Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
File: f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft (raw, json)
Hash identifier: kTHRrdz8PqSLpVGyiRTIOG+seG3VKbEODhDkXQ5o694=
Subject key identifier: 9E:9C:22:49:9A:DD:BA:92:D5:55:E7:24:51:C6:DD:45:5E:A9:DA:0A
Authority key identifier: 7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
Certificate issuer: /CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Certificate serial: 0197BB8FAB0A906BE7E9AA2BF9182B0941B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
Manifest number: 113F
Signing time: Sun 29 Jun 2025 12:00:43 +0000
Manifest this update: Sun 29 Jun 2025 12:00:43 +0000
Manifest next update: Mon 30 Jun 2025 12:00:43 +0000
Files and hashes: 1: CrYUOPAFPEtuHkKyJhzQE8UrUoM.roa (hash: 9NqhKYyaxDuqPrOUEVd5P1RqZQxAPP5YeCq0DGdnu/4=)
2: f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl (hash: YASftePnaTLbw0ykQHFdt73QHQP0KkCbc/BSVvfvGcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:8f:ab:0a:90:6b:e7:e9:aa:2b:f9:18:2b:09:41:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Validity
Not Before: Jun 29 12:00:43 2025 GMT
Not After : Jun 30 12:00:43 2025 GMT
Subject: CN=9e9c22499addba92d555e72451c6dd455ea9da0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:92:29:b2:14:ab:fa:4f:e2:eb:07:d4:1e:5a:
7c:41:bb:a3:43:eb:36:c4:59:a1:50:d3:45:49:1c:
c9:26:f6:7e:24:d6:83:de:fd:f4:ca:b7:c3:f3:d8:
29:ca:de:17:db:6f:07:e7:2e:6e:e6:40:39:a9:6d:
9a:43:92:cb:02:c0:28:39:f6:30:e6:fa:f3:a4:8d:
59:e2:a6:78:bb:af:60:3f:22:21:8f:14:e1:56:ad:
b0:8a:ee:0a:67:08:c7:3c:72:91:c3:9b:93:6a:87:
67:32:a8:be:d0:34:0a:e5:74:4d:b5:37:18:0b:85:
9a:3f:09:64:f8:8c:d0:62:84:8b:21:18:94:33:49:
46:e6:e3:f2:bd:c3:83:48:7a:4e:68:25:7b:7a:36:
a7:b9:e6:0b:75:31:1b:de:1e:39:1b:2f:ae:f3:f5:
53:9a:26:d5:75:84:26:29:19:bf:9b:9e:ba:c7:8a:
e8:6d:8b:f8:62:eb:b2:37:c6:ec:ad:d8:f2:3d:d9:
b2:14:3a:94:d7:58:0d:50:17:49:38:d8:45:80:b2:
a4:3c:78:23:45:7d:7d:5f:23:7f:fa:ab:e4:fa:87:
27:1b:0e:d5:9b:a5:c1:dc:4a:51:f4:8a:63:ab:7e:
24:62:2a:54:07:92:53:c6:83:d2:54:72:26:d1:eb:
82:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9C:22:49:9A:DD:BA:92:D5:55:E7:24:51:C6:DD:45:5E:A9:DA:0A
X509v3 Authority Key Identifier:
keyid:7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7f:41:91:5f:f4:39:00:39:1b:9c:f0:ec:82:17:53:72:e8:
d5:ae:28:a7:e9:45:fe:1a:fa:b7:d7:7c:4d:6b:1b:9f:ed:c7:
4e:98:76:7d:8e:aa:52:8d:99:c0:97:2c:1e:71:aa:61:d9:ea:
54:c2:8d:d1:89:79:e6:95:0e:4f:d3:42:f4:5f:55:0b:9d:a2:
b1:88:d0:9b:18:61:ce:46:52:5a:65:a9:c0:ae:69:4d:cb:67:
61:79:c9:a7:a5:23:b4:69:66:09:3d:88:14:f2:cb:f6:b6:2f:
a9:79:34:9b:b3:94:ec:7c:4f:14:71:bb:9b:b7:aa:06:79:05:
a0:60:2a:75:0d:01:4c:a7:30:4c:4d:66:8b:86:32:df:4b:4e:
65:e1:ce:3c:d7:b5:0b:7f:9f:8d:9a:d8:9a:fc:c0:eb:e0:e5:
42:c0:a8:76:46:56:81:49:55:fd:3f:14:3c:b4:bc:17:fd:77:
9d:f9:2d:c2:93:76:ef:f3:09:2c:24:f9:09:bf:2d:52:fc:28:
a6:e9:87:13:a4:8b:d5:7e:17:34:6b:0e:4c:64:d2:03:4e:45:
a0:99:a8:42:5c:a1:ec:ad:ce:4a:7f:2b:a7:0a:ce:84:61:c2:
c0:58:08:26:73:03:8e:4d:f7:c5:17:e5:df:4a:aa:99:2e:26:
c7:d8:56:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:04:01 2025 by rpki-client