Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
File: 9zHDObGGFyK__oZyGDFM4SlcPIU.mft (raw, json)
Hash identifier: hiWJExKuSPGTnkzgbzGjMo9I2moe3ONzeBIE4sW5vx8=
Subject key identifier: 66:B7:01:35:A4:CB:FB:09:12:DB:F8:45:65:D1:D9:F6:D4:52:2E:E0
Authority key identifier: F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
Certificate issuer: /CN=f731c339b1861722bffe867218314ce1295c3c85
Certificate serial: 0197B70E70F81EBD6F1688A9E4386DDC49B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:06 +0000
Manifest this update: Sat 28 Jun 2025 15:01:06 +0000
Manifest next update: Sun 29 Jun 2025 15:01:06 +0000
Files and hashes: 1: 9UQ0_3_mS41_iKwg1qjiuH2k8kg.roa (hash: kiU7QM0C1mwEaOQNcthFFJZevyv4iXHm9WMDBPMiwH8=)
2: 9zHDObGGFyK__oZyGDFM4SlcPIU.crl (hash: 8uOillZQeRWQwuM67wlUXKb9TEzY5rbhPCbg3cB8g0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:70:f8:1e:bd:6f:16:88:a9:e4:38:6d:dc:49:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f731c339b1861722bffe867218314ce1295c3c85
Validity
Not Before: Jun 28 15:01:06 2025 GMT
Not After : Jun 29 15:01:06 2025 GMT
Subject: CN=66b70135a4cbfb0912dbf84565d1d9f6d4522ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:77:0e:ee:92:a5:af:6a:2e:bd:0a:1b:08:41:
56:df:a9:f3:a0:5d:7f:8c:6e:e7:79:e7:fd:9a:e5:
5d:db:19:5f:2d:18:81:d1:2f:38:85:ab:f4:64:37:
b9:a9:fd:fb:16:45:0b:ed:eb:d0:db:ad:63:31:2e:
20:8f:fb:56:33:ff:14:c8:4d:2e:3c:4a:0f:b3:52:
82:0c:d3:01:8c:63:71:43:a5:43:7e:8d:0c:a4:ef:
2e:a8:77:6d:6c:ee:6e:6a:94:1d:a6:94:d8:a4:30:
90:6e:99:80:38:4f:ef:7a:38:8d:bf:06:07:aa:21:
3f:3e:16:a5:95:ea:33:85:89:a8:b2:40:5b:06:76:
e2:ac:11:d9:17:9d:5a:d0:38:6e:e1:78:18:15:bb:
6c:39:f1:5b:8a:f0:fa:88:b2:78:98:08:bd:74:83:
94:f8:c1:43:e7:d2:83:b7:42:ee:46:92:e3:dd:27:
ac:94:55:54:ab:c5:be:ef:03:c4:d1:02:dc:9f:e1:
07:16:3a:47:03:2a:42:87:f0:77:a5:2a:77:b7:d5:
f8:dc:16:b2:e2:93:eb:34:aa:8a:f1:04:4f:86:56:
2a:2e:3d:20:85:2f:7b:ec:71:c2:bc:c1:6d:d7:69:
37:20:bc:a0:77:84:1c:fa:cb:06:3a:a9:c5:ed:3b:
6f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B7:01:35:A4:CB:FB:09:12:DB:F8:45:65:D1:D9:F6:D4:52:2E:E0
X509v3 Authority Key Identifier:
keyid:F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1f:82:e4:30:89:0a:fd:e6:ed:c3:46:a4:ac:7d:43:eb:15:
67:0d:8e:0d:8b:6a:80:27:6a:52:79:2b:a8:29:40:c3:0c:8e:
8f:99:e8:cf:a7:15:8f:d1:3d:93:6d:18:95:21:8d:23:02:4a:
01:b1:39:fb:f7:cc:e0:d1:78:79:fc:5f:45:d3:3d:e9:45:d0:
9e:fa:23:ce:e9:6f:a3:2f:20:ac:40:97:76:44:48:4b:13:8f:
d2:6e:1f:ea:46:bd:ae:1e:a3:99:07:14:4a:41:1e:55:72:f5:
05:3b:2f:7a:0e:00:eb:c3:53:61:20:b7:25:0a:12:1a:7d:db:
b9:20:05:c0:2e:61:ed:09:01:e5:a5:4f:b0:5b:76:88:af:02:
66:22:15:66:ae:1a:c0:d7:b7:89:46:6e:91:2a:cd:52:aa:b8:
df:e8:22:0b:b0:77:28:9c:16:74:16:1d:76:74:88:65:06:2e:
9e:82:a5:22:0a:30:16:62:ab:5f:a6:18:67:6b:06:3d:89:9e:
23:fc:92:9a:da:c8:3d:27:29:5c:04:c1:1c:5d:00:8b:85:ba:
f7:fa:86:d1:2d:25:fb:cc:bc:7c:b8:87:13:b5:bc:38:1e:a4:
07:d4:ac:c8:da:b1:62:59:ee:16:16:d8:8b:b6:85:01:6b:cf:
56:75:4d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:49 2025 by rpki-client