Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
File: 9rLInTH2F1Fqhgp4IrumgkinaaA.mft (raw, json)
Hash identifier: sg58dI9oP2iNtvAAaTrrguHP570oHKJI6Zjzxa+bLXg=
Subject key identifier: 63:D9:A2:CC:79:A9:E4:BA:32:C2:08:62:EB:01:4E:62:C9:32:D5:2C
Authority key identifier: F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
Certificate issuer: /CN=f6b2c89d31f617516a860a7822bba68248a769a0
Certificate serial: 0197B6A101E9032B142759F0C8B612008168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
Manifest number: 07A3
Signing time: Sat 28 Jun 2025 13:01:34 +0000
Manifest this update: Sat 28 Jun 2025 13:01:34 +0000
Manifest next update: Sun 29 Jun 2025 13:01:34 +0000
Files and hashes: 1: 0iYjHA4kyW6qTATWGW_TDJUOsEk.roa (hash: EaJ38giyluinl93rwFdYFKbOjiJmuj1tUHU09V9bmYM=)
2: 9rLInTH2F1Fqhgp4IrumgkinaaA.crl (hash: orPmUMrJGybFqg/albnFsEs2J1o+awe5gneE7BPsLKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:01:e9:03:2b:14:27:59:f0:c8:b6:12:00:81:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b2c89d31f617516a860a7822bba68248a769a0
Validity
Not Before: Jun 28 13:01:34 2025 GMT
Not After : Jun 29 13:01:34 2025 GMT
Subject: CN=63d9a2cc79a9e4ba32c20862eb014e62c932d52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:8f:dd:a2:1c:48:b0:aa:8a:65:d3:19:a7:bc:
29:55:b3:05:0b:1d:9d:a6:18:97:64:e0:b6:4c:0e:
44:d0:e2:03:a1:2d:02:8c:16:2a:c5:a0:17:8b:a9:
e1:d2:04:80:a4:ec:bb:62:ab:1c:33:83:b8:11:ed:
b7:3e:a9:cf:ea:31:9b:f1:03:ee:b7:1e:fa:9e:ef:
5f:43:4c:d4:91:c4:7d:26:13:83:1f:09:0b:70:0a:
84:8c:f0:b7:cb:5d:1b:5c:61:57:42:62:67:93:49:
9f:37:26:1f:98:79:d5:1b:55:f0:2a:07:9a:1b:e2:
7f:0e:2a:b9:9b:d8:a1:f9:0c:d8:0a:a1:03:43:f0:
66:a4:4a:4d:9b:21:8f:88:82:3b:3c:3e:f3:1a:1f:
29:26:f3:04:69:c2:38:e2:0c:42:f6:10:8a:c7:4b:
88:7e:3e:96:01:d0:9c:d5:a5:44:55:28:63:5d:75:
ef:4f:ff:0a:75:8b:b9:e4:7c:b2:8c:30:75:c2:12:
54:53:c1:d7:6e:03:3e:98:b8:8a:7c:7c:e2:37:1d:
00:b9:c7:e8:a2:be:af:ad:4e:54:1c:c7:7c:00:37:
59:f8:13:bf:fe:5b:8f:5f:35:29:c3:74:1c:31:37:
ba:93:9b:97:ab:2a:60:21:6a:9b:0c:0b:08:52:d4:
47:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D9:A2:CC:79:A9:E4:BA:32:C2:08:62:EB:01:4E:62:C9:32:D5:2C
X509v3 Authority Key Identifier:
keyid:F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f4:5e:cc:b1:df:92:21:ab:28:c4:cc:f8:25:f8:72:a2:23:
2f:fc:f2:dd:22:b6:3f:7f:3d:96:fb:39:fa:a3:d0:6a:fe:48:
d3:54:ab:af:a0:b5:4e:1c:50:8e:7b:e0:4a:0e:48:af:ae:af:
11:a9:64:f4:07:42:2d:12:3f:c9:4d:5f:79:72:aa:14:89:50:
b1:ae:9f:fb:99:ff:5e:88:dd:67:b2:3c:ef:7b:74:2f:2b:c7:
fe:a3:7d:8c:d3:b6:47:89:61:67:22:1c:e3:9d:20:e6:5a:da:
f6:26:90:49:40:8d:2a:d1:25:8d:22:82:8f:82:23:38:86:d2:
79:91:87:b8:3b:cf:10:25:ce:97:63:03:1e:8c:9c:23:69:4d:
97:c5:c4:af:bc:97:d4:7b:8e:ba:b3:db:50:f6:4a:cc:87:8c:
c7:8c:fb:88:75:c4:97:27:42:c6:4e:15:f0:47:0e:d1:29:36:
b3:94:2f:72:7b:a5:86:d3:54:d0:75:d0:9f:6c:e8:9b:83:52:
90:93:31:c7:68:67:a9:7e:33:b8:ef:cc:0d:5d:9d:a3:3a:4f:
d0:48:eb:84:1d:cc:28:f1:d1:6c:09:40:dc:ef:c2:a9:3a:05:
72:1b:ac:04:f1:bf:27:b0:32:89:b6:50:d8:d9:fe:3a:18:55:
f1:b3:49:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:51 2025 by rpki-client