Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
File: INS9SZ9YSUrA6CJjtVIKLGTWR34.mft (raw, json)
Hash identifier: dWxby2LyY2aYMWNFt1b/D/o5htIIy/FkgG1AyF5Eihw=
Subject key identifier: FF:47:3F:27:47:60:40:49:FA:08:28:34:61:3C:84:CD:64:DF:06:08
Authority key identifier: 20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
Certificate issuer: /CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Certificate serial: 0197B70F268752E6E142BC65F0BA0CC7D1BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 15:01:52 +0000
Manifest this update: Sat 28 Jun 2025 15:01:52 +0000
Manifest next update: Sun 29 Jun 2025 15:01:52 +0000
Files and hashes: 1: INS9SZ9YSUrA6CJjtVIKLGTWR34.crl (hash: sIs0eVbIcl9fLzs9KkSOfPSFZqCq9R27OXQq83h7oic=)
2: h_lcjhsZRd-WoNkwUeJTA-cn-HU.roa (hash: MoTuYke9XnON66W6lzgS1xcgPTaCQPNgcBaF3y/k338=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:26:87:52:e6:e1:42:bc:65:f0:ba:0c:c7:d1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Validity
Not Before: Jun 28 15:01:52 2025 GMT
Not After : Jun 29 15:01:52 2025 GMT
Subject: CN=ff473f2747604049fa082834613c84cd64df0608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f9:e9:67:2f:1d:1f:44:72:66:4e:35:3b:ba:
ad:f4:39:b9:e1:67:f9:0c:33:3d:ca:e4:88:af:ee:
37:48:63:e6:0c:36:59:8d:4b:f2:89:cd:f0:ea:e1:
9a:cc:20:d3:84:b0:19:b3:03:0a:78:54:07:18:c7:
c6:4f:53:6a:ac:4f:f5:a9:c2:fd:8d:56:fc:6b:80:
a9:01:4c:4b:01:cd:37:a9:26:34:32:49:ce:6a:df:
82:cd:51:f5:b3:60:8d:e6:4e:a8:53:78:ba:ab:c7:
bd:14:00:11:fa:6b:92:ab:14:74:04:3c:00:20:86:
ef:aa:55:16:b1:11:d2:c8:34:c9:37:b3:df:1b:3b:
27:f7:18:9d:9c:db:41:89:6a:3a:9f:d8:55:c9:cc:
08:23:9d:05:39:b5:3f:9d:99:ba:2a:72:49:3c:a9:
29:69:82:f3:9b:aa:42:22:2a:81:23:1b:f0:55:15:
e9:86:67:f8:e0:2d:57:ab:4e:7b:61:d1:c1:26:fe:
15:7b:cd:a1:f6:5a:4a:cc:7c:15:f8:0d:4b:eb:d9:
4b:2c:f2:8f:43:c8:d5:c6:de:b3:79:dd:d2:74:b2:
10:d5:51:11:c7:b0:e0:83:1c:8f:e4:f6:fc:f2:ef:
f3:d6:de:54:0f:cf:23:19:22:4d:48:9b:23:dc:0e:
73:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:47:3F:27:47:60:40:49:FA:08:28:34:61:3C:84:CD:64:DF:06:08
X509v3 Authority Key Identifier:
keyid:20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:aa:b8:8d:78:09:ce:09:bb:cb:ed:7f:28:b0:5e:25:72:67:
b9:1d:b1:d2:15:f0:31:19:9c:c3:6a:c5:12:3c:80:1d:be:4a:
e6:eb:61:f5:f5:ae:70:86:b6:a9:77:fe:40:e2:f1:de:a5:c9:
69:2a:10:97:3b:5c:19:43:96:e6:58:11:bf:c3:c7:08:40:d1:
7b:bf:4a:bb:74:e2:2e:2c:f8:16:e6:a1:cb:6e:b7:b3:4b:d8:
65:79:fc:8c:3e:9e:fc:9c:bd:26:9e:ef:68:07:0d:41:58:b9:
89:dd:1a:4d:12:79:9a:a1:11:78:1a:24:29:6e:46:18:58:57:
5e:6d:c3:3b:7d:c9:67:26:46:30:b8:e8:1d:65:18:0a:44:38:
e4:20:97:49:4f:dd:8a:65:36:e6:dc:7d:1b:94:d5:cf:4d:5d:
14:b3:4d:ca:22:de:2d:1b:b5:b7:94:d3:ae:8d:72:95:44:10:
05:c9:9b:a8:45:92:73:48:00:28:09:18:8e:76:cd:7f:18:a8:
17:eb:0f:f2:df:d9:e2:ca:75:ff:de:8b:ab:1b:98:73:08:2a:
3e:f9:b5:de:3e:2f:2a:28:be:99:e3:4e:54:4a:ab:21:04:cd:
53:f4:8c:51:e8:e7:74:f0:3d:97:f8:0d:b4:32:b9:bd:c1:8c:
7d:9b:fd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:19 2025 by rpki-client