Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier: KGsXnpgujBiPHTbXtHvekhEtkk4Gyy9FBWJt/qETHi0=
Subject key identifier: 87:A0:0E:55:59:88:9F:86:5C:91:47:FA:4A:0F:46:12:03:98:62:D9
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial: 0197B6A13CB744739F24F474D3112121A5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number: 1544
Signing time: Sat 28 Jun 2025 13:01:49 +0000
Manifest this update: Sat 28 Jun 2025 13:01:49 +0000
Manifest next update: Sun 29 Jun 2025 13:01:49 +0000
Files and hashes: 1: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: jBNej0LRdEJjItt8OacjKvQm90Wn2UNx9mwyrsty/EE=)
2: opYZOi4k9YDcS_3foMnJJa-4gCI.roa (hash: VbpgC06Lnc7NWswjuIad3/ZduRJ+GtOZh31gorgG7Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:3c:b7:44:73:9f:24:f4:74:d3:11:21:21:a5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Validity
Not Before: Jun 28 13:01:49 2025 GMT
Not After : Jun 29 13:01:49 2025 GMT
Subject: CN=87a00e5559889f865c9147fa4a0f4612039862d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:31:c4:5f:46:16:eb:e9:22:68:a3:30:7f:
86:02:dc:82:53:bf:ae:27:9e:e1:e2:ba:fa:5d:c7:
eb:c3:5d:ad:7e:7d:d0:2e:49:e7:ea:9f:44:8a:3f:
2a:9e:12:10:55:a0:79:fd:43:82:df:33:83:35:eb:
a1:cb:62:16:f9:5e:e3:c0:e0:89:bf:8a:f0:ed:33:
7d:a9:f9:05:03:86:db:10:a4:62:e6:fb:dd:e7:88:
0c:6b:f1:15:e8:91:ce:ae:ca:20:44:c8:0e:b4:33:
ed:21:31:b0:83:33:0b:0c:64:c7:3e:a1:d4:8a:b1:
10:d0:f1:60:b6:5c:f2:bd:b2:48:1d:bf:1c:a4:fa:
4d:39:3e:26:bb:4c:bf:04:e1:c9:f0:5f:d2:6c:1a:
cd:4c:a2:ad:a0:a0:a6:1d:27:e7:a6:02:7b:81:e0:
75:35:7f:11:43:2d:44:11:48:f8:75:86:c8:fd:bb:
bb:5d:ec:84:2b:7f:64:84:92:4c:3c:db:96:f3:7b:
19:9f:a6:66:24:07:82:08:80:7c:ff:fa:6d:da:b9:
2a:23:20:aa:0a:d5:ed:08:22:2c:1f:f4:76:d1:8b:
fe:c7:f3:5a:6e:59:89:cb:74:fa:ee:1e:c4:a1:1a:
a9:df:20:8c:ae:8a:50:86:6b:55:c0:a1:ab:18:0a:
d0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A0:0E:55:59:88:9F:86:5C:91:47:FA:4A:0F:46:12:03:98:62:D9
X509v3 Authority Key Identifier:
keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:31:7a:83:fc:17:e9:38:dc:90:ff:85:b1:aa:2f:e9:5e:46:
52:5b:85:12:d0:09:d4:cb:2d:e2:01:3a:78:6c:d8:d1:9a:2b:
29:99:36:2b:d3:32:c8:53:7f:18:21:70:f4:da:0c:7c:13:68:
a4:67:c7:e3:e0:78:6b:b6:34:5a:e9:3d:f2:47:9d:5a:28:ca:
0b:13:59:20:de:e7:32:a4:f0:fb:3f:6b:fd:25:c7:22:62:f9:
12:7e:5a:69:3a:ee:9c:14:6e:93:10:b5:fa:75:18:66:7e:32:
54:d0:d7:68:b4:39:d4:13:71:41:1d:04:86:ce:31:37:ed:ca:
fd:3b:c9:31:ce:41:8c:c4:20:4b:de:95:e6:f8:84:61:cb:06:
91:a2:79:37:3a:3b:2d:83:5c:a6:9e:56:3c:b2:bc:58:66:e1:
cd:21:6c:38:a4:66:e2:f9:6b:0b:e0:db:83:a9:f8:51:fb:ac:
c4:25:a2:8d:ce:0a:62:e1:d0:1c:39:84:5c:29:cb:70:f0:8b:
69:1d:f2:af:35:b1:09:2a:02:58:70:a8:b4:ef:86:a9:a8:36:
df:44:af:69:61:9e:4f:b6:00:e4:5c:1d:9e:b5:ea:6d:a0:3e:
60:f2:b6:75:35:0e:78:19:56:13:42:f3:15:06:19:73:fb:d0:
49:69:46:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:14:34 2025 by rpki-client