Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
File: e9WZftB1wimLRhIl4QYPV3sdfU0.mft (raw, json)
Hash identifier: mS8nPjgBlWjsrbZc5cFUN6TlZTd0alGRTtIiFU9OncU=
Subject key identifier: F9:C3:34:93:5C:50:B4:FE:29:23:4B:A5:F3:8B:D9:1C:71:7D:C3:7A
Authority key identifier: 7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
Certificate issuer: /CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Certificate serial: 0197B9D8891CE52D9098DED2AE2A8CEE9FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
Manifest number: 0986
Signing time: Sun 29 Jun 2025 04:01:05 +0000
Manifest this update: Sun 29 Jun 2025 04:01:05 +0000
Manifest next update: Mon 30 Jun 2025 04:01:05 +0000
Files and hashes: 1: GcQb7Wci-pVX30WsNPMX_X8ZJVY.roa (hash: 0NLct9+IWSmNLab833+pcvKvnzISJQn90Hh82nLgM+o=)
2: LMLHHOF93hK4OUpbUUvvwD0c0kY.roa (hash: 02jA2t2eBDun8+LsbWX6msyQRXMN/G2Ajm0JM11hXxw=)
3: e9WZftB1wimLRhIl4QYPV3sdfU0.crl (hash: WCpAL2hhPNMpXJ47hxMH+K5A/EbIWQS0lJhbqKkI5Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:89:1c:e5:2d:90:98:de:d2:ae:2a:8c:ee:9f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Validity
Not Before: Jun 29 04:01:05 2025 GMT
Not After : Jun 30 04:01:05 2025 GMT
Subject: CN=f9c334935c50b4fe29234ba5f38bd91c717dc37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e2:a7:8b:f6:d5:37:c2:d2:55:1f:a3:79:3d:
28:f1:33:82:65:b9:ea:c5:fb:7b:27:a9:26:5d:18:
d8:0f:b8:d2:87:f8:ee:84:2d:9c:7a:32:75:4f:d4:
a2:81:62:18:41:b2:00:aa:6c:c4:0b:cc:d3:90:03:
87:77:2c:82:de:41:24:67:57:f6:fe:ea:2c:51:c2:
0b:fa:a4:7f:81:41:3e:fc:f8:e5:c7:6a:89:9b:cc:
8b:c8:6c:66:90:44:cb:8f:60:24:65:3f:86:2c:62:
88:ff:f3:c3:c1:d7:c5:25:6a:8c:63:92:6d:a3:dc:
fe:45:d8:ba:63:9e:60:57:a9:bb:52:0a:87:9a:f7:
94:63:8e:69:bc:66:f4:a4:f5:d3:c8:1b:31:1f:24:
e2:3e:26:d2:12:c0:11:9a:d5:44:f5:48:bb:db:f4:
5f:f3:22:f4:b3:80:06:0c:62:c8:11:e8:ea:b3:86:
28:19:aa:41:33:55:71:bf:22:4d:15:2f:bb:35:6b:
34:cb:c4:5d:32:4b:19:1e:11:ca:72:77:27:c5:98:
a4:35:8e:f1:09:41:39:91:b0:5b:48:9c:b4:0f:b7:
6a:50:91:c7:ae:da:e2:91:24:1f:df:f6:f6:fe:06:
46:4a:3f:c8:e6:e4:ba:bf:5a:44:28:75:a3:0c:b9:
d4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C3:34:93:5C:50:B4:FE:29:23:4B:A5:F3:8B:D9:1C:71:7D:C3:7A
X509v3 Authority Key Identifier:
keyid:7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f9:dc:20:a7:4b:a9:95:49:93:f0:22:56:e6:d3:40:9c:8f:
a0:b2:43:7d:c2:2e:d5:2b:c4:7c:3b:ad:31:b8:4f:4c:8b:e6:
4d:ca:53:db:c1:46:63:25:17:e4:18:b4:23:3c:17:c5:9c:8c:
d3:b4:c2:e7:59:6e:af:85:24:bf:8d:ed:61:c7:b9:04:c6:22:
08:e5:76:f7:52:b1:74:f0:00:99:b4:2f:9d:62:3c:b5:08:c3:
9c:50:20:69:5d:87:61:ef:ce:05:5d:77:db:75:17:a7:77:69:
03:42:4e:0a:0b:2e:bd:ac:9c:0e:5a:30:3d:5b:a4:fc:9e:26:
dd:d3:78:ba:ec:a3:03:0d:d8:72:51:1b:d5:cc:0a:d7:ba:5f:
79:db:8e:da:14:72:08:e1:a3:dc:c9:70:86:05:3a:b0:9c:05:
5c:99:2e:41:a7:1c:12:c6:59:fd:19:a4:45:f7:aa:f7:fd:01:
c7:f6:54:8c:09:d6:3d:5a:02:43:fb:b3:a4:21:b5:77:be:9e:
3c:92:36:30:64:b5:70:c4:a2:3b:c5:fe:5c:63:78:96:e0:d2:
5c:a6:84:7c:8a:f6:86:65:e0:33:15:25:ff:a6:05:92:25:48:
96:50:e9:f3:af:43:31:02:bf:63:6e:ae:48:7d:bd:b3:51:3f:
6f:8e:c1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:36:58 2025 by rpki-client