Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
File: 9NwmxibFHF3vbyRm849VslApZC8.mft (raw, json)
Hash identifier: QEmiKQzDSsEJofu67ocfxFnGdoVtd1ARk40Rz8M3/4I=
Subject key identifier: 84:7F:1A:3C:93:81:92:02:40:A3:41:63:92:11:4D:F6:2C:58:AB:2E
Authority key identifier: F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
Certificate issuer: /CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Certificate serial: 0197B6A23A28641CDFDAC961125881766E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
Manifest number: 0E20
Signing time: Sat 28 Jun 2025 13:02:54 +0000
Manifest this update: Sat 28 Jun 2025 13:02:54 +0000
Manifest next update: Sun 29 Jun 2025 13:02:54 +0000
Files and hashes: 1: 9NwmxibFHF3vbyRm849VslApZC8.crl (hash: 7m3y08piDwVAvylTSqW6mwhTWDd+ny1HaJzmJ2iD1i4=)
2: XI2V1xAOtuCnHnEsCZ4HB4sk5c0.roa (hash: NGuYGkHyS6sZ+OmDpCbd7Xg31/u7/ppig2sfjfcm+Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:3a:28:64:1c:df:da:c9:61:12:58:81:76:6e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Validity
Not Before: Jun 28 13:02:54 2025 GMT
Not After : Jun 29 13:02:54 2025 GMT
Subject: CN=847f1a3c9381920240a3416392114df62c58ab2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b7:51:16:94:6b:91:0e:79:83:66:bc:72:01:
f3:2a:ba:56:54:d6:61:6e:e0:3a:4f:c5:6c:f2:25:
c5:da:1c:c0:9b:14:0d:85:3b:3d:bf:49:55:db:0d:
84:60:0c:c2:39:e4:96:75:a0:18:72:cf:fa:0f:09:
02:9d:96:19:eb:ff:97:38:fa:60:fc:7b:71:e3:28:
c8:32:4c:5a:34:60:9f:61:43:6f:33:65:73:dc:ea:
49:a1:b6:17:5b:66:fc:c4:15:96:f2:ae:1b:7c:ae:
73:e6:43:e6:70:c7:48:70:64:bc:06:fd:d4:70:13:
a2:e2:ef:e9:d2:c8:e0:d9:3c:f5:66:a9:ea:3f:88:
db:3a:27:a2:50:e4:cc:40:0f:94:53:eb:fa:8e:f2:
7f:69:cb:cb:cb:13:74:56:44:3d:ee:88:32:9b:b2:
ae:f5:40:b2:5a:5b:8f:5d:83:05:39:88:20:fa:80:
fd:99:54:26:54:11:5e:15:3c:0a:46:df:47:57:c3:
9a:de:04:e1:82:5e:71:39:56:c1:89:98:21:f0:c9:
8c:12:eb:ac:a1:b7:ed:f4:13:19:76:87:e2:8a:f3:
0a:df:48:b8:6a:84:6c:4b:54:8f:0f:2f:b1:41:0e:
18:f9:6c:94:b6:ad:e7:72:69:11:9e:17:ff:0e:02:
fd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7F:1A:3C:93:81:92:02:40:A3:41:63:92:11:4D:F6:2C:58:AB:2E
X509v3 Authority Key Identifier:
keyid:F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c7:23:a5:2f:88:be:91:b8:5b:20:35:a3:98:0b:b0:51:9d:
88:59:c9:81:a3:42:a3:b3:e9:0e:31:c6:1a:97:3d:76:fd:0c:
30:49:d1:80:a2:b8:83:72:93:0f:88:a5:aa:e7:ea:6f:64:45:
86:93:4a:ea:7c:61:26:9c:15:ac:e2:7b:57:d3:a2:3f:4f:8c:
83:3b:5f:40:9f:fc:08:29:70:cd:c1:ba:08:70:65:6c:da:2c:
91:2c:41:dd:6e:0c:3e:64:d8:59:68:90:5e:43:de:f7:ab:c0:
9a:bc:38:73:9c:36:8f:ae:ce:b7:15:fb:df:c3:ef:43:ce:6e:
4e:5d:0b:65:2d:28:0a:8a:a8:8d:f8:51:80:57:e7:90:e4:8c:
1f:43:42:01:0e:ad:bb:51:01:11:5e:83:2d:a4:59:62:3f:1f:
bc:c9:45:ec:31:9b:bc:64:0c:6e:0b:75:d0:d3:1e:fe:e0:67:
71:d7:f1:6b:42:9d:2a:5c:ed:2c:8d:37:6a:ef:4b:65:a6:02:
63:fc:c5:fb:b0:48:ce:a3:e1:d3:38:2b:b9:a1:b7:9c:be:48:
f8:29:98:7d:3e:70:59:7b:20:db:2c:c8:2e:d3:88:fd:1a:07:
fe:7d:19:66:ff:83:b6:b0:34:84:df:d5:17:70:3b:9a:ff:91:
2c:e7:31:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:27 2025 by rpki-client