Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
File: 9_TLjFICzFNe2v0grLaoBQLk_Sk.mft (raw, json)
Hash identifier: s5hZIRX5KrIzoSeHbGqtRZUQ2BDcRqkMT5GIUwfzYNk=
Subject key identifier: F7:F2:DB:2C:D5:F1:19:0F:D8:EA:1F:A9:92:A8:D2:A8:BE:AF:21:9D
Authority key identifier: F7:F4:CB:8C:52:02:CC:53:5E:DA:FD:20:AC:B6:A8:05:02:E4:FD:29
Certificate issuer: /CN=f7f4cb8c5202cc535edafd20acb6a80502e4fd29
Certificate serial: 0197B6A155B08833AE85759E666673ECFB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
Manifest number: 12A0
Signing time: Sat 28 Jun 2025 13:01:55 +0000
Manifest this update: Sat 28 Jun 2025 13:01:55 +0000
Manifest next update: Sun 29 Jun 2025 13:01:55 +0000
Files and hashes: 1: 7HvIX7fCTI2gbjc-7RnxufJl1mA.roa (hash: NWw/MjwkOB9Lahk4UnTOA4UYmqTEetLTZcrDtU3BUtM=)
2: 9_TLjFICzFNe2v0grLaoBQLk_Sk.crl (hash: 9GVFBpVjkdVrQEF0yikLkcYrYB7e4+BHegI5pcCS6eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:55:b0:88:33:ae:85:75:9e:66:66:73:ec:fb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7f4cb8c5202cc535edafd20acb6a80502e4fd29
Validity
Not Before: Jun 28 13:01:55 2025 GMT
Not After : Jun 29 13:01:55 2025 GMT
Subject: CN=f7f2db2cd5f1190fd8ea1fa992a8d2a8beaf219d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:69:48:c2:19:9f:89:45:26:94:eb:d1:c9:8a:
1e:05:4b:55:36:c6:8a:4e:83:47:e6:14:e8:9a:26:
f4:b9:73:38:94:52:47:9b:0e:27:7d:45:18:46:cd:
55:ae:8e:a5:90:d1:65:24:b7:4e:08:32:6a:d1:e1:
fb:a6:d6:a5:04:13:4f:ca:0d:81:b8:b7:d9:23:e3:
a8:c7:cb:c2:40:8a:3e:87:f9:55:e4:e6:0e:7a:d4:
04:9f:f1:4b:1e:74:be:4d:26:68:34:cb:d5:78:4a:
98:6b:f7:97:2f:64:86:87:99:a6:92:de:b3:41:02:
89:af:f6:8d:6a:91:51:07:d9:c1:b3:6d:8a:7c:2a:
bb:bb:74:30:e3:26:0f:fb:d7:f3:18:63:31:21:aa:
4f:48:67:f8:f7:84:50:ae:f7:b0:48:0f:6f:e1:6d:
82:d5:b3:9a:57:e9:f7:0a:bc:bd:aa:92:15:df:89:
13:9c:e1:f3:f5:23:e0:ef:57:3a:a0:36:e2:13:0d:
ff:10:0b:53:e8:ee:c6:0d:cb:ca:ff:dc:98:a8:04:
07:80:27:e2:27:9b:d5:7d:82:a8:11:57:f2:89:94:
d1:df:3d:60:c3:9b:05:aa:f0:26:c4:a3:6b:8d:18:
ed:14:8c:d6:cf:36:d2:53:eb:d3:d2:16:87:3f:74:
dc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F2:DB:2C:D5:F1:19:0F:D8:EA:1F:A9:92:A8:D2:A8:BE:AF:21:9D
X509v3 Authority Key Identifier:
keyid:F7:F4:CB:8C:52:02:CC:53:5E:DA:FD:20:AC:B6:A8:05:02:E4:FD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:df:e5:86:45:d0:4a:a3:e3:de:23:7b:d9:8d:fe:89:a4:eb:
ad:9a:ba:b5:32:c3:f3:4e:e2:aa:65:37:b4:6a:31:61:9e:ee:
e8:fc:9c:66:23:93:35:1e:c6:0a:a9:3b:42:06:7c:76:fd:b8:
60:5d:1f:fd:d2:10:74:d0:0a:91:c8:95:ef:1f:a2:e2:60:8a:
28:24:99:ab:6a:6e:9c:b6:c9:77:ee:c9:25:f3:9b:03:eb:ef:
82:70:70:e2:cd:75:53:2e:c9:d4:ec:94:12:dc:32:bb:3a:b0:
1d:ec:64:03:e6:b5:6b:23:75:46:79:e9:e4:cb:66:49:14:74:
97:96:3f:c5:ac:1c:58:c2:81:e6:31:20:26:6f:36:40:db:67:
9d:e3:12:10:db:d9:48:cd:6a:da:4f:b9:1b:d7:54:fe:8a:75:
5b:58:fd:16:1e:fc:4e:2b:e8:41:26:d8:70:2c:18:13:75:19:
57:53:c4:3b:97:31:06:3c:78:5e:75:34:ec:85:27:f6:40:e9:
02:bd:fe:86:38:59:19:aa:e4:4f:18:a5:85:4c:c6:49:0e:06:
dc:69:1f:0b:d3:4f:e5:71:ca:1c:87:d7:85:3d:a2:f7:6d:0c:
bd:2e:84:b9:00:ec:9f:9f:0f:08:18:8a:ea:75:0b:48:45:ce:
57:de:44:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:53:54 2025 by rpki-client