Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
File: 9aEH8WvGsAt2TDms_WMzY2RtWZY.mft (raw, json)
Hash identifier: 0ZRdyHpthzNbaJ3xvfK72mserX5ihg+j1hY7bYwxQYY=
Subject key identifier: 03:FA:9A:1B:09:2D:EA:D5:1D:A0:31:DC:B1:C5:C9:19:93:D2:A0:EC
Authority key identifier: F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
Certificate issuer: /CN=f5a107f16bc6b00b764c39acfd633363646d5996
Certificate serial: 0197B7EA53EC8EA8E88E902ED7D6BF09ED73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
Manifest number: 02D7
Signing time: Sat 28 Jun 2025 19:01:16 +0000
Manifest this update: Sat 28 Jun 2025 19:01:16 +0000
Manifest next update: Sun 29 Jun 2025 19:01:16 +0000
Files and hashes: 1: 9aEH8WvGsAt2TDms_WMzY2RtWZY.crl (hash: xuwHKguN9xqI0XaxqEWmfwInTlgqdy7u3SvvjP8F4vA=)
2: i8fQ4SDQp7cMewdMesiICFs9ZAg.roa (hash: bCMQ7OQEomrpckp+sy5Q02dQCcDmXIN8SQy3NDUMNVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:53:ec:8e:a8:e8:8e:90:2e:d7:d6:bf:09:ed:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a107f16bc6b00b764c39acfd633363646d5996
Validity
Not Before: Jun 28 19:01:16 2025 GMT
Not After : Jun 29 19:01:16 2025 GMT
Subject: CN=03fa9a1b092dead51da031dcb1c5c91993d2a0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:90:a0:50:48:91:eb:c7:8e:6e:cb:51:5e:43:
a6:fd:40:8d:ea:10:e9:1c:39:bf:ea:96:8f:35:e5:
dc:c5:f1:56:cf:dc:8d:8b:ef:54:82:cc:9f:e6:54:
37:37:e7:e5:5e:ab:67:f0:3a:b4:17:8c:c8:21:32:
8d:32:3f:5d:98:2f:83:f8:c9:3c:e0:0d:f3:c9:53:
28:9d:a2:85:2f:67:36:a4:d8:a6:ca:b5:14:e0:cf:
94:6f:47:dc:3c:37:aa:c8:16:30:a6:f9:10:85:69:
c7:3e:fe:d6:ad:01:74:db:0b:8d:8d:f2:9e:52:27:
7f:2b:2c:86:ca:68:01:84:b0:30:f6:6a:f5:c9:e2:
56:c2:f5:76:2c:e0:44:5f:0d:00:ca:25:7f:e6:f0:
8e:07:78:dd:9c:27:0c:f6:7a:f9:6a:8d:b1:1c:ce:
40:55:70:62:60:fa:f3:41:04:a7:9e:a7:fc:95:ce:
ef:07:32:95:cf:b0:25:d6:78:bd:08:fe:03:74:af:
21:de:8d:1a:de:ce:d9:37:86:41:76:15:bc:27:fa:
10:38:f6:1c:99:4c:36:8e:0c:1d:89:72:53:71:63:
fb:ec:b5:5d:39:84:1d:22:6b:bd:36:9b:f4:c1:3e:
e6:aa:8c:db:20:2e:ed:b7:ea:44:4f:c6:cb:0d:c1:
a6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FA:9A:1B:09:2D:EA:D5:1D:A0:31:DC:B1:C5:C9:19:93:D2:A0:EC
X509v3 Authority Key Identifier:
keyid:F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8f:9f:78:38:c3:f8:16:83:87:60:93:c9:8c:8f:21:0e:40:
a0:f0:a9:f6:26:ec:a5:cb:81:f6:00:28:76:8d:b4:b5:c5:c6:
58:33:6f:5c:1e:c8:fa:89:b8:77:50:d9:c2:b5:16:8a:84:cb:
5f:87:ad:db:e0:0c:03:ae:4e:cc:9d:d4:12:8e:d3:c4:4a:0d:
47:d5:e7:08:83:d9:45:25:6c:70:e9:6a:5a:55:99:07:b5:73:
33:ac:8d:d2:5c:42:00:aa:30:82:f2:e8:f3:ca:eb:b0:5e:15:
91:22:2c:df:ba:ba:cb:2e:bb:ca:69:91:b7:a7:67:e9:36:8d:
19:be:b9:d9:d0:bf:22:b5:6e:67:33:6d:c6:1e:a0:e1:70:75:
01:73:00:87:29:96:d0:7f:21:3f:12:1f:e2:6c:ef:cc:7b:86:
bc:4d:6b:0f:18:ef:c1:0f:d8:78:d8:c0:34:83:60:8d:f6:9d:
9d:2d:f9:61:3b:0f:c7:63:3f:2f:90:43:73:6b:35:a0:6a:af:
93:66:b4:fa:5a:9e:f9:11:9f:d0:be:ac:7a:98:b0:e8:60:fd:
4e:33:14:85:ed:a1:ce:e0:52:29:da:94:2a:32:16:42:e4:45:
88:0e:77:0e:2d:c5:2a:b3:36:aa:b6:c1:88:b3:ce:e0:59:72:
16:cb:79:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:15:21 2025 by rpki-client