Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
File: 9EAkreXkgCwKL2Hm-A9NItwVSFM.mft (raw, json)
Hash identifier: 6YioYhnDwyBatBDzafd/BrMUUqSn/AItOEkozhNrSyE=
Subject key identifier: 97:3E:93:7A:CD:E7:5A:79:02:25:08:5F:2D:49:1F:34:99:67:67:14
Authority key identifier: F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
Certificate issuer: /CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Certificate serial: 0197B632CFF39B49C404A9AD58DE98A2412D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
Manifest number: 12F9
Signing time: Sat 28 Jun 2025 11:01:12 +0000
Manifest this update: Sat 28 Jun 2025 11:01:12 +0000
Manifest next update: Sun 29 Jun 2025 11:01:12 +0000
Files and hashes: 1: 4J1X6PCF39tH0Ho4_SbJ7AtxDbg.roa (hash: sDrnXJKsdAbmdaesDlUsR31uPE7GfMdA3txIVC37ks4=)
2: 9EAkreXkgCwKL2Hm-A9NItwVSFM.crl (hash: wW6Cj/5j7gk0qQIqmKcrb1vPX36jOoQ0KREk44sWn2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:cf:f3:9b:49:c4:04:a9:ad:58:de:98:a2:41:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Validity
Not Before: Jun 28 11:01:12 2025 GMT
Not After : Jun 29 11:01:12 2025 GMT
Subject: CN=973e937acde75a790225085f2d491f3499676714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1d:15:d1:b7:d4:2f:59:d0:a9:bc:12:ae:a6:
35:21:23:5b:d7:81:b7:08:72:11:33:57:d3:4a:14:
9c:85:25:ae:7c:a9:d9:c6:1a:7f:7e:4f:e1:bb:cc:
b3:7a:3f:5e:c6:9b:73:40:bb:a9:9b:cf:d1:bf:69:
51:be:c7:be:55:9b:e4:8a:a9:84:56:5c:60:29:74:
dc:d2:e3:8b:45:d6:e6:a4:6c:6c:eb:aa:38:11:1c:
d2:d6:f1:8d:fc:1f:05:2f:af:4c:39:4b:fb:33:41:
03:f1:73:cf:dc:17:6a:b7:c0:6c:cd:6b:6f:b8:82:
6b:dd:f9:53:54:df:ea:72:d7:d5:03:69:75:2c:7d:
c7:1c:4d:aa:a0:0f:32:d2:54:51:49:fe:3c:eb:10:
4b:a8:f9:f7:ac:51:19:62:1a:d8:91:72:dd:2a:02:
2b:a6:5d:f5:1b:46:3e:51:b2:61:0a:b9:fc:37:f1:
fa:60:31:ad:20:9f:7f:09:2b:84:1a:77:02:ec:22:
ba:1a:2a:5f:e6:73:92:ef:fc:7c:14:da:7c:60:07:
41:71:c0:ab:7d:1a:b0:12:41:a7:46:a0:53:73:f5:
e5:83:b9:57:4b:58:d4:16:30:1d:5e:48:ee:2c:1c:
6c:2a:f3:98:3c:64:67:d9:f1:da:b8:58:8d:6e:ce:
73:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3E:93:7A:CD:E7:5A:79:02:25:08:5F:2D:49:1F:34:99:67:67:14
X509v3 Authority Key Identifier:
keyid:F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:58:02:bc:04:47:0c:2b:14:72:ab:2a:d8:94:69:62:8b:44:
a5:5c:90:d3:71:76:9d:a1:5f:d1:07:e6:97:e7:ec:97:31:8f:
4f:7e:29:45:6e:17:9c:a4:21:9c:69:46:4b:10:1a:75:c1:8c:
38:59:d4:e0:10:a6:f1:e9:1f:d2:af:22:01:a0:79:35:97:24:
6c:8e:9f:ab:1f:cf:d2:9f:7e:59:63:b8:be:6d:54:26:71:ce:
1d:74:3a:83:b7:0e:08:d2:16:e3:c0:b8:b1:9d:6d:ab:2a:87:
7c:58:d9:f6:53:cd:9b:59:d5:b4:b9:16:43:7a:03:93:ee:eb:
12:a4:c7:e5:04:f8:3a:77:6a:df:a7:09:2b:b3:bd:80:85:73:
14:1b:b0:bb:92:fe:23:00:ce:16:f5:18:51:4f:8f:6e:a3:e9:
62:95:d4:1b:57:7c:8c:a7:2b:7b:8b:cc:7e:4e:71:f0:27:bc:
9e:1f:ad:03:c8:ca:83:d1:c5:4d:92:c4:7b:03:66:ea:21:d8:
e4:6d:94:2e:35:eb:de:28:b9:87:67:0a:55:a9:a9:d2:75:7e:
2b:63:37:0e:be:f1:80:16:65:8c:37:ac:cb:f7:bb:d3:72:dc:
35:22:3c:bb:02:ba:c8:56:58:da:90:7c:55:7f:a1:32:9f:29:
39:a6:43:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:23:14 2025 by rpki-client