Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
File: A9yMYjke_dTdGORoGeF3gAKpoYc.mft (raw, json)
Hash identifier: ohegPQX63TDD37FR5BL5rM7P/reIv5bXTBP9DF6uOe4=
Subject key identifier: 93:51:BF:16:35:CF:59:EC:FC:75:D3:C8:CA:5F:4C:45:04:62:39:C9
Authority key identifier: 03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87
Certificate issuer: /CN=03dc8c62391efdd4dd18e46819e1778002a9a187
Certificate serial: 0197B77CBFED1B0461615E91474BF17AAC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
Manifest number: 0375
Signing time: Sat 28 Jun 2025 17:01:35 +0000
Manifest this update: Sat 28 Jun 2025 17:01:35 +0000
Manifest next update: Sun 29 Jun 2025 17:01:35 +0000
Files and hashes: 1: A9yMYjke_dTdGORoGeF3gAKpoYc.crl (hash: 9DLFMipowHql28atOQUjrAPPRAichlGmBeFl21dWCHk=)
2: KMKlBIWdbSLJxhG6mlrGw76dE8w.roa (hash: wMSY3OLmFX6U/ZLAS1pVuwf7520K0rZUrgx8A8ShiM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:bf:ed:1b:04:61:61:5e:91:47:4b:f1:7a:ac:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03dc8c62391efdd4dd18e46819e1778002a9a187
Validity
Not Before: Jun 28 17:01:35 2025 GMT
Not After : Jun 29 17:01:35 2025 GMT
Subject: CN=9351bf1635cf59ecfc75d3c8ca5f4c45046239c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:e7:c4:85:a0:99:66:0c:f7:14:04:ff:7b:
39:d9:39:f4:12:fa:aa:8a:c5:c5:dc:e2:07:4a:e9:
38:e2:09:72:63:09:c8:3e:22:ea:4f:4e:6c:1a:54:
4e:99:03:4b:f6:81:d0:ee:59:62:d8:82:58:c4:5d:
7c:8f:1a:d6:03:dc:0e:c5:db:04:59:dd:de:ff:f7:
c3:db:1e:7f:47:35:57:50:e3:ea:81:97:d0:81:2d:
56:34:4c:83:b6:41:80:65:5d:b4:01:38:7c:05:53:
c7:ef:c8:ba:c3:ab:5f:90:8f:bc:3d:ea:93:2a:58:
25:b3:39:ac:55:d6:36:66:dd:69:7d:07:7f:fc:da:
2e:c8:bd:53:27:7c:cf:a6:4c:a9:cf:a2:d2:d0:d8:
81:b2:85:d5:92:b1:d7:3e:59:e5:7d:26:45:1a:7b:
c2:18:40:f7:7a:f0:43:40:6e:57:5f:01:4e:f1:51:
5d:c1:70:4a:36:dc:ce:5b:ae:a5:ee:bb:02:27:f1:
a5:27:c5:96:4b:26:ed:8b:05:b3:d5:72:a2:a7:5b:
61:ce:29:5c:81:8f:2a:76:9c:37:2d:35:f1:ba:6b:
f4:f7:9b:37:a0:78:61:9b:aa:13:d4:17:21:d1:98:
ad:2c:83:64:fd:15:6b:b9:ec:0a:29:e1:27:ed:06:
ec:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:51:BF:16:35:CF:59:EC:FC:75:D3:C8:CA:5F:4C:45:04:62:39:C9
X509v3 Authority Key Identifier:
keyid:03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3b:5a:5f:67:ca:37:74:13:c5:ec:63:ca:e6:ac:2b:64:48:
51:57:4c:f6:69:87:96:b3:79:86:0c:bb:9a:3b:8e:30:45:5e:
21:11:1b:5b:4c:b7:dc:b1:74:22:83:c3:ea:62:4e:5d:42:b6:
17:fc:29:91:66:f6:d9:19:fb:88:1b:67:95:2b:64:8e:8a:23:
f1:75:92:a7:ce:f8:36:62:73:17:0e:53:30:22:c5:c6:fe:4a:
7f:3c:68:af:0c:ce:f7:a6:8a:6b:a8:b1:58:ce:62:69:fb:d6:
1a:82:70:d8:87:5d:d2:32:d0:7c:ef:db:47:1d:2b:4a:d5:59:
5d:e8:78:fe:bc:ab:49:42:74:30:dd:5e:dd:88:9b:73:fe:23:
d4:3f:2a:93:1a:66:92:61:72:50:98:b9:61:26:40:80:64:cf:
f9:65:70:f9:c3:f6:bd:32:e7:f1:97:34:5d:0e:3c:80:46:df:
c4:36:5a:65:aa:0f:0a:68:7a:bd:81:70:0d:da:28:d8:3d:0b:
ea:38:89:4e:fe:8b:6d:56:eb:cd:fd:76:1c:bb:7c:75:3f:f3:
88:bb:03:de:96:75:66:06:7a:e3:b1:a1:d6:70:38:a8:63:15:
00:87:e1:9e:f3:4d:96:ea:f0:43:10:12:a5:fa:6f:fd:67:cd:
8d:90:72:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:09 2025 by rpki-client