Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
File: r9rCQfMBCxrkhLwx9YStD50gZzQ.mft (raw, json)
Hash identifier: OJlK4J2Z1P9+ayAh+6hfsr0zS8gu8vHWJxh22d6uhyA=
Subject key identifier: F9:FC:9F:53:B1:74:61:78:68:59:D4:1B:56:00:EA:47:63:2A:0D:66
Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
Certificate issuer: /CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Certificate serial: 0197CB70EF480876157455C57508845F1FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
Manifest number: 0B86
Signing time: Wed 02 Jul 2025 14:01:05 +0000
Manifest this update: Wed 02 Jul 2025 14:01:05 +0000
Manifest next update: Thu 03 Jul 2025 14:01:05 +0000
Files and hashes: 1: Pyp3KZhgaPnGJ0klVfWstvZhAaA.roa (hash: 2zE2fETyOiknIdhnDsU5+xLMFz/vO5FngmYcWoMLhMg=)
2: r9rCQfMBCxrkhLwx9YStD50gZzQ.crl (hash: +dxhqfdUdUPG3VuUJHJ3soZfq7MM2qNEzEYFPIopJzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:70:ef:48:08:76:15:74:55:c5:75:08:84:5f:1f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Validity
Not Before: Jul 2 14:01:05 2025 GMT
Not After : Jul 3 14:01:05 2025 GMT
Subject: CN=f9fc9f53b17461786859d41b5600ea47632a0d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:ed:1e:96:bc:35:fe:f2:f2:eb:e2:c3:3c:
db:dd:d3:0e:66:cc:a7:40:5d:26:79:6b:af:2a:d0:
50:84:c5:bb:7c:7a:d0:28:70:c1:ae:fb:7c:c8:ff:
17:41:92:2c:72:da:b2:f1:4b:61:93:d8:3d:10:db:
92:e6:ab:b4:ca:28:86:13:ce:a4:7a:35:67:eb:a5:
8c:2b:87:e5:71:50:cc:e1:ad:15:d3:9d:6d:f7:e3:
6c:f5:92:22:0a:04:67:58:28:51:cd:ed:c3:ea:3c:
77:b9:32:4d:dc:b7:9c:1c:d6:e6:52:08:0a:88:59:
a0:cf:28:b3:53:00:9d:8a:ec:a7:7e:ed:3e:24:00:
f2:d5:ce:5e:7c:5d:41:42:f5:e1:fe:bc:15:d8:14:
44:47:b1:c4:42:37:dd:cc:60:b8:be:a0:2a:34:d0:
91:b6:0a:6e:46:42:8f:81:e2:0b:c9:c3:c6:ff:df:
38:39:27:65:4c:6e:a3:6a:2a:db:cd:0f:ba:87:cd:
c7:b4:6e:26:dd:55:16:14:6c:1a:e2:dd:26:cf:17:
d5:6e:77:bb:4f:85:4a:04:6b:61:b8:73:00:f1:9e:
cf:a1:fb:b9:43:84:90:7e:9f:b6:33:ec:41:0b:b0:
d7:0a:c7:a1:97:72:b5:bf:2c:0d:25:da:df:f7:df:
2e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FC:9F:53:B1:74:61:78:68:59:D4:1B:56:00:EA:47:63:2A:0D:66
X509v3 Authority Key Identifier:
keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:37:42:0f:a6:9a:88:cb:6d:a1:5b:10:82:4a:30:0b:ea:d4:
c2:87:2a:4c:8a:e5:ec:58:73:87:0b:90:df:82:f2:31:0c:f0:
f7:17:ee:37:f9:30:c3:c6:32:20:72:fa:63:54:2f:62:6e:59:
99:5a:77:cc:d0:10:ec:89:87:81:b2:be:67:69:db:99:a6:22:
64:59:79:71:0f:b9:ef:57:b5:5b:6c:e2:18:a2:70:a0:c0:ae:
63:f9:c3:cd:ec:20:2a:f4:10:47:fe:81:d5:d4:25:ab:ba:32:
fc:58:c0:82:4f:d2:e2:77:96:5b:fc:24:d6:ee:92:8b:34:80:
30:22:6e:be:e0:67:97:bd:1a:d9:de:a4:e1:69:7a:34:47:6c:
1c:dd:01:68:1a:93:f7:b4:88:34:33:c5:49:df:ee:dc:a0:79:
8b:0d:be:7e:9b:b5:46:58:36:61:45:4f:dd:99:1d:9c:15:2a:
cd:03:82:72:34:f8:60:de:02:a9:4d:cb:ab:45:6a:f2:ea:0a:
3f:a9:0f:24:cb:2f:1b:c2:b0:e3:07:d9:cd:02:f6:e8:24:25:
b3:00:75:c8:da:30:e6:fc:78:dc:11:6e:7a:17:14:d8:b0:d5:
4a:f1:00:0a:d6:9f:ac:3b:0e:dd:bc:7d:17:5a:f3:cf:d8:62:
35:6b:75:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:55:42 2025 by rpki-client