Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
File: sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft (raw, json)
Hash identifier: +gbD9fMtZU4HSy0BhKQY0jPZowO2rgfxeIf987P/UUo=
Subject key identifier: F9:E7:0D:AC:44:9C:3A:B3:25:54:B2:70:04:99:36:C3:07:BC:8B:96
Authority key identifier: B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
Certificate issuer: /CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Certificate serial: 0197B88EBF92D8C8FE27FBC64FE3D84823C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
Manifest number: 0947
Signing time: Sat 28 Jun 2025 22:00:52 +0000
Manifest this update: Sat 28 Jun 2025 22:00:52 +0000
Manifest next update: Sun 29 Jun 2025 22:00:52 +0000
Files and hashes: 1: YijLZfZ1VVcQMfbO2kW4jsYTug8.roa (hash: f055fbJfO/jOl/pVZwNG+0XakEEdz2iyjouPpXHwKII=)
2: sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl (hash: NMYrJgfwDvVi+AuQYzFXSIpVFrWXMq/fE4HKSxL2o/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:bf:92:d8:c8:fe:27:fb:c6:4f:e3:d8:48:23:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Validity
Not Before: Jun 28 22:00:52 2025 GMT
Not After : Jun 29 22:00:52 2025 GMT
Subject: CN=f9e70dac449c3ab32554b270049936c307bc8b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:a4:ed:b0:2d:64:c0:cb:b6:b1:6b:88:09:
32:73:0b:ff:f6:0e:e7:be:79:c4:54:5d:18:f9:73:
f8:3c:35:66:d9:ef:c2:e5:e4:44:4a:1a:13:09:b9:
96:1f:19:cf:1e:92:3a:b9:f8:f0:ca:4a:47:d8:21:
cd:2d:b0:f6:cc:e1:5d:ca:aa:72:d4:c9:47:88:56:
7f:ec:ce:f4:fa:f7:cd:4f:a4:78:59:97:e5:71:21:
e3:b4:1f:05:59:91:d3:e3:ad:ea:82:22:79:1a:aa:
bb:f3:cb:6a:5d:fb:31:65:5d:2b:3d:6a:cf:40:d3:
e8:25:1e:a6:39:16:a8:61:b3:9b:2a:c8:2c:88:e6:
46:b6:23:08:6b:80:8b:3d:8e:4a:68:41:f1:ae:85:
aa:21:83:c0:3e:d2:2e:f8:b9:9e:af:41:c2:85:eb:
a5:20:13:46:2f:0a:07:16:2e:45:e2:1e:77:e0:48:
e3:b2:1e:76:ea:06:24:53:3d:f8:12:ce:a8:2a:37:
2b:0d:6b:73:7c:b2:fc:0c:f8:b7:be:ba:8b:33:51:
c1:e9:57:2b:57:d4:80:75:7a:d1:15:56:39:31:cf:
46:5a:0a:e4:e3:ad:fb:dd:7c:5d:53:82:54:67:7b:
06:d9:35:13:b3:03:f8:7a:9c:84:f0:db:3e:0c:f0:
ca:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E7:0D:AC:44:9C:3A:B3:25:54:B2:70:04:99:36:C3:07:BC:8B:96
X509v3 Authority Key Identifier:
keyid:B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:33:84:9d:cd:52:40:1c:a4:54:e2:8d:e3:da:f3:89:d1:a2:
03:f7:e3:3d:0e:40:70:e0:7d:db:27:41:67:1d:7d:a1:7f:48:
87:ec:3a:83:7b:04:ce:8f:8b:4f:f5:4a:f6:7d:6b:94:a2:d6:
91:c4:10:3b:dd:b1:f4:94:2d:d0:a5:d0:be:ef:b7:b5:7c:78:
29:d0:6c:3e:c0:c7:61:83:ea:ac:7b:1c:93:4a:d9:e4:c9:4a:
97:27:8b:01:a5:cf:2f:c8:f9:0e:28:af:a5:cf:6b:45:a9:02:
3d:b6:68:33:60:7c:37:e6:00:1a:94:25:51:9c:3b:1d:2a:01:
a4:8e:a8:95:c7:4a:89:e9:f4:fc:d8:61:f0:e7:ea:db:a0:0c:
24:f3:53:bc:95:e1:40:b0:e6:a7:d1:2c:2e:e7:dc:60:4f:09:
a5:f6:bc:58:c7:0c:30:0f:9f:39:93:76:c1:44:a9:a7:91:c5:
6e:8c:8d:0a:08:e0:5a:bc:14:a5:3b:a6:83:5d:88:c7:5c:72:
94:46:8b:c5:ae:52:52:7c:ef:36:92:c5:ef:78:ce:54:64:30:
bd:34:0b:2c:d5:97:51:e1:fe:7c:24:22:85:bd:fe:5f:4b:b7:
76:9f:0c:3c:b5:ca:47:47:db:4f:02:0f:35:4d:f4:76:bc:21:
da:b9:0b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:39 2025 by rpki-client