bd:7a:90:d4:4c:b0:5d:
4c:b8:17:2b:31:c5:28:94:8f:f8:30:f5:a3:f9:43:
5e:a1:fa:62:f5:cd:a1:00:18:60:86:fe:56:b4:98:
33:87:13:d8:c4:56:ad:60:99:86:9d:4a:ae:63:a7:
f7:ad:64:e5:34:0e:f8:97:48:dc:e5:fa:32:d6:06:
dc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:27:A4:C1:AE:1C:36:4B:B8:63:21:2D:94:4E:47:9A:AA:20:FB:CB
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0f:39:c3:b8:e4:f3:7e:66:a8:c5:44:b6:db:13:b9:14:5a:
dd:ae:d7:b4:2f:76:ac:b3:46:f2:3d:ae:6f:90:35:6f:5e:f3:
33:e0:66:0a:36:1d:f4:07:6a:47:29:81:70:10:90:01:41:e8:
b2:0d:6b:f9:ed:38:df:fc:42:89:60:5a:6d:28:e1:dc:17:dd:
08:19:0d:89:51:6c:4e:72:37:76:a2:9b:de:79:01:7e:d1:e7:
cc:8f:d4:22:ea:ad:64:35:00:25:e9:0b:34:e5:8f:e7:17:ca:
05:4c:40:19:90:c7:91:d8:e0:27:11:cb:41:3f:0d:79:56:57:
da:1b:36:e3:21:bf:a1:03:d9:0e:19:bf:63:2f:51:43:7d:2c:
df:72:ba:a3:7e:47:39:19:9e:67:67:09:f0:c4:0f:a6:26:bb:
dc:08:ed:a4:b1:16:b4:6f:91:9b:2b:3e:51:2d:97:1a:67:4d:
b2:2c:c7:52:c3:1a:a1:e8:c1:9b:fa:fa:26:be:b8:3e:c1:16:
ad:69:b4:1a:a2:d6:ef:be:80:e7:47:61:89:dc:bc:42:14:da:
bd:6a:48:a0:f4:a4:53:44:a7:df:3c:55:91:a3:e7:7b:dc:82:
f1:2a:f4:e7:21:2e:d9:af:14:8a:a5:83:72:76:35:bb:52:e6:
0b:8f:f2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:51 2025 by rpki-client