Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft
File: 9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft (raw, json)
Hash identifier: T8+xXjpXuby0T3sxo3MYNf6Gj54xqlTpHHk1drWUjgo=
Subject key identifier: 8A:BC:13:FC:3A:87:9F:CB:03:B4:BF:0C:57:76:B4:01:74:07:2F:1A
Authority key identifier: F6:B5:4E:15:71:4C:23:F3:5F:DC:F5:A3:16:C6:B9:9A:35:41:05:88
Certificate issuer: /CN=f6b54e15714c23f35fdcf5a316c6b99a35410588
Certificate serial: 0197B7EA8CE60309C65F7814D2D2558F2186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft
Manifest number: 1061
Signing time: Sat 28 Jun 2025 19:01:31 +0000
Manifest this update: Sat 28 Jun 2025 19:01:31 +0000
Manifest next update: Sun 29 Jun 2025 19:01:31 +0000
Files and hashes: 1: 5VpJh85q40wiF3tIcwBqbUYfHXs.roa (hash: FZq736wENvopOQrubygsWoOWFmhs6QXxNgIM0epTpuM=)
2: 9rVOFXFMI_Nf3PWjFsa5mjVBBYg.crl (hash: sH9p3wSGmB0UOASaHgzbzFh3zGD5LIxIugWfv/J31qU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:8c:e6:03:09:c6:5f:78:14:d2:d2:55:8f:21:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b54e15714c23f35fdcf5a316c6b99a35410588
Validity
Not Before: Jun 28 19:01:31 2025 GMT
Not After : Jun 29 19:01:31 2025 GMT
Subject: CN=8abc13fc3a879fcb03b4bf0c5776b40174072f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ae:6b:e7:7c:17:0a:9a:95:cc:eb:15:b4:65:
12:43:9c:13:34:59:70:1c:72:50:bb:24:6c:61:55:
a2:70:c6:86:f4:e1:a7:78:8e:79:28:8a:1f:3a:41:
45:26:93:84:10:2c:6a:5c:d1:39:80:1b:cf:a1:8c:
d5:83:5e:36:e5:3b:ed:2c:7f:63:bf:05:72:f0:0d:
d4:b7:8f:c0:cc:3d:3f:c3:10:ad:40:62:84:5a:d8:
20:76:a6:c8:1e:24:22:f5:15:7f:0a:c8:c3:4e:37:
28:c2:08:90:d4:1f:02:3d:12:44:a2:5c:2e:b4:6b:
1a:36:72:bd:cb:3f:fe:0b:ce:ea:00:d3:7b:02:e4:
1b:d6:fd:16:88:ed:97:82:68:1f:4a:f9:33:51:d3:
bb:fd:99:76:2a:54:c3:a5:aa:3a:87:1e:36:22:c7:
83:67:db:86:ae:fd:09:36:75:03:ba:67:5c:5e:25:
45:86:a3:68:35:19:24:ee:a2:96:68:90:35:78:12:
a2:37:6a:1c:3f:e5:ae:df:a0:cb:0a:b5:cc:ae:75:
8d:09:18:18:a2:47:93:ed:5b:45:5b:0d:a7:f3:3e:
fe:60:2f:4b:c4:7d:5c:be:fd:53:c9:bb:b5:46:7e:
09:42:d0:35:6d:f8:f5:97:71:bd:de:a0:82:02:88:
4f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BC:13:FC:3A:87:9F:CB:03:B4:BF:0C:57:76:B4:01:74:07:2F:1A
X509v3 Authority Key Identifier:
keyid:F6:B5:4E:15:71:4C:23:F3:5F:DC:F5:A3:16:C6:B9:9A:35:41:05:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:36:50:f6:1e:14:c8:d4:fe:d8:fe:62:94:34:84:4f:dd:6f:
fe:87:7f:7c:82:4e:f9:30:7d:c6:b6:53:09:12:53:4a:f6:f8:
ba:8b:cb:cc:c4:2a:b3:79:2e:fd:51:c1:0c:ca:ff:e9:5a:f2:
2d:84:5c:07:0c:a4:18:1e:98:9a:5f:1e:e4:3a:a8:22:23:11:
d6:0d:69:3f:ee:08:1a:d2:0f:f3:6d:03:c9:4d:84:f3:9a:66:
cd:6c:aa:24:cc:e5:cc:48:78:fa:e7:6c:4e:13:cd:28:89:d4:
55:9a:f7:3a:4a:dc:a5:60:3d:d2:26:7d:17:67:b9:87:98:a7:
46:db:d3:77:10:c7:f1:69:5b:cb:d2:d9:1e:e5:0e:cf:bd:99:
b3:a1:67:7e:01:50:e1:b2:00:4e:2f:eb:02:e1:ea:35:68:a4:
0f:a7:4f:6f:07:ba:6e:9b:d6:04:b9:5d:10:74:a1:01:78:e9:
6e:bb:bc:9d:0a:39:a1:e5:36:7e:ed:89:5f:49:c3:6a:ae:09:
42:1c:ab:cb:ed:8b:93:3b:5e:c4:ae:fb:43:b5:ad:72:ba:cf:
c5:34:c5:85:2b:c3:35:cb:34:60:ae:a7:9f:5f:87:8b:fb:79:
4a:23:81:af:c0:df:0b:c4:6b:3c:d3:0f:b2:e4:13:16:3c:15:
34:7a:f3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:53 2025 by rpki-client