Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
File: 9q2iC9mLq990w9Vs14raZu2HoUg.mft (raw, json)
Hash identifier: U2SrKfResRyzuyjlZ1rGe+qbbx/l+Avn1sDc3tDlLJA=
Subject key identifier: 79:5B:FA:62:52:FD:E2:91:0F:1E:D5:30:FA:59:57:E4:F3:78:95:58
Authority key identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
Certificate issuer: /CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Certificate serial: 0197B8FD7D8BF56AD4AB2EDB11C9AFA49213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
Manifest number: 097D
Signing time: Sun 29 Jun 2025 00:01:49 +0000
Manifest this update: Sun 29 Jun 2025 00:01:49 +0000
Manifest next update: Mon 30 Jun 2025 00:01:49 +0000
Files and hashes: 1: 9q2iC9mLq990w9Vs14raZu2HoUg.crl (hash: b3JovztYBpmhRRz4/WJ0ui8P5H1WVQfTsLaa05YTunk=)
2: s-x7d6jJvL70qmh-6OnRq31TKUk.roa (hash: 2DbOtbQA27lHr7qNRTboKovEtkv/3fhOLEwI/H6E4D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:7d:8b:f5:6a:d4:ab:2e:db:11:c9:af:a4:92:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Validity
Not Before: Jun 29 00:01:49 2025 GMT
Not After : Jun 30 00:01:49 2025 GMT
Subject: CN=795bfa6252fde2910f1ed530fa5957e4f3789558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:86:06:15:c2:0b:33:1f:a1:10:4a:5e:76:
c7:7f:6b:56:c2:77:ef:a0:1c:55:9b:d3:49:02:b0:
18:8d:79:63:f4:03:f8:fc:f9:26:91:04:05:fc:0a:
ef:80:8b:ee:ce:65:bc:9f:72:53:61:8e:ca:bf:f0:
f1:d9:8a:fe:4b:32:94:e3:69:09:d3:b1:7b:0b:a8:
82:39:23:cd:58:59:56:3c:6a:46:dc:84:16:37:ab:
0a:ab:16:75:3d:7e:7d:8d:eb:93:c1:c7:2c:b8:67:
ba:ec:8e:4c:5f:03:63:98:c4:b7:86:3c:e3:d9:9f:
92:0f:d3:32:d2:8b:ac:aa:61:28:ad:22:a9:62:76:
af:7d:e5:1e:1b:bc:2e:47:86:7f:03:8b:30:79:80:
a7:a3:ac:6b:88:e3:d6:7f:17:66:aa:aa:b3:62:83:
a1:d8:65:4a:47:c7:5b:c0:81:42:d4:dd:68:b8:e0:
61:d7:73:e9:58:6a:03:65:a8:cd:8f:d1:09:ae:77:
d0:7f:8e:92:86:4d:50:3a:e6:00:0e:87:24:a0:45:
24:f8:12:03:14:37:a2:ca:7c:f3:bf:94:fa:17:5f:
4c:85:a7:a5:0e:e0:00:82:3c:83:af:8a:81:c1:d2:
76:eb:8c:4b:7f:94:46:35:15:6d:e4:bb:10:2b:f4:
59:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5B:FA:62:52:FD:E2:91:0F:1E:D5:30:FA:59:57:E4:F3:78:95:58
X509v3 Authority Key Identifier:
keyid:F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c2:dd:8e:c7:45:eb:c4:b5:51:ee:96:88:58:9a:1a:e6:9b:
6b:22:c9:92:81:da:13:47:67:16:48:8b:ee:18:6b:04:17:13:
28:ee:56:5f:97:7f:6d:9f:ce:72:89:df:91:5b:30:12:0b:9d:
df:32:09:1b:7d:75:6d:44:99:e5:95:34:7c:af:ad:86:b7:51:
e7:d0:6f:c4:0e:92:2b:a7:cf:83:f9:6e:95:05:0e:36:45:df:
67:a9:2e:78:b4:20:e7:cf:d8:4d:3f:1d:c6:3d:6f:d2:7e:d2:
d6:78:9b:22:04:08:53:a7:24:4c:a1:00:eb:2e:74:5c:b8:f1:
35:b9:dd:0e:be:37:61:8e:a6:bb:be:c8:1b:6d:dc:95:07:30:
5f:e5:f7:6b:b3:ef:61:c2:b1:eb:1f:2c:ee:2b:3d:7b:1f:9d:
3e:2b:59:27:2e:14:94:81:86:6d:a4:77:cc:85:84:b0:8b:e9:
90:6d:8a:d8:51:f3:dd:16:6a:3e:6e:73:86:42:6b:d0:8c:04:
d5:14:c8:bf:42:5a:e0:01:5f:7f:81:80:68:a0:24:50:29:5a:
df:cf:b3:80:5a:c3:02:73:3c:6b:f0:4a:14:6d:a1:f4:90:46:
86:0e:0d:7f:a3:a1:bb:f8:8a:cb:4b:28:30:3b:a2:94:7f:bc:
b4:38:2a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:30:40 2025 by rpki-client