Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json)
Hash identifier: QI5LB9GjdhlWFbKRdiMO2/qZlxbTbOAjIwTW9KFkgbI=
Subject key identifier: B3:86:1C:36:53:32:D8:F9:4B:DC:4E:B9:3A:8A:44:E6:08:B3:13:AA
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 0197CC4CAB075D52E33CF922D7B9FBBDFC6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
Manifest number: 0577
Signing time: Wed 02 Jul 2025 18:01:05 +0000
Manifest this update: Wed 02 Jul 2025 18:01:05 +0000
Manifest next update: Thu 03 Jul 2025 18:01:05 +0000
Files and hashes: 1: 67zW8t21om1pTXvyuagS0QWX12s.roa (hash: arwG9XkQ/+2dVagELL/zq8/mCR4dYaym8bqyA1sBk4A=)
2: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: 8WLG36qj6R4YqcS2FDeTYE59c+j3Dck4hKCpMZK7Vhk=)
3: cCgr35XwpirOi5T2NC-QhUoK0mY.roa (hash: aPFc2y18XhdFxhdVyRug+HbV1BK/ZT7q4hdqYZuvICQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:ab:07:5d:52:e3:3c:f9:22:d7:b9:fb:bd:fc:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: Jul 2 18:01:05 2025 GMT
Not After : Jul 3 18:01:05 2025 GMT
Subject: CN=b3861c365332d8f94bdc4eb93a8a44e608b313aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:ba:3d:14:96:0b:07:1c:64:d4:43:f3:56:
3b:ae:a1:5d:d3:d3:f7:0e:d8:8d:db:ce:97:a3:a4:
cd:1b:73:ee:8f:af:93:79:a7:8d:0c:d1:34:ff:c6:
cc:da:9f:13:26:f9:cf:45:ed:e3:01:85:d5:e3:79:
c2:a7:2e:c8:dd:2a:c5:e0:f4:9d:ea:b9:47:54:14:
f5:fe:86:39:4b:97:f3:87:b3:54:9a:50:05:74:94:
70:a4:a9:a1:20:05:3c:99:79:d7:99:7d:44:23:d2:
ee:18:2d:1a:98:a7:1e:a5:fd:8b:b0:67:40:78:9b:
a5:17:19:2c:08:d1:92:dd:0d:69:89:3e:b6:a6:d6:
03:08:e0:10:8b:9a:e4:1e:96:d7:36:cd:22:5c:06:
ee:78:a1:47:b8:d1:c0:c7:91:a4:a9:5e:f8:e1:04:
71:f6:5e:04:81:34:c1:34:98:87:55:cd:50:d9:55:
2d:fc:f5:25:c0:44:ca:5c:46:c1:9e:28:ad:92:c0:
e5:84:5b:24:30:6d:2e:33:6e:3a:d6:ce:56:ea:55:
b9:a9:3c:fe:56:66:79:33:74:47:41:b2:db:8c:fe:
89:e3:32:17:20:61:92:2b:be:d1:f3:99:e7:19:26:
84:27:12:ce:29:d4:04:90:19:48:c2:99:6b:d6:81:
d9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:86:1C:36:53:32:D8:F9:4B:DC:4E:B9:3A:8A:44:E6:08:B3:13:AA
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c9:24:47:1c:09:f8:67:39:61:c5:36:b2:57:55:53:78:9d:
e0:55:27:5e:d6:7b:c1:63:e2:7f:23:e1:83:46:17:ec:fc:38:
d6:c9:d2:2d:14:83:d5:2d:8a:75:70:a3:4e:e3:2b:3d:ec:f7:
09:36:8e:30:0a:6a:68:ce:eb:18:7c:2c:74:d6:33:61:71:0b:
db:c0:27:ae:6d:65:fd:76:32:f6:ac:d3:3a:5d:b6:38:01:b3:
b5:02:f7:b9:57:5a:b6:26:ab:8b:ea:f1:37:f1:b9:09:5e:8c:
78:cb:fb:2c:72:37:ef:cb:e7:00:99:62:e7:fc:fb:63:29:8f:
05:3e:e3:cd:01:65:a9:08:10:49:93:9a:58:3a:50:d7:e3:ec:
9f:c2:97:af:be:40:37:3e:8b:38:50:25:17:71:6c:86:6f:53:
e9:58:36:3b:d7:94:85:4b:93:ad:f8:45:ce:be:3f:ef:d0:ba:
9e:c8:9f:57:a6:ed:65:e3:74:73:96:81:d8:f5:ef:24:d1:be:
2d:6c:89:70:e8:1d:4a:df:af:00:cb:f8:4a:61:79:17:f9:c4:
7f:24:44:1d:74:22:8e:39:a3:fc:9d:f2:a7:bc:a7:15:ee:df:
7a:ae:48:d5:ea:69:28:fc:4e:0a:21:22:a4:0b:ec:9d:89:db:
6a:aa:bd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:46:42 2025 by rpki-client