Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: fDen6bjufnHs3ONFu0RbLDhggBS8duuRGHurqwT2kjQ=
Subject key identifier: E9:B3:9E:56:CC:F6:E6:04:D4:C4:47:55:A1:89:E5:46:14:1B:CA:B3
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 0197B77BFF19E779963E5824317582CA96CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 17:00:45 +0000
Manifest this update: Sat 28 Jun 2025 17:00:45 +0000
Manifest next update: Sun 29 Jun 2025 17:00:45 +0000
Files and hashes: 1: 0vFjVDYAA-6QI2qHPCdosu1GYFw.roa (hash: IQ3S8+qzPktEg1qP0FjMswDmKCTlK9fgpP4sOBqgbxM=)
2: 8FU11yYabBJRRjHXhYHw1w8tXqs.roa (hash: zgTg9U8qNVapSlofgSsQ7L6J3LMkMrbN8ivrl35eIuc=)
3: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: YsEA5X77qpudgD878JUAqfadAzk1OhKvzbswvEtpWyQ=)
4: n_A6Qzt5rx35hoVU_97TwDYIfYU.roa (hash: AiRnXdqpWHaW5BVZZURmZ+ZKd/dN4DFkv2OtB71gThk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:ff:19:e7:79:96:3e:58:24:31:75:82:ca:96:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Jun 28 17:00:45 2025 GMT
Not After : Jun 29 17:00:45 2025 GMT
Subject: CN=e9b39e56ccf6e604d4c44755a189e546141bcab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:7f:ff:32:9c:96:e4:88:f5:ec:ad:ef:cb:f6:
fb:f4:2e:9b:6d:97:ec:f0:a2:d8:5e:18:9a:22:59:
86:e6:27:ac:39:86:53:98:b7:f1:6b:5f:00:78:49:
18:3f:fb:13:c3:0c:6c:46:b7:2d:bc:61:f0:14:13:
d0:1c:9b:6d:38:ca:7a:1e:c2:3d:24:07:6f:b4:82:
44:cb:5c:c9:0b:e8:71:e9:94:6a:2e:e4:3e:68:61:
8c:7a:29:4a:f9:a3:87:0a:f6:38:02:2f:08:b7:fc:
4d:dd:48:22:bc:7d:4c:2d:fd:0f:26:bc:18:a0:44:
9a:9c:be:7b:6b:e9:c1:59:8b:56:1b:62:6c:ab:d5:
78:9f:0a:ef:f3:15:bb:90:95:53:95:c1:56:8f:6b:
61:c6:31:4c:3f:73:94:17:b1:55:02:88:13:d7:a7:
9b:f0:1a:ce:25:c0:ea:35:ce:d5:26:03:7f:f1:98:
08:5f:f5:b8:00:a8:c0:6f:9e:d2:0e:b3:f3:5f:e7:
c6:33:49:86:87:b6:0f:e2:3a:e3:d6:c4:e9:bf:07:
71:d7:78:29:17:02:01:25:bf:47:d0:c9:4c:83:e9:
15:0e:3b:07:0d:aa:d4:1c:4c:4b:ee:b1:b6:e2:e7:
4f:bb:d9:ef:39:a8:6b:d6:4c:ae:a2:98:f9:72:b4:
c1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B3:9E:56:CC:F6:E6:04:D4:C4:47:55:A1:89:E5:46:14:1B:CA:B3
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:5a:9f:d7:36:fa:b1:bb:14:22:18:a4:8f:11:c0:a6:f3:87:
fb:9f:74:b6:3c:e5:cb:bc:0e:6c:e4:37:e7:e0:3d:59:f7:c6:
8d:a1:d4:d1:1f:2b:7f:10:8c:dd:39:37:08:0b:f5:d8:cc:51:
8b:04:ab:80:90:01:78:98:9d:12:1e:3f:b3:d5:0b:0c:21:4e:
2b:4f:7e:69:57:5a:b6:ed:d1:d9:db:e9:a9:cf:02:5a:d1:0d:
0b:a0:0c:4d:f0:82:f7:05:ef:d4:79:91:a5:88:e0:ae:79:c6:
87:96:41:bc:90:22:45:18:c5:81:2a:02:7d:37:08:4b:ef:51:
d1:b3:bc:2a:75:18:42:5a:7c:cf:1d:7a:cd:8c:75:76:8c:b2:
97:3e:3f:1b:e9:56:fd:ce:76:38:f3:b0:a5:eb:a6:98:02:51:
d7:50:0a:ee:bc:8c:41:a2:6c:df:a1:3e:53:1b:35:46:60:ab:
85:21:c5:c9:5e:30:0f:47:67:36:d4:37:87:69:4f:5c:b0:cd:
02:3a:62:99:31:dd:ea:cf:b4:f4:e2:d9:d8:12:3b:31:b4:91:
19:42:4d:1a:5d:a8:c2:6d:2c:6b:5f:29:a1:7c:75:c2:fe:44:
b1:3f:12:4b:6e:16:c3:62:62:c5:0c:4f:46:3b:f5:6c:45:bc:
99:90:70:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:09 2025 by rpki-client