Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
File: 1-cSsxnpLABNVenTs5mQfT5R1_y0.mft (raw, json)
Hash identifier: VLKlpRX1grLBUbBiUnCb1SwTxTXYbPvcJqbVbuzvvtc=
Subject key identifier: 8A:95:3F:3D:6C:0A:3F:3E:70:09:98:54:94:97:CA:02:F9:24:50:C7
Authority key identifier: F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
Certificate issuer: /CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Certificate serial: 0197B70E5686485BC0AD92C91FB42AB23721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:00:59 +0000
Manifest this update: Sat 28 Jun 2025 15:00:59 +0000
Manifest next update: Sun 29 Jun 2025 15:00:59 +0000
Files and hashes: 1: 1-cSsxnpLABNVenTs5mQfT5R1_y0.crl (hash: AkKlYGgkjypT1cj3/rje/3voOT28gympTs0TzhskPUw=)
2: 9KxQR6j2axabNDMZ1-8dgcNiaM8.roa (hash: 2rUs2SoRDiW7TeHLXoH00fOWIiSClvCYzvEbW1LWNms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:56:86:48:5b:c0:ad:92:c9:1f:b4:2a:b2:37:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Validity
Not Before: Jun 28 15:00:59 2025 GMT
Not After : Jun 29 15:00:59 2025 GMT
Subject: CN=8a953f3d6c0a3f3e700998549497ca02f92450c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:89:8a:3d:c1:4d:17:68:39:6c:6c:69:14:
22:dc:a1:c8:8e:01:62:64:fb:80:63:a3:cc:b9:c7:
54:6c:82:08:bc:91:65:c5:96:30:31:97:84:c6:94:
50:b0:09:26:08:bc:05:2a:4b:56:5c:ed:c3:0f:c9:
f8:5f:a7:56:f8:1d:0a:18:f0:b0:91:f0:dc:52:2f:
41:3e:c9:1f:4e:c1:7e:ef:00:5c:64:1a:df:f1:35:
45:96:32:4f:b9:1b:4d:e5:80:ae:cb:0e:f9:a6:e5:
12:fb:44:78:cf:23:48:09:bd:d1:1f:8d:aa:10:e5:
9c:23:a9:3b:be:38:09:77:9e:f6:cd:9e:27:d6:14:
24:63:e5:2a:91:b9:a3:fe:5a:7f:8a:1c:0f:f8:2d:
e1:63:de:b5:37:fe:d0:2e:4a:ac:da:a6:21:5d:9d:
be:81:99:e2:55:9e:27:3e:5d:bc:47:dc:02:49:90:
e1:d5:a3:2e:c0:69:ce:f6:bc:80:80:64:79:da:d1:
ee:70:78:05:d4:49:ae:ff:3e:68:13:f0:0c:b0:5f:
99:15:a0:c0:c1:4d:84:77:c3:dc:30:97:91:da:12:
a2:c8:30:06:16:b9:b7:94:d7:31:6f:84:b0:f8:87:
fd:d4:e8:51:a8:15:c3:70:e0:b5:46:dd:66:aa:d6:
30:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:95:3F:3D:6C:0A:3F:3E:70:09:98:54:94:97:CA:02:F9:24:50:C7
X509v3 Authority Key Identifier:
keyid:F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:61:01:cd:63:0c:cd:1e:6d:2b:01:10:8e:24:5e:f7:dc:f5:
ec:25:c2:74:4f:35:15:5f:27:21:51:6e:0e:31:28:19:66:df:
d3:13:a4:9d:72:d1:d9:7f:8c:ec:63:1f:64:f1:6e:43:97:dc:
dd:6c:91:e0:ed:13:f5:57:a3:ba:a9:41:82:c6:20:5d:4b:0e:
a3:98:66:b4:2f:14:b9:8d:db:7b:f5:63:9b:9d:a3:7e:08:81:
56:c8:f5:90:8d:ae:93:23:93:08:64:63:8a:b3:04:0c:ab:61:
7c:7b:7e:32:1f:36:11:93:84:5f:f7:68:20:81:55:10:20:71:
c6:0e:46:fb:e9:43:ae:08:6d:17:1a:3d:88:13:88:a6:01:a9:
36:df:54:51:57:1d:f6:74:a8:b0:8b:74:67:86:bd:96:c3:89:
7d:26:56:95:85:94:bc:07:fd:fe:e5:64:7c:7d:d0:22:a7:a1:
20:1f:ad:d2:5e:69:f4:d0:d7:b5:a5:e9:6a:81:82:43:27:15:
16:de:58:96:ff:7c:11:33:b3:38:d1:3f:7e:88:29:c2:e7:93:
f8:f9:9c:88:8a:58:c3:84:60:60:3a:8e:70:60:c7:27:27:37:
cc:20:56:90:96:d9:f7:d5:33:44:d2:23:6d:47:19:62:d9:32:
9d:6b:31:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:17 2025 by rpki-client