Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
File: b9M_nmhWjdYFvJKvwe9raeEnq9g.mft (raw, json)
Hash identifier: 6AV8k3VewWHHypJooubBnff/kXcedEW+u5y4gsRMPe0=
Subject key identifier: 37:8C:3B:3E:D3:41:1E:6D:7B:1A:10:9B:FE:99:11:8A:E4:A8:63:53
Authority key identifier: 6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8
Certificate issuer: /CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
Certificate serial: 0197B9A1CF51308BA4B8C0F5B6ECA5439AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
Manifest number: 0F22
Signing time: Sun 29 Jun 2025 03:01:18 +0000
Manifest this update: Sun 29 Jun 2025 03:01:18 +0000
Manifest next update: Mon 30 Jun 2025 03:01:18 +0000
Files and hashes: 1: QgZP-cnsGLbXLiB8i-j6fiH8Sys.roa (hash: S2EGBlisrDeYdPuuPvmxq5XQnasXOcn30j5uFZy7zjM=)
2: b9M_nmhWjdYFvJKvwe9raeEnq9g.crl (hash: xrzG6KJOsBH0nQKOfkQa9pYcvUsQhSjtwQ+fjQ3yIkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:cf:51:30:8b:a4:b8:c0:f5:b6:ec:a5:43:9a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
Validity
Not Before: Jun 29 03:01:18 2025 GMT
Not After : Jun 30 03:01:18 2025 GMT
Subject: CN=378c3b3ed3411e6d7b1a109bfe99118ae4a86353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:77:db:f2:b1:6b:61:70:4c:d7:1a:04:8c:98:
1d:c8:04:6f:5d:31:ee:67:65:8f:dd:b0:71:73:6d:
44:ca:a5:38:cb:e1:c5:79:11:f7:eb:fb:8a:c0:80:
c9:d1:bd:51:fc:40:31:f7:ea:45:8a:e9:db:72:20:
34:36:df:a5:28:95:f6:e1:15:4d:0f:9d:34:9d:7d:
fe:6e:22:5c:81:35:73:47:b7:25:02:5d:50:cd:0f:
6e:89:f0:c5:80:08:5a:12:8d:58:2d:62:f0:93:aa:
88:3e:72:a4:74:e6:9f:6c:4d:76:30:ec:f3:07:0e:
c9:9f:ab:fd:5c:52:c6:a4:28:ce:93:74:12:3f:7e:
e4:f7:db:71:c0:cb:71:5e:30:4b:f0:bf:13:4a:ee:
b7:d5:a7:a0:eb:4f:7d:dc:8f:43:f4:45:98:83:52:
2a:9c:23:ee:3c:c9:a9:05:ff:ce:3f:d1:02:62:44:
f9:30:ac:04:e6:8d:0b:2f:cf:71:7a:3d:8a:7c:2e:
77:77:ce:19:6f:a1:be:cb:7c:56:ca:8c:fc:0f:43:
d0:f1:ad:ae:e1:5d:ef:99:ae:4e:f2:95:35:e8:cf:
53:b2:5a:fe:ca:4e:a3:50:99:b5:65:ff:48:4e:17:
40:7f:af:6e:4d:eb:48:fe:be:cc:25:74:25:1c:2b:
4e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8C:3B:3E:D3:41:1E:6D:7B:1A:10:9B:FE:99:11:8A:E4:A8:63:53
X509v3 Authority Key Identifier:
keyid:6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:7d:91:a1:05:9d:cc:e1:47:1f:51:0a:5e:71:68:96:2f:3d:
ab:d7:e3:33:a9:ee:5d:7f:60:62:d1:ef:ad:d8:66:40:9b:ea:
58:01:71:59:ca:be:84:24:b6:af:6a:74:44:5c:8c:90:78:5b:
cc:5a:76:f8:a5:05:fa:7c:12:38:d7:3f:61:e7:7e:94:0b:1c:
f6:28:a2:5e:13:75:08:cd:fc:c4:b3:6b:d0:fe:ba:0c:5c:a4:
bc:f2:69:2b:54:d3:28:a3:fc:fb:52:4b:ee:c7:2e:f5:b0:7b:
0d:7e:cf:24:41:9c:3b:40:aa:ea:7f:bb:2c:d5:96:62:43:a6:
7e:1e:61:1a:1e:c6:9a:4f:8f:e6:81:58:4f:26:59:14:58:9f:
11:30:55:96:a6:3d:d8:e6:e9:84:ad:df:23:d8:3e:c8:fa:9d:
eb:96:83:f1:16:99:06:b1:37:15:e1:e2:8a:6a:01:36:9b:39:
58:7e:8a:17:84:f1:d4:df:2b:9f:2c:e6:7f:0e:c0:d8:5a:bf:
af:ce:9e:0f:82:28:c9:5c:fd:bf:5a:cc:b1:4c:d7:fa:28:3e:
17:26:65:89:a3:ba:3c:e4:c6:39:e8:06:38:ca:66:92:f6:39:
9a:a0:ef:68:24:e8:78:35:45:3d:ec:f0:4d:f1:7d:11:6f:27:
29:31:ee:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:32:59 2025 by rpki-client