Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
File: 9p8HIQsohLT-pQe94id5WyZAYu0.mft (raw, json)
Hash identifier: UJ/5cIGBILFBuzqeO8Bjt45f0HJdQM6ZgcjiSms6PqM=
Subject key identifier: 1F:F7:F4:C5:62:25:2F:FB:74:E7:EF:36:85:25:52:E2:5A:73:CB:14
Authority key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
Certificate issuer: /CN=f69f07210b2884b4fea507bde227795b264062ed
Certificate serial: 0197B6D76EE2A1B3D196DA9BBAB9754D3E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
Manifest number: 02C0
Signing time: Sat 28 Jun 2025 14:01:01 +0000
Manifest this update: Sat 28 Jun 2025 14:01:01 +0000
Manifest next update: Sun 29 Jun 2025 14:01:01 +0000
Files and hashes: 1: 9p8HIQsohLT-pQe94id5WyZAYu0.crl (hash: 429iMltsUfDYEfUXqChP+Um0Br7BJ5+HkF/b7H2X7nI=)
2: jYwiLy6C8PrH1zmVRebb5xoCcHg.roa (hash: B/91TwKxBsOKKHQE6s1Ydkjq/nj0hd3T+71Ppy1e7kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:6e:e2:a1:b3:d1:96:da:9b:ba:b9:75:4d:3e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69f07210b2884b4fea507bde227795b264062ed
Validity
Not Before: Jun 28 14:01:01 2025 GMT
Not After : Jun 29 14:01:01 2025 GMT
Subject: CN=1ff7f4c562252ffb74e7ef36852552e25a73cb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:dc:62:2d:69:09:c4:cd:80:1f:08:22:ed:
08:1d:5d:d0:c8:53:b5:f4:dc:eb:8f:af:32:b1:48:
db:ea:f5:42:b6:c6:bc:9d:42:c9:15:c0:71:1f:7b:
b6:7d:bc:8f:e5:52:8b:db:2a:0f:b0:d8:2e:7b:5c:
48:4f:3b:00:d2:0d:84:80:22:46:68:87:2c:e9:dc:
ca:d7:97:31:e8:e5:94:42:2f:a7:9a:ef:de:60:c4:
0c:91:d9:66:77:8e:92:5c:5a:46:82:ab:01:dd:56:
7c:e6:72:a5:8a:4f:ae:fd:78:42:6c:a3:a5:b0:3c:
4d:15:ee:cd:8c:2e:01:0d:8e:a0:dc:22:e9:ed:66:
77:7d:3d:d3:f2:f2:71:3f:52:9a:a5:c5:f1:77:bc:
5d:d9:aa:d4:ba:6d:b1:76:8c:af:96:76:86:26:f7:
68:cf:25:05:38:c3:67:51:e6:da:67:56:2b:2b:27:
3f:ef:ad:0b:64:b3:82:df:ff:3b:22:c2:bb:b6:5a:
67:5d:fb:f6:9e:43:86:17:c2:e3:a9:36:54:d1:1f:
50:a9:a3:53:fe:17:89:d9:7d:65:b1:98:99:df:1b:
e1:b8:39:d5:26:f6:69:b5:2a:33:4b:44:f0:a2:be:
a8:70:71:32:ea:76:31:14:95:ed:68:0c:41:ac:ce:
07:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F7:F4:C5:62:25:2F:FB:74:E7:EF:36:85:25:52:E2:5A:73:CB:14
X509v3 Authority Key Identifier:
keyid:F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5c:b2:9a:f0:39:4d:f0:72:b8:4d:d5:96:8e:97:c5:5d:06:
9a:b6:37:11:0e:b6:0b:d7:c6:0c:c4:33:11:70:13:98:69:45:
3a:11:55:36:e8:18:56:df:5b:e2:19:f0:1a:40:6e:ce:15:5a:
e9:19:0b:11:50:47:9f:38:91:b2:37:99:09:4f:b6:be:fa:fa:
8d:39:0c:7a:7e:14:ca:2d:8e:dd:17:a6:44:cf:16:85:2b:82:
a6:eb:6a:83:99:be:3d:8d:57:47:54:93:87:62:e4:c3:9e:ce:
03:bb:21:a1:26:23:12:26:72:4e:06:f3:fd:c3:b7:18:68:b5:
97:8e:c2:ef:b6:70:71:93:be:80:66:5c:2a:2e:cf:d9:11:6a:
f7:7c:40:63:28:5a:a1:0e:23:78:9f:63:27:b0:20:1b:6e:f3:
5a:81:d7:69:c8:e2:19:e9:95:c0:87:40:1b:24:15:4c:68:58:
99:e7:84:14:94:eb:05:e9:69:17:cb:e7:cf:a9:ba:85:e7:07:
1a:2d:d4:0e:0f:5b:58:fb:9d:5e:f6:22:1f:2c:26:03:94:c8:
c4:66:06:89:45:8e:c0:ce:f9:d1:b2:34:8d:f0:b1:5b:d5:14:
d5:e0:b1:78:c2:25:e3:a1:6a:ae:94:7a:51:94:8b:1c:5c:5d:
b0:66:44:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:14:35 2025 by rpki-client