Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
File: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft (raw, json)
Hash identifier: upHselAF4+Y3nWsd/nxd9dz8M//+v3xrBcPoID/v6bc=
Subject key identifier: A8:23:FB:06:89:EE:99:FD:87:A4:AB:9F:B7:18:74:5B:6E:35:87:95
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Certificate issuer: /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial: 0197B6A0545DFF993C7F86F567154FE4C360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
Manifest number: 159E
Signing time: Sat 28 Jun 2025 13:00:50 +0000
Manifest this update: Sat 28 Jun 2025 13:00:50 +0000
Manifest next update: Sun 29 Jun 2025 13:00:50 +0000
Files and hashes: 1: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl (hash: CyB/kr1ukJ/8mZ9VwCBHPm58fy20EzpnrazGR/nS9t4=)
2: SJe0yiKrFFgre-LwlA373na16-M.roa (hash: W+lZ86QtGfH27JSeGBvOgaus0tZU6nh0IODmn6TYevo=)
3: rXYQihXZcHzDYDPfOCw2uf0QxOs.roa (hash: mgxpGPq3j8kcIVwK/lsmtpT+En8AA3E9GG8LueVY7g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:54:5d:ff:99:3c:7f:86:f5:67:15:4f:e4:c3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Validity
Not Before: Jun 28 13:00:50 2025 GMT
Not After : Jun 29 13:00:50 2025 GMT
Subject: CN=a823fb0689ee99fd87a4ab9fb718745b6e358795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ad:b4:7b:7d:3b:26:09:2b:6e:bd:1a:23:41:
9b:ba:0c:89:e6:7f:77:bb:1f:61:76:6d:fd:9b:eb:
c0:f7:df:52:d5:e4:15:47:e5:35:c0:88:4f:0b:6f:
50:ef:63:30:13:36:3c:ad:02:9d:5c:73:55:99:0f:
88:04:78:a9:cd:32:7a:68:13:8f:bd:c4:00:60:74:
a7:5d:71:b4:3e:84:03:cb:95:29:fc:ec:16:47:f6:
02:87:c8:24:70:f7:98:34:ed:fe:aa:33:aa:d0:aa:
84:41:ef:54:fd:a9:a7:14:53:81:01:37:f6:1e:db:
f6:67:75:61:a0:56:8f:ef:13:8e:64:98:20:ad:7a:
7d:b2:ee:83:ea:f8:be:42:86:44:d7:b1:ed:70:30:
b2:04:0e:d7:a7:d7:a5:be:04:92:7b:7c:99:1e:65:
6c:4d:84:92:f3:46:22:68:97:32:90:ca:ee:7a:b2:
c7:47:9b:e5:f5:d6:b1:b8:53:ec:7f:8f:b4:06:83:
8e:4b:b2:a4:45:02:7f:19:92:c6:17:32:48:a9:03:
db:61:c0:e8:d4:da:8c:10:f5:e9:95:61:24:da:1f:
79:fe:3f:d1:f2:eb:94:ed:11:34:2b:ae:5d:2c:e1:
dc:db:2a:c1:0d:73:00:cb:a8:4a:ec:b0:87:5c:3a:
d1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:23:FB:06:89:EE:99:FD:87:A4:AB:9F:B7:18:74:5B:6E:35:87:95
X509v3 Authority Key Identifier:
keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d4:6a:cd:5c:93:9c:76:53:9d:25:57:77:b1:e6:84:5c:93:
ec:3a:8e:98:52:9d:38:93:cb:ee:8b:78:a6:73:8b:d8:dc:fc:
80:1d:74:55:77:26:f5:f0:27:a3:40:2a:dd:7e:ab:cf:ff:21:
31:82:ff:7c:b1:09:e0:e9:b5:2a:08:d6:d2:39:31:a7:67:62:
58:ab:05:f8:f2:4f:39:16:73:eb:18:78:d5:b1:73:a5:f7:4e:
e2:5c:e4:67:17:49:d8:91:29:1e:28:96:a3:a4:57:44:ee:02:
2c:25:64:92:58:f7:35:a1:f1:e8:1a:85:76:bb:7e:e8:cd:dc:
d3:cb:0d:a3:06:29:2c:86:b3:32:14:64:70:fd:2e:bf:81:1d:
7a:31:8b:b8:d8:28:f7:33:f5:92:18:19:99:a1:80:00:0b:d3:
5c:8b:48:8e:86:cc:07:aa:89:74:e7:70:b6:37:52:26:19:7d:
37:3b:26:5d:96:e5:19:a3:fa:9c:54:0d:fb:0f:d2:a2:b1:d9:
24:e5:de:a5:7e:3f:50:f8:50:7e:e4:f7:40:8b:6a:0b:3e:6d:
30:81:03:5d:75:25:7a:0a:f3:20:fb:84:f4:b3:d7:37:d8:9f:
2e:d6:1b:5d:12:bb:c3:78:a2:8c:2f:bc:25:f6:98:8a:2c:1e:
be:73:ed:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:42 2025 by rpki-client