Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
File: hX9MEi5PjGAfIcXIaHFtRgidheE.mft (raw, json)
Hash identifier: O2fzdwHOY5VUrlJ5rEd7iODWXRna247S5stmFnUjAxs=
Subject key identifier: CF:F3:3D:60:74:4B:45:96:68:68:1D:74:80:E0:7D:FF:69:4D:08:06
Authority key identifier: 85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
Certificate issuer: /CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Certificate serial: 0197B7B3541C27A8DB622A04B9286FC1ABC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
Manifest number: 0A7D
Signing time: Sat 28 Jun 2025 18:01:12 +0000
Manifest this update: Sat 28 Jun 2025 18:01:12 +0000
Manifest next update: Sun 29 Jun 2025 18:01:12 +0000
Files and hashes: 1: hX9MEi5PjGAfIcXIaHFtRgidheE.crl (hash: ZHb1XcLd8yI7B4aR7kvn/ERkYnqnxcxO2ggClUZN7FE=)
2: wypxlBc1J8Bpx8wsCukzLkT7CzM.roa (hash: VSR04yRc8P3tg6W5nBtOO4BrNXPIDW2s4T0F9VJBzcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:54:1c:27:a8:db:62:2a:04:b9:28:6f:c1:ab:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Validity
Not Before: Jun 28 18:01:12 2025 GMT
Not After : Jun 29 18:01:12 2025 GMT
Subject: CN=cff33d60744b459668681d7480e07dff694d0806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8b:3a:e4:1b:79:f4:e9:ca:98:8b:c5:c5:ee:
3f:2b:7d:38:f6:dc:40:ee:9e:a4:e2:6a:08:03:88:
92:9c:a8:e0:c2:e6:27:12:7d:10:cc:97:4a:1c:7b:
04:c5:e5:f6:7e:46:7b:c3:19:c9:40:d6:89:e7:ca:
bf:e5:5e:95:6d:70:ce:73:35:b4:1c:63:05:4a:e2:
a2:ad:a0:95:3e:7c:8d:0c:2d:65:f9:b6:1e:ce:ee:
5a:c6:07:49:32:8f:1b:e0:a2:eb:e6:1b:7d:9f:d3:
c3:e0:44:13:e0:d7:b9:6b:d2:e7:9d:24:98:a2:eb:
d1:83:a1:8f:37:25:ea:96:9b:8e:f9:75:69:1c:58:
7e:c0:61:fc:c2:46:37:e6:59:ef:b7:3c:8f:9f:81:
44:47:f7:0b:cc:09:88:ff:b2:b5:a5:f3:1e:94:f8:
dd:c1:f8:23:6a:77:6a:a7:04:64:15:a5:a0:6d:37:
af:ae:1e:ef:9b:59:2a:63:51:61:a2:7f:41:86:54:
98:c0:cb:2a:0a:72:96:57:86:7b:a8:0b:23:b8:7f:
cc:db:10:e6:94:c4:41:7b:db:46:ec:cb:3a:d1:d2:
1e:1d:ba:b0:29:27:20:d3:dd:8b:bb:97:ed:d4:2a:
2e:a9:f5:be:a2:88:72:97:a5:0e:29:e1:43:98:e5:
63:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F3:3D:60:74:4B:45:96:68:68:1D:74:80:E0:7D:FF:69:4D:08:06
X509v3 Authority Key Identifier:
keyid:85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fb:30:7a:2a:41:81:c3:48:b6:cf:b5:21:31:70:a1:8d:bd:
5e:e1:95:5f:87:09:b6:cc:9d:dd:d1:38:3a:22:78:db:5c:dd:
5e:9d:3a:ce:4a:82:ee:e9:b3:74:d3:ba:ea:fe:09:ea:9a:fe:
2b:ca:3e:d7:63:6d:3e:83:b3:e0:f6:51:ec:35:cf:93:20:ac:
a7:2d:4f:38:8f:a5:4f:94:fd:be:76:e7:85:54:92:d7:c2:b9:
1f:74:e6:6e:9e:8c:4e:89:3f:ff:5c:35:d7:7c:77:cf:20:bd:
8a:d7:76:22:02:92:e1:73:67:0b:31:01:71:e8:d2:46:96:f4:
d3:71:fc:ad:de:b4:16:e2:34:48:31:94:e6:dd:59:f6:e1:f2:
fb:e1:6f:35:01:72:bd:fb:c5:dd:9e:dc:9f:4b:a6:b9:b0:cb:
7b:64:e9:06:f2:30:77:1b:7e:78:00:88:15:aa:bb:66:5d:16:
ac:e9:74:7f:13:c7:b5:b6:40:ad:a3:73:1d:37:5d:6d:b3:54:
bb:a0:17:a2:22:60:5b:2b:47:7d:64:10:84:00:82:c0:22:07:
51:36:52:4b:b4:8d:45:c3:16:47:31:2b:24:56:a7:9a:ce:24:
67:cd:cc:d8:db:89:43:06:d9:a0:29:43:37:5b:3d:3f:3b:88:
b8:c2:e2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:19:47 2025 by rpki-client