Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
File: t09j_Q3Bl-Uq0nInbEDT7kux15k.mft (raw, json)
Hash identifier: np0J+JbOkVyyHmGiQvdQU0pR0J7dgClcUMCek/4TJ+Y=
Subject key identifier: 9A:6A:33:3B:9D:49:4F:7C:EC:D3:53:EA:18:8E:FD:D2:9C:BD:8B:23
Authority key identifier: B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
Certificate issuer: /CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Certificate serial: 0197B6A0DA50CE5C445F3B269047D345EC43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
Manifest number: 1358
Signing time: Sat 28 Jun 2025 13:01:24 +0000
Manifest this update: Sat 28 Jun 2025 13:01:24 +0000
Manifest next update: Sun 29 Jun 2025 13:01:24 +0000
Files and hashes: 1: CTtxM-1YJnI7s2CeXEI8bJGchw8.roa (hash: m3vS1eOhVy8HVysz20rw/64QS2NyFhJNMyCoI4Eqes4=)
2: t09j_Q3Bl-Uq0nInbEDT7kux15k.crl (hash: yJlGW26oJUECNkNDXg3Ut2Nfv8zqaX4Cpfsl8PvNgV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:da:50:ce:5c:44:5f:3b:26:90:47:d3:45:ec:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Validity
Not Before: Jun 28 13:01:24 2025 GMT
Not After : Jun 29 13:01:24 2025 GMT
Subject: CN=9a6a333b9d494f7cecd353ea188efdd29cbd8b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:23:69:ed:5c:9e:19:b3:e3:c6:f2:4b:8d:
59:fa:f6:5c:90:72:c2:d4:03:77:f1:a6:c7:84:a5:
41:85:ec:80:28:3f:b9:57:c2:7d:99:9b:07:6e:fd:
ca:07:5d:51:e6:66:98:fd:1d:c1:38:b0:6b:02:74:
d0:ff:87:35:33:8e:5b:dc:cf:cb:af:15:ce:9b:b4:
a2:60:81:c8:b0:20:d0:37:03:d4:6c:33:dc:40:45:
d1:6c:b7:b2:9c:68:ba:a0:1b:1c:d2:24:1a:72:32:
67:79:76:3e:0b:00:4a:1a:5b:e9:cb:20:45:f1:24:
ef:35:f1:79:51:f4:a7:04:43:5f:f4:17:59:58:17:
06:2f:01:e8:37:21:9a:18:4e:1c:98:98:ca:61:d1:
72:8a:9a:ae:5e:8a:cf:4c:2f:c0:2c:9d:8b:11:3a:
5b:1f:64:a5:d6:85:e4:b9:54:9f:d0:45:28:46:e6:
63:58:6b:e4:60:3c:fa:ac:d0:4e:a7:c6:4e:7d:bd:
38:48:1b:77:7e:47:6a:a3:53:24:93:55:58:6d:5a:
c0:8a:dd:4a:0f:9c:68:ad:6e:c7:db:0f:95:b3:91:
c9:27:fa:cc:12:8d:4a:f5:c5:f3:4f:3a:f6:0b:e1:
d9:05:36:ee:c4:13:62:24:1b:70:75:b1:ae:bb:b5:
6b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6A:33:3B:9D:49:4F:7C:EC:D3:53:EA:18:8E:FD:D2:9C:BD:8B:23
X509v3 Authority Key Identifier:
keyid:B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:28:d3:24:d7:24:06:1d:2e:d2:fe:fe:ab:f4:c0:fd:1e:2b:
e2:bb:f1:3a:cb:8b:21:d6:68:e7:ad:7b:10:98:b8:11:3d:f6:
56:1f:b4:64:9b:8b:9a:6b:ab:f3:81:13:02:dc:d7:d7:b3:77:
e7:b2:a6:e9:64:36:e4:54:c6:55:ff:9e:54:83:a0:2c:72:40:
e1:43:c4:0c:a0:ff:c2:81:0b:2b:7c:a9:09:03:3e:83:f4:3f:
68:03:5b:6f:91:81:46:98:68:62:91:b5:a2:7d:47:ac:e2:c1:
b0:bc:5d:cb:0c:5c:33:de:26:2c:f7:e1:47:91:f9:c2:70:3f:
e8:be:00:73:6b:2a:99:36:78:66:02:c0:5e:6e:fb:4e:a2:91:
3a:23:e9:9d:76:d1:2d:55:8e:da:32:53:9d:a8:6a:f7:35:d2:
2a:52:3b:b0:01:8a:ef:e9:95:d5:bc:eb:7a:72:b1:77:cc:a5:
ca:7d:ac:ce:82:f0:7e:b1:cb:5e:f4:7a:b7:e6:f0:e0:6a:cd:
6f:64:e0:14:5e:c2:cb:56:a1:63:b0:cc:3b:13:97:3f:e5:ab:
a3:bd:53:ff:03:69:12:aa:85:28:2f:32:56:32:47:9a:cd:64:
15:39:2c:16:12:21:13:38:4c:9e:ae:75:04:1a:e1:d5:03:0c:
0f:12:5f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:50 2025 by rpki-client