Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
File: 84t8pB9ACCKQyorv3sS9KX067Aw.mft (raw, json)
Hash identifier: pj0SAjsz/Qx0MHRtud6FNw80kBTbOfJy8NDrGH9MKgs=
Subject key identifier: 9E:35:90:B3:5F:E2:F8:25:CF:18:C6:88:D3:2A:38:CC:79:B6:BB:E1
Authority key identifier: F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
Certificate issuer: /CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Certificate serial: 0197B6D79946536BA59BFDBDD9AE64C041A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:01:12 +0000
Manifest this update: Sat 28 Jun 2025 14:01:12 +0000
Manifest next update: Sun 29 Jun 2025 14:01:12 +0000
Files and hashes: 1: 84t8pB9ACCKQyorv3sS9KX067Aw.crl (hash: A9RPQO6YVWan52qza+VEGJduthOtPCGnrfdN01ZP5uE=)
2: RTINrk5K9twShi2ws8-7GReQguo.roa (hash: AdVChkjeYt7VqV92ZVz1KihOag+zBOsNiMEkZJtbBCI=)
3: XjFi2Cntd0oPDO451MBhOtZCDnM.roa (hash: 7dr7flPYIycOqvdbpZ43N5qce8PY6ub0N0ZeKnZ45bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:99:46:53:6b:a5:9b:fd:bd:d9:ae:64:c0:41:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Validity
Not Before: Jun 28 14:01:12 2025 GMT
Not After : Jun 29 14:01:12 2025 GMT
Subject: CN=9e3590b35fe2f825cf18c688d32a38cc79b6bbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d6:a6:cf:53:82:08:80:11:9a:dc:de:a4:e8:
14:4b:76:db:0a:f5:34:b7:45:ce:10:90:59:d5:ca:
77:5a:ad:0e:9e:79:1a:3c:b9:b8:d0:ed:81:d6:de:
f2:f1:d1:3f:1c:3e:03:63:a2:6f:c1:78:2b:4b:31:
c1:c0:82:43:25:c5:cf:df:f0:ca:91:a3:14:cc:76:
ac:2e:9d:b2:9d:06:b9:a0:88:3c:d2:01:4b:f6:45:
16:b2:50:ea:e2:97:ae:34:36:9f:94:b5:09:b5:d2:
26:9f:ae:22:76:24:e2:03:97:49:f9:80:44:1e:19:
db:b3:9e:21:6d:c1:89:01:bb:c2:43:a8:b4:1f:7a:
60:2c:2e:aa:18:02:1f:c0:3f:87:77:0b:19:20:39:
3e:67:dd:6f:6a:e0:b2:40:aa:d1:65:dd:e7:f9:8b:
02:04:13:be:a1:bc:32:5e:30:8c:a0:94:c2:64:99:
32:1f:13:e8:7b:c5:f8:77:9a:f6:09:48:79:54:54:
90:d9:11:6f:f2:71:3a:24:1d:31:dc:07:5e:e6:2f:
99:8a:34:e3:c0:95:86:07:93:70:61:57:d1:7e:26:
c6:63:89:37:4b:d7:c5:fc:92:e8:b0:16:e1:15:28:
a5:ed:69:0d:6d:e1:d7:21:7e:62:83:b7:7c:5e:84:
4f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:35:90:B3:5F:E2:F8:25:CF:18:C6:88:D3:2A:38:CC:79:B6:BB:E1
X509v3 Authority Key Identifier:
keyid:F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a0:c9:02:33:64:a5:0c:50:e1:3c:04:58:0c:bc:c4:c4:e3:
11:4f:4f:31:f9:7f:67:00:9f:14:5a:e5:bf:98:d9:58:28:94:
b9:05:44:31:6e:03:91:fc:38:70:c0:c7:53:1c:84:0f:05:1e:
89:38:50:c2:27:b4:4d:62:a8:b7:a3:64:5e:1c:16:c7:fa:9f:
2d:c7:11:31:c3:86:2f:ce:15:35:25:36:60:0a:5c:1f:7e:4d:
96:da:41:59:45:8e:f2:56:2a:16:c3:b1:df:2a:d2:99:57:0d:
29:80:71:0f:2a:9d:ae:a8:b3:1b:d1:47:42:58:89:40:42:e5:
ac:e9:be:95:f9:e5:8d:13:34:cd:0e:b6:9c:b5:96:6a:ba:c9:
2b:fb:82:4f:6d:c0:74:ca:75:36:f0:29:54:1a:78:ab:0d:3c:
f9:3c:34:94:77:0f:70:ba:8c:5c:2a:1a:62:e0:0f:ed:df:64:
d2:92:68:7f:36:fa:6e:cb:12:77:9d:b2:e6:93:4b:6d:5e:05:
88:9e:f4:ab:83:26:51:c3:cd:1e:1c:1a:6a:18:da:82:e2:d5:
91:8c:08:e0:fa:fb:05:7f:8d:5f:9c:5a:a6:f8:36:16:49:f0:
85:5e:68:33:dc:41:4f:bb:90:c5:7b:76:de:79:41:9b:2f:94:
19:7d:bb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:53 2025 by rpki-client