Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
File: 9_38M32M4OBe9_e3KvJ-thzUcDc.mft (raw, json)
Hash identifier: SAGWLrNpmuTZHPxiKOsvyRrftr6PUy67R6WF9cuYWuM=
Subject key identifier: 03:E2:5C:3E:25:D7:E2:5D:9B:E8:84:FD:E3:4E:CF:26:FA:12:4A:66
Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
Certificate issuer: /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Certificate serial: 0197B632761B7F23E14283D5E695C78BE0E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 11:00:49 +0000
Manifest this update: Sat 28 Jun 2025 11:00:49 +0000
Manifest next update: Sun 29 Jun 2025 11:00:49 +0000
Files and hashes: 1: 9_38M32M4OBe9_e3KvJ-thzUcDc.crl (hash: sb9E13p1qbZKolsCykxj9SCX8nHsQXma9sLuJW/sWeo=)
2: fCHzIX3PF5IX4vTpqhp12B4ANgE.roa (hash: 56hifj5pI9Tipd1DppPjnl4odiFdle6vhykV6J1DFck=)
3: g7wXivy3539LtXi_LoOdOIVbDx8.roa (hash: +5hEq5/dYKWbMKLOksJvPEMNRWQVyUVWOFEW1b0Bio8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:76:1b:7f:23:e1:42:83:d5:e6:95:c7:8b:e0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Validity
Not Before: Jun 28 11:00:49 2025 GMT
Not After : Jun 29 11:00:49 2025 GMT
Subject: CN=03e25c3e25d7e25d9be884fde34ecf26fa124a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:07:9f:52:74:10:41:f1:f6:81:f2:fd:1c:12:
b4:a2:bb:fe:6e:9b:09:cd:a7:4a:70:a8:65:54:97:
f0:8c:55:ad:29:9b:8a:cf:16:56:1f:b3:08:f6:0a:
15:a7:a8:46:6f:60:f1:64:34:2b:9f:8e:2f:8f:5e:
b0:fa:70:50:0a:10:af:ef:8f:43:7b:39:5a:68:f4:
fc:de:37:10:28:02:48:83:19:c5:b3:61:c8:8f:5f:
74:44:55:b9:ad:12:2a:2a:64:17:bc:18:2a:df:90:
13:ab:7f:e5:6c:ed:d6:fd:fe:e8:ee:ee:44:3f:f3:
bc:c8:ca:5e:65:d6:3e:97:10:a1:dd:7f:b5:86:0e:
28:9f:4c:d7:be:3f:15:74:02:83:d8:ee:4d:37:cb:
8c:be:68:57:43:9e:da:73:4d:c7:3a:88:91:93:5e:
b8:dc:11:ad:b4:e3:d8:88:b8:6e:93:0d:cd:45:c2:
2a:b8:be:3b:ee:f0:50:2b:a3:ee:58:b2:91:63:82:
6a:ed:64:e2:9a:cf:5e:9a:60:72:13:d4:4f:18:ef:
a6:d6:c1:19:cd:ff:30:b0:c1:71:70:6c:c2:b2:02:
1f:c0:e2:03:f8:9b:81:cd:ee:c0:0e:5d:31:cb:82:
4d:10:5d:e1:ea:d1:f3:56:4c:3b:ec:2d:e7:97:f0:
f5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E2:5C:3E:25:D7:E2:5D:9B:E8:84:FD:E3:4E:CF:26:FA:12:4A:66
X509v3 Authority Key Identifier:
keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:43:fd:49:74:cd:65:f2:90:ad:75:01:9e:ac:17:61:d1:75:
b6:1d:5d:60:95:98:04:2d:27:fb:37:80:7d:fd:8d:46:1b:8c:
11:56:d4:86:fa:7e:05:d7:c8:02:3a:84:14:1a:a9:53:fa:38:
fa:d3:88:db:24:27:a4:8d:c1:bf:ea:96:9c:eb:a7:bc:86:47:
5d:23:98:37:31:29:f5:42:49:c4:df:a2:60:12:d8:c3:e1:9c:
b3:25:6e:dc:cd:95:41:95:a2:35:1d:c7:78:b6:cb:8f:74:30:
9e:ab:a1:71:46:74:e1:f9:eb:3a:6c:7c:57:06:79:71:51:01:
7a:c6:a2:5f:c6:39:a7:0c:0b:f4:a1:11:3d:50:ba:5f:c7:ca:
07:43:97:e2:8b:12:c3:86:2f:88:01:0e:56:0a:ad:86:d9:21:
a6:bc:4d:22:56:7b:dd:40:14:12:0e:0c:ce:99:9d:fe:47:ec:
ab:04:19:be:a8:15:7d:6c:4b:3a:4c:ed:01:e3:fe:f7:4d:1b:
75:93:81:c4:7b:58:4c:e5:3c:8d:1f:e3:14:71:1e:41:c7:1a:
39:6d:12:1a:14:6f:7b:df:e8:d4:57:b3:7c:3f:e2:fe:ce:50:
65:c6:a1:63:27:58:55:e5:54:cc:78:e2:7e:68:fd:60:ee:11:
85:26:a8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:18 2025 by rpki-client