Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
File: 9XIyXS0hl0ZpxIj566pru5LNX-0.mft (raw, json)
Hash identifier: C/y6QVLNBr1JJ9h1Z2RWSF1jKwhnxfItJE2vph9168E=
Subject key identifier: E4:36:6F:49:DE:7A:01:F1:A5:35:54:A6:F6:9A:3C:82:85:D6:EB:4B
Authority key identifier: F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
Certificate issuer: /CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Certificate serial: 0197B6A13528BC185F76DD8F24C4209378A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:01:47 +0000
Manifest this update: Sat 28 Jun 2025 13:01:47 +0000
Manifest next update: Sun 29 Jun 2025 13:01:47 +0000
Files and hashes: 1: 9XIyXS0hl0ZpxIj566pru5LNX-0.crl (hash: QAA0nhUzLVrfX7pZSTtaRMOXHYONSlD8nGdAVKMEcj4=)
2: cBAS0GUhF4mz2fqaOHRlVgN3CFs.roa (hash: Lp1yFkf1vOWXjEEeUSdOv9NCeGF4SfR636ANc/ZvdMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:35:28:bc:18:5f:76:dd:8f:24:c4:20:93:78:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Validity
Not Before: Jun 28 13:01:47 2025 GMT
Not After : Jun 29 13:01:47 2025 GMT
Subject: CN=e4366f49de7a01f1a53554a6f69a3c8285d6eb4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:68:1d:10:22:38:b2:65:d9:62:b0:21:5d:
e7:75:3e:71:d8:e4:d4:28:ea:07:86:68:a0:3f:bf:
ed:07:b1:9b:26:ca:e5:60:96:8a:ab:a9:2c:d5:c7:
52:af:41:c8:6b:4c:0b:6d:38:c1:39:35:51:6d:0b:
f2:7f:59:55:64:f3:b1:eb:a5:80:ca:f4:bc:e7:7d:
42:21:d5:13:98:76:d7:12:9f:16:91:12:59:c8:ab:
ce:06:37:66:11:fb:52:93:21:08:ba:91:4f:e6:37:
29:1e:cd:43:ca:fd:e6:f3:b2:82:6e:8a:c2:8f:a0:
7a:5a:58:f4:c8:84:40:02:b0:f8:31:a0:78:d2:b2:
5f:5c:7c:f9:2a:0d:38:b8:b6:98:b1:a9:fd:55:42:
f4:9b:c9:00:40:ff:29:90:c4:a3:c9:d6:c5:d7:cd:
30:72:2f:a1:12:21:20:f5:3c:e5:4f:51:15:d7:bc:
ef:61:5b:65:ba:da:fa:b9:f2:af:de:85:c1:62:10:
af:82:a4:50:5d:81:8b:ba:35:b0:22:2c:74:3a:9b:
1e:8d:b5:ee:20:89:98:fb:47:cf:ed:e4:ac:56:ec:
cf:b5:6d:1e:d2:f8:cd:92:20:e8:d6:e7:85:26:d9:
8b:a8:b2:9c:21:4e:50:5a:3b:09:8d:8a:60:11:d5:
02:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:36:6F:49:DE:7A:01:F1:A5:35:54:A6:F6:9A:3C:82:85:D6:EB:4B
X509v3 Authority Key Identifier:
keyid:F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:27:82:e5:ef:f7:05:df:6c:d2:bf:59:ca:e3:1e:34:d9:dc:
c1:d0:73:7e:de:01:9d:b8:6a:bb:46:a8:92:d0:51:24:d7:20:
ba:19:6f:86:e9:1d:5a:08:13:33:34:bc:c7:1e:5f:ed:12:44:
74:fe:8b:f4:1b:aa:8f:0f:c9:ae:6e:c6:a3:72:e2:54:49:e9:
76:3f:fc:4a:4a:16:09:e1:a8:45:1f:c6:70:c9:47:ae:e8:b8:
c2:26:cf:2d:b6:b0:9a:48:3c:49:3b:64:1c:59:49:f6:ce:9c:
48:1d:bb:3b:bf:72:bd:35:04:a6:34:ea:56:a4:68:dd:7a:ba:
04:ad:39:8f:5f:d9:65:e0:75:45:f7:ff:b8:b2:09:67:f9:85:
64:73:d4:ee:92:8b:18:64:1c:96:30:6d:b8:1a:28:39:e1:4f:
e2:45:4a:97:92:ed:c5:54:ae:a1:39:54:9b:44:b2:84:7d:b8:
75:db:b3:94:26:60:c5:57:a3:0c:80:42:02:3d:8c:1e:da:ca:
8b:ed:71:9b:71:77:73:98:7e:c6:2f:98:52:d6:81:d7:94:f0:
fa:dd:e9:8b:9d:a3:54:9d:4a:32:cc:9b:db:ae:b3:b0:8e:9b:
83:02:23:bc:17:0f:8e:56:e8:4c:5d:f2:1f:ea:1a:67:d0:8a:
c6:22:60:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:36:02 2025 by rpki-client