Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
File: 9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft (raw, json)
Hash identifier: iLgCIz181t5GYYAZ8qyhPESxH3I6zdfHevUhNKqoeZQ=
Subject key identifier: 31:01:13:31:16:EC:98:01:7A:8C:44:83:E5:F5:0E:BE:60:D4:95:6A
Authority key identifier: F7:AF:76:98:9E:D4:64:FD:9A:54:89:FF:F7:FB:98:CC:2D:2F:93:E4
Certificate issuer: /CN=f7af76989ed464fd9a5489fff7fb98cc2d2f93e4
Certificate serial: 0197B5FC1DF2292EEBA67C8B11BF77407807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
Manifest number: 0CD1
Signing time: Sat 28 Jun 2025 10:01:28 +0000
Manifest this update: Sat 28 Jun 2025 10:01:28 +0000
Manifest next update: Sun 29 Jun 2025 10:01:28 +0000
Files and hashes: 1: 9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl (hash: kgRSnVup1awK6flw/RgWDaX/sXouLIoqfJIsQr4A58k=)
2: ebpSJwwODthJSAtEhWxsuE5jmWc.roa (hash: DHoxuM9A5djnyMyGDG3UGPu6tBxqwYzj6AbU5sL1Pg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:1d:f2:29:2e:eb:a6:7c:8b:11:bf:77:40:78:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7af76989ed464fd9a5489fff7fb98cc2d2f93e4
Validity
Not Before: Jun 28 10:01:28 2025 GMT
Not After : Jun 29 10:01:28 2025 GMT
Subject: CN=3101133116ec98017a8c4483e5f50ebe60d4956a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5e:9d:0c:c8:81:96:99:0f:22:f9:14:d2:53:
e6:bb:16:e7:fa:17:0f:f2:02:60:53:7c:c2:8c:d4:
3e:18:60:b2:cf:7b:ff:a0:a4:36:8a:cb:35:2c:fe:
1b:d1:0d:9b:25:e7:8a:5d:09:0b:97:f0:9b:a0:f7:
19:77:b8:6f:b5:85:07:5d:3c:27:eb:72:45:e9:13:
50:00:87:01:1e:8a:ce:24:d0:0a:4a:cc:b7:55:a9:
5e:47:3e:76:61:9c:13:c9:98:ad:38:2c:bc:b9:f7:
5b:49:d5:40:1c:00:dd:42:6e:0d:77:11:7e:67:e0:
4c:59:84:b1:a1:db:bd:d7:8b:da:b2:55:8a:0e:06:
0a:47:6c:b2:c0:2b:a3:72:d2:a8:77:35:19:95:88:
a9:4f:7e:18:bf:9b:46:72:47:ec:e7:59:ca:5a:38:
91:eb:2c:58:7a:60:62:99:ec:71:99:8d:af:8d:33:
c6:e4:a8:0d:a9:7a:ba:e6:8b:d5:4a:8f:71:bc:cf:
d9:3c:55:76:4b:4b:5c:68:21:ed:a3:65:76:0b:bf:
8f:7e:6a:56:c8:ee:a7:64:dd:26:39:6c:4d:3f:73:
d3:a5:7f:ac:8c:f7:e1:4b:95:e2:1b:55:c3:79:51:
9b:1e:0d:f6:43:1b:94:97:11:cc:14:01:e1:d6:8f:
7a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:01:13:31:16:EC:98:01:7A:8C:44:83:E5:F5:0E:BE:60:D4:95:6A
X509v3 Authority Key Identifier:
keyid:F7:AF:76:98:9E:D4:64:FD:9A:54:89:FF:F7:FB:98:CC:2D:2F:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7f:cc:7c:a8:59:c1:e6:cc:6e:af:ba:8d:5f:4e:b0:e0:c7:
e4:8d:08:77:cc:5f:78:88:0f:e2:57:1c:37:6a:cb:a2:68:3d:
fd:22:d5:9f:e6:a9:a7:20:1f:64:ca:44:08:cc:92:9e:82:25:
e0:a3:ca:08:a9:83:0b:de:5b:bd:95:38:b9:70:5c:f1:96:55:
53:53:fd:d1:cc:27:cd:ce:6a:88:a6:93:8c:b7:b2:cc:41:41:
3a:49:cb:9b:fe:15:a0:d6:51:6c:15:d7:c2:ae:3c:8b:5b:c7:
0a:fb:5a:fb:c4:80:d2:6f:b4:1f:56:0d:32:c4:be:94:79:a1:
fe:ff:78:0b:a5:a5:d5:1f:40:1d:35:11:ae:24:f8:37:54:e8:
ed:11:1e:ff:e6:79:4d:1b:3f:34:83:f8:eb:22:03:20:08:01:
9f:01:2e:7d:fd:96:f7:6b:0c:16:05:5e:97:5e:ce:a8:ff:b0:
48:2d:d2:63:6d:11:09:46:fa:a9:e3:48:30:47:23:e8:49:0d:
84:ed:99:7b:e2:dc:75:78:15:9c:1c:c9:d4:1a:d5:fa:66:34:
64:35:3c:63:cd:0e:96:e9:1e:6d:a9:19:0d:8a:82:7b:7e:ef:
aa:fc:a3:a3:73:69:0a:23:1a:89:f6:03:24:27:de:aa:8e:6d:
ab:a5:cf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:39 2025 by rpki-client