Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
File: m9ReJgecMchSFrcwDNjmMw1D1a8.mft (raw, json)
Hash identifier: 5pUZ9hRjSRaGTPJfbVoyVIsmuwssJ01qefis7mjdehw=
Subject key identifier: 7F:1E:EB:FE:E7:5F:67:20:C5:16:ED:B8:A7:FC:F6:28:C9:62:1B:78
Authority key identifier: 9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF
Certificate issuer: /CN=9bd45e26079c31c85216b7300cd8e6330d43d5af
Certificate serial: 0197BA0F38E33CA77D16231C26782398440D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
Manifest number: 47
Signing time: Sun 29 Jun 2025 05:00:49 +0000
Manifest this update: Sun 29 Jun 2025 05:00:49 +0000
Manifest next update: Mon 30 Jun 2025 05:00:49 +0000
Files and hashes: 1: f1BUILnewKi0pPk0-cUIO9sX1N4.roa (hash: upOHsTvU2HpEvGGaQw5H57ty1Pp8ZO03Lz1+b3tzvFA=)
2: m9ReJgecMchSFrcwDNjmMw1D1a8.crl (hash: 4F9BCLOJNfmfpqHoIXlOKU6yatYSslcKaXFgGSyUaC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:38:e3:3c:a7:7d:16:23:1c:26:78:23:98:44:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd45e26079c31c85216b7300cd8e6330d43d5af
Validity
Not Before: Jun 29 05:00:49 2025 GMT
Not After : Jun 30 05:00:49 2025 GMT
Subject: CN=7f1eebfee75f6720c516edb8a7fcf628c9621b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:84:ea:fe:1a:22:f7:eb:de:89:14:f1:ce:98:
08:1f:34:10:b6:34:35:dc:6e:c8:a8:2d:00:fe:c1:
6d:12:d1:53:5a:e7:d3:1d:1e:1a:61:1c:26:80:30:
6f:d7:a2:d1:3e:b6:37:42:56:f8:5f:18:64:c7:78:
1c:ae:49:26:f5:19:74:ec:3a:ff:f4:9f:92:3b:21:
a3:b5:70:0d:fb:2e:54:a7:b3:6b:11:e8:55:79:1f:
40:b2:36:50:f0:a8:ce:1a:48:8b:45:53:c0:b2:ad:
f6:4a:c6:f4:b7:4e:30:a8:e5:8e:90:81:50:68:60:
a9:d1:89:0d:76:9c:36:f1:55:36:94:ed:c1:f0:07:
41:17:62:64:e9:12:0c:fa:67:15:c0:31:e6:a4:35:
d7:0c:7e:d5:70:db:b9:aa:cf:3e:52:0c:d6:48:76:
5f:5c:1f:cb:0c:41:2d:97:a0:66:0a:8b:80:68:08:
28:cf:2c:d9:5a:9f:8a:84:d2:58:68:9b:40:b2:73:
60:b6:f9:be:70:7b:a0:e5:e7:aa:0d:80:8c:4b:46:
09:57:34:bd:50:9c:59:65:82:1b:ed:70:e0:ce:58:
27:37:99:bb:a0:e2:a4:5c:ac:ab:11:c2:f0:91:4f:
ff:57:5e:d2:02:20:a5:d4:3a:5b:52:2b:e6:cc:1b:
5c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1E:EB:FE:E7:5F:67:20:C5:16:ED:B8:A7:FC:F6:28:C9:62:1B:78
X509v3 Authority Key Identifier:
keyid:9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:03:e3:06:01:87:6b:32:fa:94:d8:63:b3:36:ec:50:e6:6e:
f9:d3:0c:7a:db:1d:b8:4c:e2:a2:56:7a:57:5d:bd:58:32:9c:
df:62:54:fc:ec:1c:29:86:79:2d:9e:c1:aa:48:18:28:7f:86:
c7:e6:7c:0f:78:b1:79:fa:de:aa:18:67:38:e5:5a:3d:50:ac:
44:e4:a9:57:93:fc:ef:2a:65:33:c6:81:af:88:62:fc:75:ff:
95:fd:23:d9:d6:22:ad:7c:1a:d7:be:07:6a:4a:88:e7:4b:5a:
a6:e8:c7:1a:91:da:60:7e:2b:12:d0:ba:16:ca:96:60:1b:20:
7d:8e:4c:65:22:a5:4d:0b:89:49:a0:15:ca:25:36:2d:42:a7:
70:af:93:1d:9d:19:4e:a4:92:ea:1e:3c:49:1a:eb:c1:1b:51:
8c:e0:50:75:c4:55:ca:d9:65:c8:f3:ea:e7:88:e1:96:3f:cd:
97:d3:06:80:13:65:21:c3:81:55:c1:86:d7:91:0f:ff:cb:e7:
2e:14:cb:8b:18:f3:3a:17:cb:4a:6a:0a:60:a3:a9:be:74:ec:
71:58:ec:32:65:88:ad:ab:ae:64:06:16:8c:9c:b1:ad:43:8a:
fc:a1:19:e7:f1:84:58:d1:8d:4f:0c:75:17:b4:05:df:5c:55:
5f:04:5e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:28:19 2025 by rpki-client