
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
File: S91CzNE9f4p8PtpbVQLY1ty7vhE.mft (raw, json)
Hash identifier: CG+IY6Qfmu8UGML1APOREEuAbUlwWVC5PLBwm8utAzE=
Subject key identifier: 3F:B2:2A:6F:31:A6:E1:F9:C4:BF:75:B5:40:4B:43:71:48:57:F6:98
Authority key identifier: 4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
Certificate issuer: /CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Certificate serial: 0197B88F785F38C9EA3CAA74E30F973AE765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
Manifest number: 0B63
Signing time: Sat 28 Jun 2025 22:01:39 +0000
Manifest this update: Sat 28 Jun 2025 22:01:39 +0000
Manifest next update: Sun 29 Jun 2025 22:01:39 +0000
Files and hashes: 1: S91CzNE9f4p8PtpbVQLY1ty7vhE.crl (hash: 0zhNbgPCO4bRQbVLMg+ZfoDOV9WjmIr9itXuGKGAgPs=)
2: oa49XCli4BnhzjMFZt__xzBFHcY.roa (hash: tJwIQtT+Kk475hshkks2qpfV9lu0TNlB3mE3lLaKnow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:78:5f:38:c9:ea:3c:aa:74:e3:0f:97:3a:e7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Validity
Not Before: Jun 28 22:01:39 2025 GMT
Not After : Jun 29 22:01:39 2025 GMT
Subject: CN=3fb22a6f31a6e1f9c4bf75b5404b43714857f698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:c0:83:da:1a:d1:da:4c:a7:5b:c1:fc:81:
11:5f:28:e8:ca:17:9e:22:4a:18:25:96:fa:e9:45:
52:64:6e:eb:cc:80:67:90:ac:72:9c:a4:e7:a8:7f:
00:26:76:79:dd:da:47:3b:df:d8:0a:b0:f0:31:70:
b8:b1:07:90:f0:45:de:85:b6:91:1c:a3:10:00:3a:
c0:ca:84:47:d0:27:d3:71:f5:64:68:28:26:6c:5e:
d7:70:ae:d9:0a:07:d8:cd:54:fb:b8:4b:46:f7:d2:
93:df:b2:b4:e8:69:98:09:c1:e0:5b:55:80:65:d0:
29:d0:1c:10:11:35:da:ba:a1:3c:27:ff:00:a5:90:
16:fe:ae:d1:f4:35:1a:89:13:f0:8a:20:3d:55:1c:
0e:7d:0b:2a:71:e2:36:14:e5:e1:f0:1a:3c:c1:98:
fc:33:35:a4:08:6f:ee:50:47:a5:2a:81:25:0a:98:
3f:33:78:fd:7b:49:1e:28:98:ec:f0:5f:9b:2b:74:
ff:1e:82:8e:51:96:11:28:00:37:85:7a:87:d0:83:
11:64:3f:d8:48:5e:14:a1:32:05:be:78:c1:2d:66:
8c:48:f6:d0:cd:7a:a5:ba:51:04:eb:27:88:ed:5f:
5c:0b:46:27:ac:01:85:c4:c8:06:ea:87:d1:17:27:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B2:2A:6F:31:A6:E1:F9:C4:BF:75:B5:40:4B:43:71:48:57:F6:98
X509v3 Authority Key Identifier:
keyid:4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7f:bc:c6:7c:f0:c1:6a:63:05:4e:f6:34:ad:4b:a9:b7:0e:
0f:1c:4f:55:39:d2:a4:4a:0f:b1:0f:04:ed:9b:23:fa:33:a4:
c0:f6:b1:12:af:3c:78:15:c6:ef:d5:42:f9:a5:69:4b:d3:72:
9a:91:19:a6:a5:cf:30:e1:f7:38:13:0c:b0:8a:96:06:60:17:
61:62:df:55:56:72:de:e8:10:a8:69:59:f9:2a:76:46:26:39:
b6:56:a0:cd:62:d4:b1:b6:b2:ff:74:e0:48:d3:9c:a8:29:48:
fb:6d:87:9c:2b:61:46:58:48:80:db:2a:0e:39:a2:11:77:b4:
fc:ba:11:ad:c8:8f:4c:32:e9:9d:88:52:0c:41:18:0b:84:0d:
ad:44:be:58:f9:44:c4:7b:6c:f6:da:03:9d:41:bc:aa:79:3b:
eb:b9:a3:fc:e6:45:88:44:5f:b1:82:26:bf:81:56:1b:c1:36:
0d:5f:5c:60:73:b4:8a:ea:a1:b0:fb:d9:20:76:ae:2a:bb:46:
32:e7:3f:6e:77:1c:3d:a9:00:3b:76:03:18:9d:50:bf:c6:f9:
29:81:c8:bd:a2:79:6e:30:24:d9:ae:db:bf:05:6c:de:fc:fe:
43:da:19:5a:7a:09:13:25:3b:f1:fc:02:3e:b5:4a:1a:9f:e6:
1e:41:c3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:49 2025 by rpki-client