Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
File: ct9pdDDLtXxJoKGZMCTW0yn35WU.mft (raw, json)
Hash identifier: KZa7pPVYHtTln0Zy1M5eOLNbpvyr8MtQ/ahaMitut6c=
Subject key identifier: BA:BD:19:94:B2:C5:C1:20:DC:07:3E:BB:E9:B8:4E:9A:05:A3:FB:8F
Authority key identifier: 72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65
Certificate issuer: /CN=72df697430cbb57c49a0a1993024d6d329f7e565
Certificate serial: 0197B8C5C5852CD6E0EE37984CD6A7A03C52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
Manifest number: 1062
Signing time: Sat 28 Jun 2025 23:00:58 +0000
Manifest this update: Sat 28 Jun 2025 23:00:58 +0000
Manifest next update: Sun 29 Jun 2025 23:00:58 +0000
Files and hashes: 1: ct9pdDDLtXxJoKGZMCTW0yn35WU.crl (hash: k6eCSco75VvbnFIweQBPZrV4u0DSJn7/cXy+renqQZA=)
2: hcuixNDtZTOahJr2Izkq1PkvB30.roa (hash: 0Y98rWR7z+ovo4LddJHUN4JqVyjOhGekgLOw4fEG1XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:c5:85:2c:d6:e0:ee:37:98:4c:d6:a7:a0:3c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72df697430cbb57c49a0a1993024d6d329f7e565
Validity
Not Before: Jun 28 23:00:58 2025 GMT
Not After : Jun 29 23:00:58 2025 GMT
Subject: CN=babd1994b2c5c120dc073ebbe9b84e9a05a3fb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:ec:13:96:ab:44:f6:1a:77:3a:a8:18:83:
1d:a5:36:d0:fc:1b:b4:45:2e:0b:f9:52:bc:c2:3e:
e5:68:83:c4:3d:a7:de:fb:8a:bb:3a:cc:a6:da:8d:
f8:a9:37:9b:74:40:65:8f:db:ec:d7:cf:d7:cd:3b:
3b:47:49:7d:41:a7:ab:a6:d3:6a:97:c1:a7:7e:7f:
55:cc:80:67:6d:67:e7:28:a0:ce:01:3d:01:63:84:
46:1f:fc:72:ff:47:9b:3e:f6:7b:45:46:61:39:51:
8d:c0:4b:45:5d:f2:11:80:83:90:bb:22:39:31:9b:
c9:46:b7:17:9a:8b:8e:41:f6:37:fa:7a:0f:d2:63:
10:e5:1e:f3:5b:b7:09:fa:59:2e:f8:d9:92:0f:f6:
4c:9a:76:e2:28:24:2c:0d:85:87:7b:89:09:c1:da:
b9:5e:dd:00:c1:df:e2:eb:d8:08:b5:c6:72:bc:03:
28:c7:23:a3:67:1e:01:91:d5:ff:c9:3a:6b:05:2c:
0d:f2:c0:f9:18:5b:c2:4b:0f:98:42:55:3c:66:c8:
ce:61:c3:49:61:d8:e8:6f:11:2c:d0:eb:c0:f0:47:
7d:3b:7a:9b:48:fc:fd:a6:f0:c6:dc:91:4b:5f:3f:
b7:c4:58:2f:16:3d:23:4b:e2:9c:96:38:3b:69:b5:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BD:19:94:B2:C5:C1:20:DC:07:3E:BB:E9:B8:4E:9A:05:A3:FB:8F
X509v3 Authority Key Identifier:
keyid:72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c7:6a:28:0c:b4:ef:9f:b3:44:70:1f:b6:5f:c4:62:1e:dc:
49:6a:f4:81:e8:9b:b5:44:5c:4b:5b:f3:c1:2a:42:ea:fb:90:
f3:2d:10:08:09:c8:74:6c:3f:89:5c:df:c1:58:a0:57:18:68:
de:ae:9b:75:3c:7f:41:03:e8:37:4d:77:06:ef:b1:c6:3a:ac:
1e:7a:9c:e6:db:c0:63:c6:7e:8e:d7:ae:ed:41:88:df:cd:21:
cf:f1:0f:73:29:71:c5:c5:dc:21:bd:57:e1:73:fa:8c:c9:f7:
a7:00:14:f6:ff:fe:55:70:1d:7d:1f:c5:37:13:8e:ce:0c:3d:
b1:f0:6a:c5:05:f2:62:41:d1:1a:66:fb:73:d0:d5:19:e2:f7:
a1:c8:dc:19:2f:a7:8f:c9:a7:de:f8:bb:06:8a:71:8d:3e:c5:
51:bb:d6:e2:c7:96:0c:e6:ed:2c:8d:90:32:2b:ad:df:70:7d:
c7:b0:8e:14:67:5d:6c:2e:18:0d:ab:bb:e1:cb:58:57:1d:05:
f3:47:f4:46:35:de:21:cc:98:6a:17:85:91:62:e9:1d:60:34:
91:a0:3a:4a:eb:a0:02:f8:2a:af:79:4d:b0:27:14:f7:1c:47:
9d:dc:f2:83:8e:6f:57:29:f2:48:0c:a9:59:0f:5b:58:03:e6:
13:98:40:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:07:32 2025 by rpki-client