Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
File: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft (raw, json)
Hash identifier: lLBvvgZ6gLtX+6TRh0nd//lOIkSKPsXj04Su5zOdKRc=
Subject key identifier: F9:69:63:94:0B:02:A6:F2:C5:6D:A0:B6:8D:CC:FB:19:DF:5D:0D:83
Authority key identifier: BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B
Certificate issuer: /CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
Certificate serial: 0197B7EA2867047DC0EA85AB49DB9E744486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
Manifest number: 0EAC
Signing time: Sat 28 Jun 2025 19:01:05 +0000
Manifest this update: Sat 28 Jun 2025 19:01:05 +0000
Manifest next update: Sun 29 Jun 2025 19:01:05 +0000
Files and hashes: 1: XFCoTFAZ3KfAR1P_1a3xaKLIipA.roa (hash: tHkTVZ0U3L5FGmSNyvjm8iSt+fIxv8Im36qIEB/UGXo=)
2: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl (hash: wUsnhP8QpCarZBdjdOUlIMHgfp0X7hwlz88HFLA45WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:28:67:04:7d:c0:ea:85:ab:49:db:9e:74:44:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
Validity
Not Before: Jun 28 19:01:05 2025 GMT
Not After : Jun 29 19:01:05 2025 GMT
Subject: CN=f96963940b02a6f2c56da0b68dccfb19df5d0d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:b4:a1:7b:e6:72:09:25:de:52:08:dc:c3:
f2:3a:6a:c3:07:cb:f7:a5:18:61:66:e5:d6:63:9a:
d7:5d:cd:0b:63:4a:c5:4c:a9:88:be:c4:65:bc:a6:
6a:20:0e:79:5c:21:ca:e4:c9:08:98:dd:15:37:e6:
a8:ba:7e:f3:ff:2f:3b:25:3d:77:5d:8e:cc:97:a1:
ee:8b:f3:46:ef:a7:59:3a:e4:72:56:f0:01:54:69:
36:f4:f6:07:83:93:1b:44:85:8f:2d:a8:0f:66:55:
5d:43:20:8c:3b:d4:de:f3:6d:ec:09:d9:2b:df:bf:
ce:2e:00:76:cf:7e:99:91:74:b5:ba:08:40:3d:52:
41:87:b6:3b:e1:45:52:5f:31:f4:c1:45:f1:34:c6:
ce:50:e7:97:16:41:15:54:99:7d:20:f4:9e:af:42:
09:18:73:a5:06:a7:34:f5:33:ca:a9:af:40:38:74:
a5:1d:7a:8c:d8:40:7a:ff:9d:d6:4c:df:71:f2:cd:
7f:cc:6a:54:78:04:4a:16:0a:03:f9:78:4d:cf:fb:
6d:b1:18:ed:41:9b:14:44:d4:17:fd:d5:84:56:ec:
b1:6b:f2:cf:35:1e:07:44:cd:fd:27:7d:be:ba:0b:
89:a5:f4:53:a8:2c:6a:ed:a6:31:6f:c7:03:dc:0f:
9b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:69:63:94:0B:02:A6:F2:C5:6D:A0:B6:8D:CC:FB:19:DF:5D:0D:83
X509v3 Authority Key Identifier:
keyid:BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5c:8f:76:67:b4:96:d0:5f:03:9c:94:92:af:44:f5:64:a0:
b3:3b:8e:a9:d0:d8:40:c2:7c:f4:bc:71:0a:13:79:5f:2c:92:
19:2a:59:8d:fd:1c:24:b6:75:e0:9b:26:ba:ea:99:c0:47:99:
8b:94:cb:cf:83:9e:85:a7:cc:f9:bd:64:4c:ad:5a:1d:c5:82:
d9:2b:7b:02:13:6a:0a:08:b0:a2:2a:a5:3d:3a:4b:37:17:d4:
25:32:08:6f:d4:7a:aa:90:d6:24:06:6a:7a:a8:ae:38:0d:39:
47:b0:5d:eb:af:14:36:d6:6d:31:19:dc:02:d8:21:01:1d:95:
b0:40:7f:88:ed:ab:a9:65:39:bf:ec:f9:20:71:1d:f1:df:f8:
3f:9c:3d:1c:87:9a:ca:e9:17:9a:a0:70:8d:3f:dd:9e:03:63:
c8:60:47:2e:6b:f0:a1:53:06:65:b6:bf:e7:68:d4:a9:de:67:
3c:2f:b9:05:54:0e:8e:12:c6:81:ef:70:00:d4:55:3e:4f:ee:
59:ac:12:0d:67:32:60:bc:29:20:7a:74:ec:ea:4f:48:f3:62:
60:51:1e:37:04:85:9a:3e:a4:d6:1a:c7:82:3f:dc:a7:6e:54:
30:11:49:94:11:49:6c:7a:4e:b4:eb:8a:9e:92:7c:cd:5c:be:
46:cf:35:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:50 2025 by rpki-client