Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
File: v9eGsktLMCdbzI1SRONO4ASB15A.mft (raw, json)
Hash identifier: JAq85Ol/kCPJfdsX9jFLzETotbU9+Qvs2mIqeYb2n1Y=
Subject key identifier: BE:F2:56:7D:E6:52:96:A8:EE:6C:B5:0F:13:ED:5F:CC:FC:B8:72:91
Authority key identifier: BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
Certificate issuer: /CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Certificate serial: 0197BA7DCD3B87AD63928E693AD80305EDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
Manifest number: 113B
Signing time: Sun 29 Jun 2025 07:01:35 +0000
Manifest this update: Sun 29 Jun 2025 07:01:35 +0000
Manifest next update: Mon 30 Jun 2025 07:01:35 +0000
Files and hashes: 1: jvaFexoxtk4rKhDumsQjGLQsBLU.roa (hash: trR6TCS5RgKXy+FTVPF28Tq5uhqKg+8D3gvbODYNaCY=)
2: v9eGsktLMCdbzI1SRONO4ASB15A.crl (hash: AbuEzaWjMZTRLhRifCaqA+NPLFWwPLr0Bhmf+k6w5+4=)
3: zPseRt5WlA5PNoUFkbv3vmUfDV8.roa (hash: Ya/w9mpoqyM5Bw8KTqPuY/qxCTIk7UQN48ES6+Vh43g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:cd:3b:87:ad:63:92:8e:69:3a:d8:03:05:ed:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Validity
Not Before: Jun 29 07:01:35 2025 GMT
Not After : Jun 30 07:01:35 2025 GMT
Subject: CN=bef2567de65296a8ee6cb50f13ed5fccfcb87291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:22:93:21:6e:89:cd:51:cf:36:9b:19:ce:57:
51:dc:3d:ea:9b:0f:d4:15:78:f1:eb:c0:bd:2d:60:
be:26:3e:3c:88:75:73:b4:c3:46:0c:0f:18:9d:b8:
e1:41:56:e1:2b:0c:78:c3:29:b6:62:2a:db:c4:fc:
e7:70:40:ab:00:4d:45:30:8e:5c:64:1c:bb:be:59:
d5:75:22:fa:80:8e:c9:14:6b:5a:ba:45:46:f1:a0:
a0:a4:a6:04:25:6c:0e:20:35:f9:1a:43:6f:a7:ba:
f3:28:c5:c5:c5:6b:f8:e8:9e:31:1e:93:80:77:ff:
2f:18:d6:ae:82:81:07:d5:a9:5b:6f:c4:3a:b0:3d:
e8:c1:3d:7a:aa:5b:fb:c4:b8:18:25:00:a5:18:88:
90:ae:54:ea:58:2e:20:a5:63:1e:de:f9:0c:3d:c2:
29:97:e5:ea:58:0a:a3:70:02:56:d7:74:17:95:f0:
2a:d3:01:2d:87:bf:9b:b3:27:75:19:15:fd:10:19:
d6:7c:5a:8d:86:59:94:b8:e3:b0:19:56:ee:9a:99:
dd:dc:0c:d2:c1:a2:84:0b:00:71:41:6d:ed:37:65:
f8:06:1c:c8:42:09:a1:fc:f7:2b:64:7b:5e:12:a7:
cb:74:d1:6b:c6:67:79:a0:ec:31:6b:b1:53:5c:9f:
fb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F2:56:7D:E6:52:96:A8:EE:6C:B5:0F:13:ED:5F:CC:FC:B8:72:91
X509v3 Authority Key Identifier:
keyid:BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d5:65:10:9f:79:cf:49:8a:78:bc:fb:73:67:a2:38:be:a2:
4c:86:d8:ca:b0:b1:48:e4:36:37:8c:51:7d:b3:e8:b1:0b:e9:
ea:5c:64:f2:08:d8:b9:9f:d5:bc:db:69:0c:f4:f9:7f:cb:85:
ad:cc:37:5d:68:9c:ca:5f:98:58:fa:ed:7c:f1:e2:15:b1:70:
8c:b3:c4:33:ca:88:c4:36:b9:52:e8:85:ca:30:36:e1:c9:fd:
13:46:c3:54:ce:2e:14:10:d8:92:f9:b9:ea:91:60:b4:9b:ec:
79:e0:c3:35:8c:54:4e:23:36:9c:1c:fa:f3:53:e2:fa:7e:b6:
0c:f2:1e:c6:61:0e:4f:44:90:ab:54:1e:95:ae:75:89:e3:e6:
6a:d5:72:79:f5:df:66:d2:81:df:e5:f3:57:b0:e7:f1:d2:1d:
eb:8e:67:cc:88:77:af:89:1a:7b:76:2a:d7:24:4f:7f:ed:95:
19:5d:d8:6e:f5:d8:3d:81:3a:e8:cb:e7:ae:2b:34:75:7b:86:
5f:d4:c0:b6:21:99:5c:39:1d:3a:11:ca:5c:75:3d:21:33:50:
c6:48:fd:27:50:c5:20:52:57:02:27:bb:01:48:ef:87:3f:58:
e7:e3:0a:7a:ef:4f:07:77:dc:64:63:bc:c4:2f:3a:62:72:e6:
16:14:d0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:32:49 2025 by rpki-client