Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
File: p2q9qQNG0MrSXcpvdFC8z40I53E.mft (raw, json)
Hash identifier: fbuW+r0WbSxq0FmBuxTlA7tLnvrjLnWnOvgpOuT5ssU=
Subject key identifier: 73:EC:C9:D4:DC:2E:6F:D4:D7:D0:4D:2F:E9:EB:DA:F0:92:3F:AA:EC
Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
Certificate issuer: /CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Certificate serial: 0197B6D747CF42F2B20478035DAFA6BD57B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
Manifest number: 0C97
Signing time: Sat 28 Jun 2025 14:00:51 +0000
Manifest this update: Sat 28 Jun 2025 14:00:51 +0000
Manifest next update: Sun 29 Jun 2025 14:00:51 +0000
Files and hashes: 1: MzC4INKIsgRwDzo9x7bkUxRAB1c.roa (hash: Uid11k3HN0TXoHFcev6gIuzNP6/XOwG1nE/1TIUrcps=)
2: p2q9qQNG0MrSXcpvdFC8z40I53E.crl (hash: Qe+D34GjptH2S68Iecbf61KREV1TJHuIT939Hy8ZXLw=)
3: qo2a4lO3f4INhuJwHg-a_kb1Uw0.roa (hash: Mq/0MPb+8DLoVQSsA/LmGY9yMeYe1hfS1EX+C5wkfg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:47:cf:42:f2:b2:04:78:03:5d:af:a6:bd:57:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Validity
Not Before: Jun 28 14:00:51 2025 GMT
Not After : Jun 29 14:00:51 2025 GMT
Subject: CN=73ecc9d4dc2e6fd4d7d04d2fe9ebdaf0923faaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3b:17:d0:ab:ea:75:f4:57:a0:e6:16:fe:cc:
c7:2f:5e:59:45:de:80:9b:1e:b7:c8:27:dd:f6:4c:
ac:40:d2:c8:55:0a:be:1c:c7:1a:4c:cc:f1:73:59:
5b:f7:98:94:93:eb:87:2e:99:a9:f0:26:cf:17:16:
fc:9d:de:0c:fe:92:d5:52:c0:4b:15:26:c2:b1:64:
6f:54:a3:5e:83:53:48:18:ba:27:ef:03:78:fd:2d:
71:5e:f6:52:c8:61:28:95:7e:37:15:1e:fb:c9:82:
1a:ca:c2:07:a5:8e:0e:69:fb:f0:10:ef:7a:44:1a:
ac:4a:f3:f2:27:2b:a8:5b:88:10:08:0f:c7:f8:05:
fb:5f:8d:10:4f:4c:78:05:b4:7e:fd:6b:58:07:9d:
da:2d:db:b1:73:9d:80:02:9d:08:0b:ed:2b:0c:89:
03:30:ed:7b:99:ac:f5:1d:f1:a6:56:87:e0:6b:53:
09:3b:b2:4d:b7:4e:a8:32:23:37:9f:3d:ae:73:03:
8e:5e:14:26:2a:aa:bf:3b:a3:cc:38:42:03:28:6b:
d5:2e:1e:df:94:d1:1a:1e:13:e8:62:76:47:87:e2:
08:85:7b:e0:bc:78:32:57:bc:9a:9b:3b:99:3e:73:
8a:7b:8d:4e:dd:0a:bd:e4:b7:2d:c5:4a:39:9b:9f:
ad:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EC:C9:D4:DC:2E:6F:D4:D7:D0:4D:2F:E9:EB:DA:F0:92:3F:AA:EC
X509v3 Authority Key Identifier:
keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:47:1c:19:76:d9:7e:88:70:79:30:65:ff:f5:e7:81:a5:14:
70:72:29:a2:28:4d:d5:bf:6b:af:4e:9a:57:6f:c7:d9:46:fb:
5b:79:12:33:30:37:1c:a5:de:8d:19:22:aa:13:9d:9d:4d:53:
87:10:d5:85:3a:f8:a9:44:a4:cf:24:36:64:50:5b:85:1f:94:
ac:2c:aa:9d:d0:c4:7d:af:fa:98:f6:3f:17:b9:cd:26:55:28:
c0:f3:3c:1a:05:92:ab:ec:be:12:6b:77:de:25:1d:fb:c1:6f:
35:23:41:04:ee:16:e9:fc:8c:b9:4a:d7:4b:58:81:e3:25:d4:
d2:3c:fc:6f:4e:8f:47:b8:a5:63:35:64:6c:17:51:48:3a:06:
06:3b:de:55:86:2d:9d:27:77:40:dc:d3:63:5f:a7:99:59:4e:
76:14:d8:6f:24:fe:b4:c5:d9:21:2a:c1:74:99:18:76:9b:f9:
6b:c7:32:b7:8f:c3:22:d1:04:24:be:9e:77:01:8b:d4:4d:86:
6c:96:55:5c:43:9d:38:65:1a:0c:9d:f3:90:47:37:82:f8:58:
3e:81:48:5c:a3:ca:bd:f2:1e:12:e7:a7:4a:8b:45:fd:e9:ca:
ae:23:31:f5:b2:84:3b:92:b2:0b:b0:74:a6:3e:eb:c7:4a:08:
02:5f:39:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:35 2025 by rpki-client