Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
File: 9fgHODUdz8da-ZaZOikpw3E0ogg.mft (raw, json)
Hash identifier: ZQoCkpzXkN8Q2DWQnxnDQGmRwIZqduSs+W2hu9r8ApE=
Subject key identifier: EA:3F:9D:4B:B6:CE:D9:23:D7:5E:D6:F9:79:3E:69:AC:C5:07:21:ED
Authority key identifier: F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
Certificate issuer: /CN=f5f80738351dcfc75af996993a2929c37134a208
Certificate serial: 0197B70EFB08197086A228E2BAFC103D44D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
Manifest number: 0FAF
Signing time: Sat 28 Jun 2025 15:01:41 +0000
Manifest this update: Sat 28 Jun 2025 15:01:41 +0000
Manifest next update: Sun 29 Jun 2025 15:01:41 +0000
Files and hashes: 1: 2Qdf3KbNG5NqoZJX8HW2axOKIks.roa (hash: aZGBYQ1YtddzlVOGQVr+1nQgozPaUhvPhqEz391ISKs=)
2: 9fgHODUdz8da-ZaZOikpw3E0ogg.crl (hash: w0nwaCx2ayHhxSn5L/IGUH36vvmaqQiNeeQ3QAEFipE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:fb:08:19:70:86:a2:28:e2:ba:fc:10:3d:44:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f80738351dcfc75af996993a2929c37134a208
Validity
Not Before: Jun 28 15:01:41 2025 GMT
Not After : Jun 29 15:01:41 2025 GMT
Subject: CN=ea3f9d4bb6ced923d75ed6f9793e69acc50721ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b4:2f:96:a0:bb:e9:dd:de:30:83:26:7e:f7:
2b:7d:0d:25:ac:2d:9c:1d:67:9c:94:b9:06:71:ba:
4c:59:4e:b6:94:c5:a7:26:a4:a6:24:25:46:74:d1:
7a:98:29:93:f4:5c:61:f8:4c:40:f6:6a:18:d6:40:
6f:c7:fc:e2:ca:24:5e:99:2d:e7:29:86:bf:de:f1:
5c:67:4a:e7:b8:6c:cc:fd:92:0a:79:5c:81:54:f0:
d4:49:96:5c:51:5d:0a:b3:c6:f9:94:69:b2:84:31:
e6:2b:7a:ca:f8:c0:7c:18:8d:03:62:3a:86:17:05:
6f:3a:6a:c2:d7:bb:4d:f6:03:10:a3:04:a7:48:4c:
f9:0f:1c:c4:31:0d:20:e5:a0:51:3f:d8:bf:7d:32:
19:89:36:fc:48:8e:60:d0:8c:2a:1b:a2:b3:da:c1:
aa:54:6a:7c:23:cf:4f:99:fd:71:d7:1e:9a:34:c0:
71:82:d0:a7:ec:e3:c0:16:ca:92:58:f2:77:90:84:
6d:25:29:70:fa:03:ba:50:6b:ca:20:3f:6b:76:f7:
5e:5e:6f:30:02:03:90:54:9d:d1:d5:b1:23:9e:0a:
40:c5:49:86:ab:42:80:17:fd:2b:2b:3a:42:94:84:
0e:34:65:dd:0d:d6:c3:9d:34:8b:a8:99:2f:34:3c:
4c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3F:9D:4B:B6:CE:D9:23:D7:5E:D6:F9:79:3E:69:AC:C5:07:21:ED
X509v3 Authority Key Identifier:
keyid:F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:53:a1:66:71:ca:29:45:3c:c1:e8:b2:28:67:82:65:c4:11:
a2:3a:60:e6:d8:7c:ce:54:fb:23:d5:5d:85:8b:60:1c:06:90:
c0:ed:77:a7:c1:c9:55:4b:eb:54:94:d7:41:ce:94:a5:dc:2c:
4b:ac:10:0d:3f:81:a4:9e:5a:87:38:97:d4:20:b9:76:9e:a0:
1e:bb:94:52:17:96:33:a3:36:49:21:27:db:ad:04:1d:3e:1f:
3b:85:ac:ad:e2:a9:4a:93:87:4a:be:6f:d9:e4:29:cc:1c:bf:
21:0b:af:68:17:8a:e0:c4:6e:5f:ba:52:ca:8d:15:31:bb:52:
fc:06:d6:b4:8e:ea:81:16:fb:33:fb:1f:58:94:98:3a:08:61:
eb:4f:28:af:5f:22:97:a4:a8:3b:f7:78:91:ba:5e:ba:95:b3:
d6:13:e3:00:8b:36:4d:7d:f8:96:07:c4:16:91:5b:a7:fc:07:
f3:3d:ac:bb:10:c0:a5:bb:60:0c:6a:de:2c:1d:30:1a:cc:e4:
ce:bf:1b:c0:52:38:a8:f0:3d:64:b0:25:82:ac:61:55:19:42:
8b:10:70:f0:dd:3d:ad:43:a5:6d:e3:89:83:10:42:ca:51:7e:
b3:61:6f:d7:42:8c:c3:2a:c1:02:4a:72:b9:3a:36:c9:91:04:
17:67:64:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:45 2025 by rpki-client