Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
File: 9-CSr_r5tUhOAJmap_HO8ax7QJM.mft (raw, json)
Hash identifier: yaEA3R/R8HT0GRtOt1CvEcNlUuOzeOewFJINn48tdPY=
Subject key identifier: B8:59:AE:90:87:89:70:2F:13:EF:93:04:DB:17:6C:DE:F6:34:5C:9E
Authority key identifier: F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
Certificate issuer: /CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Certificate serial: 0197B6D79BDE364A44545B3BC8F0AF0024C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:01:12 +0000
Manifest this update: Sat 28 Jun 2025 14:01:12 +0000
Manifest next update: Sun 29 Jun 2025 14:01:12 +0000
Files and hashes: 1: 9-CSr_r5tUhOAJmap_HO8ax7QJM.crl (hash: 368DRabsw0VMY4N0yLaWFvyq61WRmy7m84kH08ONzYg=)
2: heOGsEgwvnx0rV_PQ-KerQ9C-CY.roa (hash: sP+8nNNKaPD0x4Bknlm6WIvlRad2W4u8N2Xxii0xN0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:9b:de:36:4a:44:54:5b:3b:c8:f0:af:00:24:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Validity
Not Before: Jun 28 14:01:12 2025 GMT
Not After : Jun 29 14:01:12 2025 GMT
Subject: CN=b859ae908789702f13ef9304db176cdef6345c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:1e:b3:c9:db:4e:70:d4:08:72:78:44:ae:
30:dd:7d:64:56:ae:36:c6:07:ba:20:71:71:9f:b2:
84:33:92:9c:42:62:a6:95:57:d2:70:63:33:b8:64:
5c:33:37:a2:64:9b:de:b1:69:ba:48:0e:e8:b4:08:
6b:dd:86:da:f7:b7:d7:87:99:c6:12:ab:04:96:41:
52:ec:f2:db:41:38:e6:a8:45:11:df:4e:cc:69:c5:
0d:b5:83:30:29:ab:07:ef:80:69:f5:11:c2:13:0a:
6d:0d:a6:57:7b:b0:ec:5e:29:d3:27:ea:84:20:e9:
87:57:99:1b:f2:45:46:e7:f2:fd:f0:1f:a8:dd:20:
3a:0f:45:ea:7f:bf:6e:14:b7:5d:10:9a:6b:2b:f9:
a2:d0:80:6f:52:06:2e:c9:66:16:77:97:5a:f7:64:
ac:19:18:fc:0e:d4:30:2f:04:04:c0:7c:e0:33:35:
3e:21:34:5d:f0:b4:26:67:8e:82:00:5b:3f:cf:1b:
1a:08:b9:97:65:bd:80:51:72:a7:b8:b2:11:37:e3:
18:fc:cb:40:ff:7a:d5:f2:35:dc:5a:8c:ac:f0:e6:
2b:8a:e7:ae:4e:21:db:24:67:fd:b1:4e:cf:dd:6e:
87:bb:14:cb:36:fe:a3:f5:10:e6:58:e6:c9:8b:ce:
c9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:59:AE:90:87:89:70:2F:13:EF:93:04:DB:17:6C:DE:F6:34:5C:9E
X509v3 Authority Key Identifier:
keyid:F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6a:ef:7d:62:51:84:5b:92:34:52:d2:db:01:a6:af:82:4a:
11:52:7a:28:7e:52:e6:aa:45:9e:7a:89:1b:e6:86:31:66:e5:
d4:85:6d:60:65:a6:e9:96:84:04:6a:39:a8:e8:35:09:2c:27:
4f:c6:f8:97:65:98:12:8e:59:0e:04:6d:50:d7:03:1f:96:c9:
44:64:2a:cf:5c:16:ad:81:9c:31:ac:60:02:bd:41:79:47:ac:
77:02:e3:c0:5e:de:03:11:7e:8a:6d:57:97:ff:26:f7:6e:b9:
70:0f:eb:0e:74:60:25:63:af:48:5f:fb:07:b1:df:c8:62:45:
74:7d:7b:9a:8f:32:cf:7a:75:cd:66:73:c1:e4:5f:bc:d8:28:
d3:ed:a9:28:56:6c:11:ab:cb:7a:56:bc:ea:ed:df:04:fd:1e:
d4:3d:24:05:07:80:22:f3:2c:1d:e8:94:a0:b7:27:fc:8e:b0:
fd:1e:da:83:07:d2:2a:61:1f:67:20:cf:3c:38:1a:cb:3d:d4:
51:72:c0:c2:47:90:07:23:21:bb:c2:d8:8a:31:13:b6:46:59:
96:94:ba:f3:28:1e:64:00:4f:9f:09:f8:38:23:a0:9e:92:f2:
bd:82:f1:cc:8a:e4:7c:4c:48:6e:cd:b8:9f:56:03:26:4f:a3:
84:54:27:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:41 2025 by rpki-client