Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
File: MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json)
Hash identifier: E1A6gn3aPJyx3Nrpso1chbpOAGIlPptN1F4Qn5z+HNw=
Subject key identifier: F9:E2:F6:F7:96:97:62:2A:33:2C:1D:CB:3C:8D:9D:5B:68:F5:C7:5C
Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
Certificate issuer: /CN=327557cf22629d058a5114965b2f9df8ef4db690
Certificate serial: 0197B6A09B8799FD61AE35381CEF4932373C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
Manifest number: 0C9B
Signing time: Sat 28 Jun 2025 13:01:08 +0000
Manifest this update: Sat 28 Jun 2025 13:01:08 +0000
Manifest next update: Sun 29 Jun 2025 13:01:08 +0000
Files and hashes: 1: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: VC1Q4NQ+oAvgU4yFtFhnPK1FzbiU1qKcFtege1Lmew8=)
2: hApSbA3jzy_s3iVNvrGjhLhy3rU.roa (hash: 1X2vbtL7wfNX8hGTI4KlZns0bkwGbPIYpWY571Ew9V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:9b:87:99:fd:61:ae:35:38:1c:ef:49:32:37:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690
Validity
Not Before: Jun 28 13:01:08 2025 GMT
Not After : Jun 29 13:01:08 2025 GMT
Subject: CN=f9e2f6f79697622a332c1dcb3c8d9d5b68f5c75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:97:34:59:c6:88:da:3f:b2:9c:15:da:4f:
a3:34:7f:7d:f4:7a:e0:6f:0e:38:db:88:f0:a8:af:
ea:d4:15:64:76:d9:bf:ee:81:ca:29:3f:9e:3d:ae:
64:ad:cd:ff:43:8e:e4:fb:84:07:4d:ce:c8:67:79:
ed:e9:cb:61:4d:2e:8e:4c:72:b8:f8:45:7f:52:08:
6f:f6:66:59:a5:b2:14:39:98:9a:a3:fc:f2:a5:7f:
98:8c:ff:c4:80:62:51:c6:44:4c:ac:c9:0b:a8:be:
2e:10:4a:43:bc:03:98:3c:e9:bf:d7:ee:0d:27:a5:
dc:7e:34:a2:83:c8:c6:bd:35:3f:ae:a1:ac:db:66:
d6:9b:52:5d:85:8b:28:15:9e:67:90:a1:35:35:dd:
1b:78:6f:cb:f6:82:5b:04:27:4c:96:0d:c8:3a:be:
c7:7d:43:bc:87:6b:64:89:ff:d6:fe:2f:af:ee:74:
de:9d:49:70:a4:22:54:e8:e7:41:f5:af:8d:37:21:
ca:cd:40:de:f3:3b:2d:a9:40:72:a3:49:45:3f:a1:
fd:b5:55:d4:48:43:85:4d:e0:40:34:e6:7c:0c:5c:
8c:f5:21:90:49:c2:f8:36:b0:b6:a8:65:b3:89:ad:
0a:3b:a7:06:97:c2:1c:72:31:3a:e8:80:93:a5:5e:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E2:F6:F7:96:97:62:2A:33:2C:1D:CB:3C:8D:9D:5B:68:F5:C7:5C
X509v3 Authority Key Identifier:
keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:67:45:46:6f:8a:d8:26:d4:83:90:89:62:21:3a:84:a8:ac:
62:44:68:4d:17:93:60:ad:ad:39:ed:6a:9a:0b:0c:16:8c:3f:
5a:08:a9:0f:cf:5f:e6:8f:0f:7b:20:a1:3e:2a:3f:74:ac:9f:
f7:6e:8c:b4:e5:b3:9c:f4:4e:91:bf:36:2a:e2:0a:d8:4e:03:
f3:12:80:5b:2d:31:25:c1:19:ca:c5:dd:51:e0:84:fe:9a:93:
61:a0:aa:08:23:b4:07:ea:f7:34:99:43:73:65:48:33:6d:37:
89:65:07:18:57:64:9f:5c:47:42:26:e7:b3:7c:4b:94:bd:d3:
24:6c:c3:56:76:26:73:95:73:16:1f:c2:bb:35:68:7a:85:08:
8e:1f:bc:fb:82:32:a9:5d:b3:66:07:20:45:d2:0e:99:06:f8:
bb:48:b6:0a:b4:5d:d4:49:f3:85:46:7f:1e:fb:be:c6:6d:e4:
40:bd:ca:d0:01:2e:14:b9:ef:e0:97:c7:0f:03:84:79:af:a8:
e2:19:a5:74:d1:f2:83:a8:99:2d:4b:7f:81:f8:6f:16:b9:bd:
e9:8d:d2:95:bc:bf:d3:1a:12:5f:96:57:72:f3:34:79:dc:9c:
94:08:c5:42:da:96:48:c9:2f:34:74:77:63:c5:68:b0:bd:ca:
6c:62:d8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:36:05 2025 by rpki-client