Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
File: 9VW6bis9tVIdvHBipYwW3aG58i0.mft (raw, json)
Hash identifier: borerFKuzne1Kqy7jVT4CIsazeEGaCF9yRYHd7VvARo=
Subject key identifier: 2E:F6:1D:8F:31:22:BA:3C:4A:7C:DB:C7:67:30:BA:31:71:54:B1:98
Authority key identifier: F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
Certificate issuer: /CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Certificate serial: 0197C4C9DBC7C4BAB0FD1733F408680CEC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
Manifest number: 037D
Signing time: Tue 01 Jul 2025 07:00:52 +0000
Manifest this update: Tue 01 Jul 2025 07:00:52 +0000
Manifest next update: Wed 02 Jul 2025 07:00:52 +0000
Files and hashes: 1: 2n7OMl3jQfBIql5u4fGHwPSLtNw.roa (hash: 1rKFkHzCGzWhEvrCyPc6hzfuk0GlXlkcWKE6261l+UI=)
2: 9VW6bis9tVIdvHBipYwW3aG58i0.crl (hash: +Z1rjtGqlz3qknvih/ownVu6MTkCQleP9cGMjR+GJA0=)
3: R9C9RHOYfHsQX3_4qdQpXgxkEVg.roa (hash: TG8phgVc45ubyKw+a5c8BVXvVbA9fhRO3sFvs8XmDD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:c9:db:c7:c4:ba:b0:fd:17:33:f4:08:68:0c:ec:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Validity
Not Before: Jul 1 07:00:52 2025 GMT
Not After : Jul 2 07:00:52 2025 GMT
Subject: CN=2ef61d8f3122ba3c4a7cdbc76730ba317154b198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:47:61:bf:45:3c:2d:f8:cf:66:53:c8:25:
e1:e2:83:24:79:ec:a5:16:1f:6d:9b:54:69:f4:41:
8d:82:ed:7b:7e:e9:5a:c5:2a:c9:21:6f:c0:6d:3b:
5d:a8:29:3a:13:bd:36:cc:de:3e:e7:ee:10:f0:75:
29:c4:1b:e4:bf:98:ff:be:1a:e2:c3:1e:09:43:c0:
f5:8f:e5:0b:85:ac:c7:b3:cd:ce:c5:16:cb:70:c7:
24:a6:4a:23:db:94:3f:72:78:44:8e:70:df:a0:db:
ae:a6:1a:ac:57:96:1e:f1:90:ca:d4:2f:aa:7a:6e:
6d:f1:64:fc:f3:09:c7:1c:7a:b7:ff:08:12:e4:d4:
a2:b5:1a:ab:a4:d0:a4:71:b6:62:5f:90:89:e9:df:
f3:7d:a2:05:fa:40:a6:60:35:9a:4f:94:fc:b1:08:
66:61:2a:78:b3:0e:09:03:e4:d4:72:27:ad:26:9a:
ce:92:52:76:4b:28:18:00:64:32:5c:34:68:2e:e4:
e3:f4:22:f6:94:a7:b1:8a:5d:49:62:dd:d3:a2:cc:
d4:31:56:1c:8c:36:ba:da:ce:25:14:65:9e:31:49:
cf:cd:19:08:7a:82:4e:bf:7d:07:04:ee:a2:3e:23:
86:bb:31:0b:da:0a:64:04:18:c4:e0:72:14:5a:c9:
73:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F6:1D:8F:31:22:BA:3C:4A:7C:DB:C7:67:30:BA:31:71:54:B1:98
X509v3 Authority Key Identifier:
keyid:F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:07:83:3f:31:b6:b2:13:8b:de:ce:d0:c1:69:f9:60:79:97:
ac:2c:9b:78:6d:09:22:07:7e:5b:00:5a:14:c7:34:4e:3f:64:
31:4b:59:ac:9a:c2:15:35:d2:64:f1:d3:83:e0:e7:4a:14:e2:
1e:5e:3b:cf:cb:42:b2:98:af:ba:0a:d2:16:48:91:ce:46:3e:
ee:4b:5c:5f:0f:8e:f3:5b:d5:62:ca:77:ec:ac:6b:19:77:75:
c6:85:ab:70:9f:39:1a:68:c1:18:5b:bc:65:7d:c5:ea:98:65:
70:b5:1c:0b:f1:76:b1:c0:76:7b:80:48:18:dd:b7:7e:b2:79:
d2:57:e5:04:5e:85:d1:cc:32:13:15:68:59:79:47:fe:d9:f5:
d6:8d:2e:30:22:da:01:56:9e:7c:c5:a8:67:45:0a:e5:de:0e:
7b:c2:69:34:39:7d:19:01:b0:81:d1:ad:d9:44:9d:3a:99:9a:
02:f2:4e:1e:af:fc:1c:61:79:17:4b:bf:59:f6:98:4d:c7:7d:
15:7b:a5:41:c9:ba:67:49:4d:56:48:19:db:42:4e:d3:c8:c6:
5a:0c:c5:98:ee:33:97:54:22:26:8e:cd:79:f9:34:97:c7:52:
2d:99:d3:e4:a7:08:88:cd:13:bf:2b:ad:62:a6:97:a7:d6:ab:
9e:3c:27:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:42:13 2025 by rpki-client