Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
File: 9gcH8oeiMJvuy7hS7kCqgxueeGY.mft (raw, json)
Hash identifier: 2ODBiQIyz+AEoWU+wIhbnVtHEKJHsTDsmqztdxnLh38=
Subject key identifier: 49:D9:36:9C:1C:E3:9C:76:C9:73:6F:D9:9D:A5:B2:20:BB:6A:BA:BF
Authority key identifier: F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
Certificate issuer: /CN=f60707f287a2309beecbb852ee40aa831b9e7866
Certificate serial: 0197B82105E107C88636508E2115D05FBE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
Manifest number: 0C63
Signing time: Sat 28 Jun 2025 20:01:01 +0000
Manifest this update: Sat 28 Jun 2025 20:01:01 +0000
Manifest next update: Sun 29 Jun 2025 20:01:01 +0000
Files and hashes: 1: 1qWzBwVhmQ6zdPJi5w7aMEYeKoc.roa (hash: QUUw5IgATMBX8godfHfSxzPR3Se/paZBDUtUUYMUESM=)
2: 9gcH8oeiMJvuy7hS7kCqgxueeGY.crl (hash: ZEk41/Wn2US/snCU2bzUV0OB5jp6mhO9U6O700cz/tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:05:e1:07:c8:86:36:50:8e:21:15:d0:5f:be:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60707f287a2309beecbb852ee40aa831b9e7866
Validity
Not Before: Jun 28 20:01:01 2025 GMT
Not After : Jun 29 20:01:01 2025 GMT
Subject: CN=49d9369c1ce39c76c9736fd99da5b220bb6ababf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:aa:9c:11:68:70:e8:d7:41:46:20:5c:df:
25:46:69:ac:03:eb:f6:84:dc:9f:b1:30:b4:e6:de:
29:b4:48:31:d4:d9:74:6a:cd:73:2c:4f:37:2b:5a:
7b:16:f5:b9:fa:7d:41:c9:fb:b1:4a:d9:2d:49:12:
24:33:1b:01:0d:c6:d3:1e:e5:2b:45:f8:b7:3c:35:
27:96:28:59:f5:db:79:94:53:68:ff:76:71:81:10:
96:55:16:ff:96:34:f3:01:89:64:96:82:5f:62:14:
9c:3d:db:f4:30:9f:ca:e0:e7:86:c7:54:09:bb:35:
c8:4b:39:7b:2d:44:20:7d:5c:7e:6b:eb:ff:5c:8f:
f3:92:cd:e8:46:75:fd:3e:d3:5d:78:55:8f:05:b1:
94:9f:3a:15:21:ef:7c:e5:0a:f2:4a:d7:62:54:d3:
0a:ec:41:0c:b1:6d:32:e6:63:30:ac:3a:24:f4:b0:
f7:c5:b5:80:f8:e5:19:cc:ae:63:a0:08:18:55:8e:
ff:3a:2f:44:51:d5:17:d5:59:96:ce:d3:ce:f2:5b:
b5:55:67:b1:97:55:06:c6:14:1a:7b:7f:09:72:22:
d1:ce:44:4c:8f:b8:83:32:65:b3:64:98:57:22:b6:
8c:19:fb:0a:67:84:99:77:4f:79:74:73:ee:c0:12:
ac:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D9:36:9C:1C:E3:9C:76:C9:73:6F:D9:9D:A5:B2:20:BB:6A:BA:BF
X509v3 Authority Key Identifier:
keyid:F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e9:1d:7d:c7:2a:42:39:a9:7d:68:b9:ca:f6:16:85:08:7d:
53:48:cd:e1:5f:bd:a5:56:0b:eb:91:d3:03:2d:55:75:2a:77:
08:85:35:84:e1:93:8c:38:68:65:ae:e6:19:f8:f5:82:13:00:
69:6e:3f:3a:e6:79:3c:25:69:ae:04:2e:8a:0e:8a:a8:1b:25:
8e:8e:b6:81:00:b0:f0:12:dc:39:b1:2d:d3:35:be:7e:1d:21:
0f:dd:5b:66:4f:96:b1:2c:af:a2:56:5a:4e:41:0a:4c:63:61:
53:87:04:78:94:f8:11:47:04:f2:5c:08:73:dd:9f:b3:ee:65:
94:c6:83:69:fc:77:70:80:99:51:35:d7:69:26:b4:06:57:8a:
ba:de:12:09:7b:31:76:41:a7:62:38:cb:3d:aa:2c:21:3d:e9:
fc:af:cb:26:7d:b7:0e:79:08:1a:4a:80:e8:3b:a3:64:48:16:
08:b4:d0:96:c8:2b:9d:21:fb:4a:a2:c0:4b:6b:e0:04:bb:f2:
81:79:f7:10:a2:a2:b1:cb:54:1b:14:76:5e:4c:7a:5c:4a:8d:
4a:6b:de:05:51:b4:1d:84:55:7f:a7:5c:0a:9c:eb:ea:74:e6:
63:da:59:85:f9:39:a9:ab:0b:07:aa:9c:ba:31:f6:d2:e6:f5:
14:4d:0a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:23 2025 by rpki-client