Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
File: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft (raw, json)
Hash identifier: vogeXyvXBGuy4426algLWS0qylxJRC2F1iUxPe9rXr8=
Subject key identifier: 36:22:9E:E3:13:36:AA:6D:89:E4:90:F6:B5:FF:46:9D:5D:94:5E:38
Authority key identifier: F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
Certificate issuer: /CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Certificate serial: 0197B6329251715389E5CC1A0A0844B6C43D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
Manifest number: 0A29
Signing time: Sat 28 Jun 2025 11:00:56 +0000
Manifest this update: Sat 28 Jun 2025 11:00:56 +0000
Manifest next update: Sun 29 Jun 2025 11:00:56 +0000
Files and hashes: 1: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl (hash: xnpUHDJFIejNVkQNmI7gHYfGG2Wt4QyAIMSiElVe0yo=)
2: JFSPkHUXD6uekiRT14OFUV3SRJ8.roa (hash: d66KNl4Y3abt7U8S0mMyC51IECrPTJ0e2/YrGhdvTTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:92:51:71:53:89:e5:cc:1a:0a:08:44:b6:c4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Validity
Not Before: Jun 28 11:00:56 2025 GMT
Not After : Jun 29 11:00:56 2025 GMT
Subject: CN=36229ee31336aa6d89e490f6b5ff469d5d945e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:b2:0f:94:f7:b4:f7:fd:11:ca:c1:2b:e9:
dc:72:98:9e:dc:d0:93:93:2f:89:94:08:e7:37:58:
25:9f:54:ad:11:e5:49:0b:bb:25:c8:09:f8:2f:4d:
cb:94:1c:f5:bc:f3:d1:d3:c5:68:b8:12:f4:ba:c6:
5f:d8:80:a2:c5:14:c7:4c:6b:76:2c:2f:5a:5d:40:
51:f3:4a:10:55:55:ac:71:a3:31:ec:b7:db:68:ef:
b9:d4:eb:8d:a4:49:10:2f:14:09:b9:01:36:94:35:
8c:ba:6f:52:d6:6f:6b:84:b6:f2:d3:e7:85:02:03:
81:86:da:cc:6a:cc:50:79:ad:98:bb:4e:d9:08:a9:
37:b1:7e:ea:1d:d8:f0:89:54:f3:cd:62:4b:a9:e4:
61:88:ef:6c:0a:64:5e:69:17:39:43:22:74:2d:a2:
e0:de:40:65:b9:97:9f:0f:d6:dd:a8:15:0d:b4:6a:
36:b4:19:88:e8:07:b7:f4:5b:0b:47:dd:0f:4a:43:
fc:be:b9:a8:1d:83:9c:5f:fa:56:51:63:f9:6f:c8:
51:4e:18:14:e9:27:72:6f:b9:64:9b:7d:a5:83:a9:
6a:ee:aa:e6:3e:c4:22:a7:d8:b2:b8:b4:df:51:f8:
53:ec:61:9e:b0:c5:a4:5c:e7:8f:36:47:bf:2c:25:
b0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:22:9E:E3:13:36:AA:6D:89:E4:90:F6:B5:FF:46:9D:5D:94:5E:38
X509v3 Authority Key Identifier:
keyid:F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:42:74:1d:78:84:46:49:bb:21:88:e5:a9:f9:97:c6:9d:e6:
f1:41:0a:eb:89:a4:b0:bf:e1:1d:13:1f:99:07:3c:a6:93:e0:
1e:3e:47:e3:3d:b2:a7:88:a4:aa:8c:da:7b:d2:32:c4:71:4b:
22:c3:81:0a:52:cc:84:f9:19:ca:f4:ea:86:fa:44:2d:e8:fe:
00:b5:63:2d:ef:0e:98:aa:63:32:ab:bd:b2:8c:e3:41:a6:e4:
7f:fb:01:2e:06:f5:21:26:4b:38:58:ab:22:72:a1:21:5d:18:
cb:0d:a7:e6:a0:7a:85:62:7e:61:57:6b:2a:b4:ad:d4:31:8e:
42:95:47:ee:df:3d:d5:96:26:57:cc:f1:e2:d6:d7:73:c6:2d:
be:e4:f5:8c:bb:02:b5:9a:0e:21:4b:a2:07:d9:a4:d9:3c:d7:
f7:b7:2d:70:51:b3:9d:2d:f9:08:af:83:ad:e1:42:d0:2b:0d:
09:8a:c3:cb:db:75:09:87:f3:6b:6a:87:72:6b:49:0f:61:0a:
50:3d:82:42:6e:81:98:4c:74:1f:0e:cc:62:e7:0c:81:76:d5:
30:57:94:da:4a:34:57:c3:13:e0:16:b3:66:9f:38:f2:4f:67:
df:27:01:6a:dd:07:8c:71:d7:b2:2e:f5:9f:88:5d:33:eb:d1:
77:92:10:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:21 2025 by rpki-client