Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: 3zwD8/nuS5tQ4RCC3Iv64PMiJYtPVYW8g+XBw301MDU=
Subject key identifier: 8F:BC:F6:FC:AA:0C:45:17:B7:55:AA:8F:3A:1A:8E:D8:1A:FA:C2:E3
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 0197B6D77399176A6433AF07480CE0B349BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 14:01:02 +0000
Manifest this update: Sat 28 Jun 2025 14:01:02 +0000
Manifest next update: Sun 29 Jun 2025 14:01:02 +0000
Files and hashes: 1: 1-q7Os-ag3LFo7MgF8ZfJghgVfgc.roa (hash: AkqR6A52qHHQpKh+paJEwg0UF7zLNR6BUjxPJEPXBuc=)
2: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: ugr6AYRUGON6hbEj8zqfYls7qrMIPnZVSI+oz9l2cy8=)
3: X2IXuMlNGoAcrvL_ko43_QrEupI.roa (hash: tb+ePbzsjMAZQXem+oOzrudhMucziUuIqtpyErKmVRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:73:99:17:6a:64:33:af:07:48:0c:e0:b3:49:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Jun 28 14:01:02 2025 GMT
Not After : Jun 29 14:01:02 2025 GMT
Subject: CN=8fbcf6fcaa0c4517b755aa8f3a1a8ed81afac2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:3a:a5:e4:b7:a9:ef:62:26:31:c2:02:71:
2b:fc:53:2d:e0:b7:49:0a:19:d7:92:dc:1b:3e:ef:
a3:24:21:ad:37:ac:c8:5a:84:fb:1b:95:f4:0e:f9:
fe:71:7a:f3:96:40:99:e1:ec:9b:92:f7:7c:85:6d:
55:2b:e4:f7:7d:d4:42:47:d1:65:59:ba:1f:91:ed:
72:a2:25:8b:8f:cc:36:46:23:cb:2f:1b:ca:cf:ca:
76:4e:e5:65:1f:6c:32:df:a9:fa:75:fb:a4:73:c2:
03:17:68:99:5f:37:ad:20:e3:87:79:98:b2:bc:8f:
69:c0:93:7c:ca:51:c6:83:6c:75:80:b6:57:ae:f8:
0f:1c:3d:e7:cb:b2:cb:b8:74:9e:ba:73:64:1e:e1:
ee:20:1c:bb:d0:09:65:81:7b:a5:25:d8:af:41:ca:
5a:a9:a5:71:b0:9a:ec:1c:d6:08:18:cc:fa:e0:1e:
b0:12:40:9d:03:16:6e:42:d9:7a:8b:38:7d:ca:2a:
13:1b:3b:6d:08:8f:93:e8:d0:0a:c6:51:dc:ba:71:
f0:46:1c:4f:0f:5c:53:65:35:2e:2c:1c:8c:a5:84:
ca:b6:53:d5:60:41:90:a0:d0:69:df:eb:ff:00:6d:
e2:6d:2b:3d:39:14:cc:f2:24:be:79:d6:d2:94:0e:
1a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BC:F6:FC:AA:0C:45:17:B7:55:AA:8F:3A:1A:8E:D8:1A:FA:C2:E3
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a3:ba:5a:c7:da:03:ee:ac:c8:c2:64:6a:10:3c:56:11:f3:
ee:dc:b4:d1:34:6d:e3:f1:39:b4:b4:49:d9:cc:7e:f6:ca:ea:
4f:d3:23:a2:aa:93:08:ed:39:4d:9b:1e:bc:4d:a5:b1:88:06:
d1:0a:ed:41:11:ed:46:64:30:4d:95:a0:6c:07:82:5e:8c:f8:
58:21:80:af:e3:42:9d:26:6c:cf:56:4a:73:21:30:23:87:bd:
ed:9d:70:9b:0d:e3:73:96:09:df:8d:ac:2f:e1:6c:7e:73:40:
fc:3e:44:75:16:5c:98:21:25:68:7e:66:5a:00:4a:49:bf:26:
59:9d:a8:e1:c9:91:09:9a:a8:fe:3f:10:83:c6:41:b7:e9:94:
3b:b1:a8:fc:d6:c5:41:b2:94:81:5c:a4:d8:15:66:f2:c9:79:
68:7d:89:76:78:f4:48:66:d8:ec:27:11:e1:63:73:17:d8:a3:
c2:40:fb:7a:71:73:09:6d:8a:a7:e5:4a:20:af:95:ff:03:1a:
cf:84:2d:04:a2:77:79:0e:d4:60:fb:dd:5b:e0:63:07:20:55:
a4:be:08:74:04:3e:e9:41:e8:a2:14:df:66:bb:a1:14:29:c3:
76:50:a5:34:17:b9:c1:fb:c4:22:9c:33:97:dd:36:d2:39:8b:
ae:67:d7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:44 2025 by rpki-client