Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
File: k9t6NCzZOS76XNM4lHQcqKW09Cs.mft (raw, json)
Hash identifier: OXSzPHxRG8CYMLJ+c2wOJRhdPikxYvjLcXjJQwaf5U8=
Subject key identifier: 89:F2:B9:49:F3:0D:48:12:D8:D4:9B:3B:AC:12:3C:9C:65:90:F2:17
Authority key identifier: 93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B
Certificate issuer: /CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
Certificate serial: 0197B70F0D6FC73EC9A5D9EF22EAB0FB368B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
Manifest number: 12B9
Signing time: Sat 28 Jun 2025 15:01:46 +0000
Manifest this update: Sat 28 Jun 2025 15:01:46 +0000
Manifest next update: Sun 29 Jun 2025 15:01:46 +0000
Files and hashes: 1: SboGMTB-9QHWroFpAbYSHcl3CKo.roa (hash: rffHNVeJmra0y8Rg18pTmGMriRjMrSI/KkXaHsDinBM=)
2: k9t6NCzZOS76XNM4lHQcqKW09Cs.crl (hash: CzFkIQ1hDP99A2tYCtggdb1FhZxGadxUaS7mRQvhrR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:0d:6f:c7:3e:c9:a5:d9:ef:22:ea:b0:fb:36:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
Validity
Not Before: Jun 28 15:01:46 2025 GMT
Not After : Jun 29 15:01:46 2025 GMT
Subject: CN=89f2b949f30d4812d8d49b3bac123c9c6590f217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6a:f2:b2:77:7d:0f:6b:07:8d:5e:a3:24:42:
09:e6:88:cc:f2:ca:f0:a2:45:3f:38:b1:66:ae:cb:
da:08:b2:52:4a:73:07:fe:e0:78:fc:8d:31:b1:70:
73:b6:64:c9:52:c7:3d:b9:46:70:e2:f2:f6:52:12:
b8:1b:45:24:6c:a2:09:c6:90:61:89:2d:16:2c:7c:
60:07:66:89:7d:2f:ab:0e:99:e2:47:23:59:37:ab:
71:7f:06:06:76:1f:f7:2d:c3:c5:a1:ce:be:03:fc:
53:31:42:44:ed:44:b7:02:e8:25:4b:87:71:94:a6:
ea:86:34:1e:09:0e:13:9b:48:e4:0f:77:85:4f:35:
96:25:eb:93:c4:0c:f4:1a:d8:55:1f:54:4b:d6:9c:
c1:6e:83:0a:5e:3b:22:9f:c3:d7:94:a5:ec:2d:99:
ba:3b:49:5b:c4:8e:59:a7:86:1b:6f:f5:1f:90:cc:
fc:ef:de:77:2a:de:fb:f6:ad:28:1b:bd:c8:a6:19:
59:e8:19:10:67:fb:29:73:03:12:13:10:8a:fb:39:
11:b8:5c:72:c8:50:19:bb:60:40:78:b1:ea:81:0a:
aa:bb:64:b5:48:8a:16:ff:93:2e:ee:74:04:ff:be:
c9:0e:d0:d3:23:15:77:1b:fa:43:66:46:de:8a:94:
3a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F2:B9:49:F3:0D:48:12:D8:D4:9B:3B:AC:12:3C:9C:65:90:F2:17
X509v3 Authority Key Identifier:
keyid:93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f3:b9:5e:d0:a8:0f:cc:db:70:4f:8d:1a:3c:10:91:ee:50:
e2:3e:33:bb:91:e0:67:12:ac:ab:03:e0:a2:72:0d:21:99:51:
4f:21:c8:82:43:f5:0c:96:cf:87:0f:e1:e0:38:4c:fb:ea:6d:
1d:52:a4:b7:bb:8d:70:6e:a4:fc:55:38:b0:2b:9a:55:13:9f:
1c:62:9c:bf:24:91:27:f5:d5:ca:66:c6:df:11:67:40:7a:4b:
08:3d:dd:e3:ac:e3:5a:91:6d:98:35:95:1c:b2:dc:48:b2:95:
48:2e:90:3c:08:e9:14:07:3f:0c:7d:a6:d3:82:22:2f:56:f1:
6f:14:db:cd:f7:88:55:bc:e9:d5:d7:11:bb:41:ed:63:44:4c:
cb:da:0b:14:c5:10:3b:62:29:2b:af:87:e4:98:09:79:ca:3f:
47:14:7f:35:62:a4:85:b3:41:e2:7b:53:df:95:ff:00:6c:d4:
ad:3a:96:c1:e1:07:fb:f2:49:f4:7e:4f:54:1e:04:2a:1c:88:
36:b8:35:15:89:e3:40:31:66:68:ac:52:80:00:dd:1b:e8:e7:
a9:86:82:09:8d:41:f7:da:96:cc:89:a5:3b:dc:58:7d:1d:ae:
e0:a1:37:f2:97:02:15:06:da:c1:3a:a0:7c:08:f7:18:cf:d7:
dc:31:53:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:02 2025 by rpki-client