Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
File: 9f3nK_WgC97E0e_dfQICnueeRyA.mft (raw, json)
Hash identifier: dwm8bViDm94jePsz45g5DfMfBS51S6iKr8dCVsZda/A=
Subject key identifier: 4F:4E:DE:7E:EE:57:A5:F0:BB:CF:78:E5:97:D4:60:EC:52:54:34:3A
Authority key identifier: F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
Certificate issuer: /CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Certificate serial: 0197B6A208E423F47DD0C771DEA0C5D89241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
Manifest number: 097F
Signing time: Sat 28 Jun 2025 13:02:41 +0000
Manifest this update: Sat 28 Jun 2025 13:02:41 +0000
Manifest next update: Sun 29 Jun 2025 13:02:41 +0000
Files and hashes: 1: 9f3nK_WgC97E0e_dfQICnueeRyA.crl (hash: rsByn7+nPVLjeyuGuzuR0d9l1fSz63uOnSSYOdkvGJU=)
2: VwdOphY_UgRaqYf3Kg3b6kzwRf0.roa (hash: RncMvUV6R6LkD/qjU1iWGPE4PHApbhUX2ZP/1640Hn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:08:e4:23:f4:7d:d0:c7:71:de:a0:c5:d8:92:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Validity
Not Before: Jun 28 13:02:41 2025 GMT
Not After : Jun 29 13:02:41 2025 GMT
Subject: CN=4f4ede7eee57a5f0bbcf78e597d460ec5254343a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:61:b3:75:82:f2:9a:96:3e:a3:39:00:2d:
10:0c:f2:c2:71:af:ea:32:83:56:08:ac:af:20:92:
d1:a5:2f:34:df:3f:a5:91:95:28:62:ce:78:29:19:
c5:4d:ce:57:d8:eb:dc:b3:8a:3a:7d:ba:3a:b1:5d:
bc:0c:fc:7a:1d:4c:09:88:66:7b:83:27:20:6b:bb:
58:18:47:62:8a:ff:32:d7:38:f9:51:46:2d:3c:33:
75:03:36:f6:e6:c8:94:77:21:e2:63:74:c2:3c:5e:
d3:81:e0:51:72:9c:72:87:18:be:a8:20:b9:76:15:
33:97:f2:f0:a4:6a:69:a7:08:64:3c:c3:7e:a6:c6:
cb:ee:22:09:b6:f4:9c:1a:2a:43:cd:9a:19:6c:99:
8e:31:cc:97:d9:c6:75:59:ab:2b:b1:bd:02:75:42:
5a:75:68:db:7e:48:ca:56:56:5c:0d:9e:45:84:39:
ae:70:d8:6d:06:78:7f:0c:37:80:40:40:ea:60:45:
9a:5d:ee:fe:66:09:31:dd:74:f6:46:59:6c:e0:1c:
9b:35:27:6d:13:f0:01:3f:47:ac:53:5d:c6:74:1a:
47:64:d2:17:b8:78:22:f6:25:a2:7c:65:0d:2e:14:
79:6c:06:72:f6:65:e0:fd:3f:14:23:e7:1b:ca:91:
ed:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4E:DE:7E:EE:57:A5:F0:BB:CF:78:E5:97:D4:60:EC:52:54:34:3A
X509v3 Authority Key Identifier:
keyid:F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5f:dc:68:7e:14:13:c6:e3:61:4e:98:85:aa:28:43:ad:7b:
5c:28:86:5f:0b:90:4c:7f:27:d7:6f:65:de:48:1a:3b:5a:d0:
45:be:ec:40:84:96:04:53:9d:21:84:e0:41:c7:2a:76:db:60:
2e:ef:dc:3f:72:1c:92:10:31:6b:80:c1:40:a9:6c:5b:78:5d:
2d:19:52:6b:ec:53:fb:0d:7f:f5:a3:fd:0c:49:58:07:2b:64:
fb:db:a1:8b:ab:6e:6b:5a:13:c3:04:d0:7c:2b:b0:11:68:17:
fb:26:1d:8f:77:07:ac:40:ff:70:95:2a:1d:0b:a2:34:ce:cd:
70:a4:18:e3:9b:af:98:63:22:68:e3:5b:3d:2b:53:5e:09:da:
3c:e6:d6:a0:da:69:22:02:bc:7c:5c:4c:59:21:63:56:28:ee:
8b:8b:b9:3f:33:46:9a:d3:47:e0:5c:ef:04:26:82:7c:fd:de:
51:6b:a5:66:9b:60:c1:34:41:6d:d7:eb:2c:77:5a:0e:2b:1d:
5e:58:36:e3:a0:95:29:1f:84:cc:66:df:67:da:90:50:e7:bc:
7b:61:f5:b5:9c:a6:57:17:3e:af:f9:41:8a:32:56:b3:3f:6a:
80:b6:d1:ce:91:17:8a:0b:63:70:37:2f:7f:6d:85:d7:31:6a:
d1:52:9b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:58 2025 by rpki-client