Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json)
Hash identifier: gdF+7eWZWfcKhs4A5Po4Hkwsgd8zHbdX4ik7Du6sbdM=
Subject key identifier: D4:16:55:D2:42:17:C4:42:1B:91:53:F5:1E:00:CC:6E:6C:1C:69:C2
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial: 0197B77C827CBF77934C30809E849D2DD943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 17:01:19 +0000
Manifest this update: Sat 28 Jun 2025 17:01:19 +0000
Manifest next update: Sun 29 Jun 2025 17:01:19 +0000
Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: pW7xCYd2qcPdqCR9ehvYUyLPv9EboPPvK8wPtEN1gHQ=)
2: fGeYBTeIqUGlzWkeYCJZuXTV3NA.roa (hash: NVWcI0sfwe5T87MmDN6gYp0EndXzVclJkGdW6buL8Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:82:7c:bf:77:93:4c:30:80:9e:84:9d:2d:d9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Validity
Not Before: Jun 28 17:01:19 2025 GMT
Not After : Jun 29 17:01:19 2025 GMT
Subject: CN=d41655d24217c4421b9153f51e00cc6e6c1c69c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:69:84:41:2e:ed:3a:08:fe:30:37:c0:3e:3b:
0f:cc:75:6f:d5:81:97:70:bd:9d:8a:32:7b:96:48:
f8:c2:a8:b4:eb:3e:49:7b:d4:0a:37:7b:9f:97:3e:
a5:48:fd:54:53:2c:d9:ae:51:f8:78:1d:47:5b:ce:
bb:3b:20:d7:58:a0:ea:c6:19:40:0f:fe:33:d4:03:
a4:95:03:67:52:c9:16:ae:77:1f:25:9e:cd:ce:1c:
d2:ca:44:1e:c1:95:d8:fd:1b:f9:50:0a:35:99:2f:
ad:b3:0c:3a:ef:7a:e4:87:e4:d7:15:a5:5a:ab:de:
08:7b:16:b2:9f:39:dc:04:5e:46:8a:38:35:af:2e:
3d:e4:5e:ef:bb:4a:90:50:45:e3:1f:d2:5c:6a:00:
3d:02:5f:77:7b:55:e3:1c:78:f1:08:a2:6e:67:e0:
e6:80:c4:04:77:3b:50:8c:53:85:a0:9e:d1:4c:b2:
3c:7b:4b:b9:41:51:27:49:c2:43:79:f6:89:57:54:
86:55:9e:64:93:dc:bf:c4:23:75:02:13:b7:6c:41:
d3:ee:6d:cf:65:f0:c2:a8:d9:d3:99:f6:87:4d:d1:
01:70:86:9e:84:75:9e:29:8f:96:44:84:86:ad:64:
6e:1d:39:79:53:ae:51:e5:38:c4:7b:b9:11:44:1c:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:16:55:D2:42:17:C4:42:1B:91:53:F5:1E:00:CC:6E:6C:1C:69:C2
X509v3 Authority Key Identifier:
keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:59:b4:bd:33:56:fd:ad:6b:4d:7a:4e:3a:e5:6f:e2:05:65:
67:81:fb:aa:e3:da:e3:6b:1b:bf:93:36:22:0d:bc:12:4a:9e:
a2:17:8e:29:3e:9b:e5:d6:89:59:8e:b3:db:be:b0:49:6b:60:
62:4a:43:56:1d:c7:ad:f2:d9:de:07:b0:8b:ef:57:b2:a7:73:
e6:ba:41:e0:10:f8:08:ce:e2:b0:6c:50:44:29:da:0f:58:89:
a8:2e:f5:18:5e:57:0e:ca:20:c0:d8:ed:60:2e:97:41:bf:46:
8b:e9:0e:b0:ca:7b:48:42:57:e0:7f:92:e2:84:67:71:68:78:
67:27:62:8c:eb:f5:d4:96:3b:07:4d:72:72:76:b5:f1:9e:9a:
b5:a0:79:28:61:4c:65:5d:9c:bf:68:8a:60:ac:62:7b:61:4b:
1b:9a:33:71:22:2b:6c:ae:57:eb:db:f7:35:e6:80:b1:33:eb:
75:68:ef:7a:c7:c4:8b:9d:42:92:ea:43:67:68:51:e1:44:8e:
cd:a1:d6:66:03:8d:2d:88:ef:84:69:19:a2:dc:96:66:36:fd:
24:e9:cb:02:e3:07:25:b3:3a:40:35:95:5b:40:f5:5c:1f:e6:
a5:da:62:e8:d4:3f:88:bc:a9:28:cb:0e:e5:56:21:33:ec:76:
c1:69:af:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:08 2025 by rpki-client