Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: co3uhYV0wM3fC/jFYUiB2aq8/VzrOIJP3goRguKT878=
Subject key identifier: 81:E1:17:A8:65:8E:6A:FA:0C:8F:4B:4C:68:D6:AF:E1:D7:3E:DC:11
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 0197B70E7B8258F129E3D4EBD9D6F7D86A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 0C81
Signing time: Sat 28 Jun 2025 15:01:08 +0000
Manifest this update: Sat 28 Jun 2025 15:01:08 +0000
Manifest next update: Sun 29 Jun 2025 15:01:08 +0000
Files and hashes: 1: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: 9vo24+XRUo/4E9uPGsHCNTi3OZGv2ID5MHi9f5n/wGw=)
2: YyGPwu-_r-eFoNX2ZTx6n9Sl7sU.roa (hash: iag5NIeY+dB9ncpa+rQd04Kk2wb7pISvllYkBby24Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:7b:82:58:f1:29:e3:d4:eb:d9:d6:f7:d8:6a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: Jun 28 15:01:08 2025 GMT
Not After : Jun 29 15:01:08 2025 GMT
Subject: CN=81e117a8658e6afa0c8f4b4c68d6afe1d73edc11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:01:cc:a8:e3:44:d8:02:fd:4a:af:86:d7:
73:63:47:15:97:98:50:a1:be:2b:43:b1:9b:3d:74:
a7:09:53:75:27:28:2a:79:17:98:16:bd:f2:a8:f6:
62:47:10:b2:24:8b:73:b2:df:e5:e8:4e:59:c4:7b:
47:dd:ff:35:d1:e9:bb:38:c4:10:75:c7:70:94:c2:
d3:e9:82:11:87:8e:0e:7e:0e:67:4d:63:e5:d1:e2:
9b:17:36:eb:13:fc:88:c6:44:97:0a:ce:23:6a:bd:
f7:ed:07:f4:01:c3:aa:b6:23:2f:1c:14:a5:8e:0d:
e4:96:6c:6d:a6:6d:e9:30:9b:a9:3f:12:26:99:b4:
5e:eb:2e:2e:e3:b5:ff:64:77:50:50:74:61:50:99:
92:2b:62:ae:ce:08:77:84:13:63:30:88:be:8b:dc:
bb:2d:34:f1:cd:72:57:60:90:f9:fc:6f:97:43:c3:
68:d9:85:1c:9b:28:e4:16:02:82:b2:2c:e9:c2:02:
47:2a:3d:05:c6:50:28:26:87:be:8b:f8:6a:35:91:
8a:7f:08:10:f4:52:32:2a:33:15:79:6a:5a:e6:72:
fa:a7:2e:94:b0:63:27:67:ef:41:b5:d3:54:a8:66:
65:5e:5f:2a:aa:8f:1e:a5:55:4f:61:13:1f:d7:ff:
20:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E1:17:A8:65:8E:6A:FA:0C:8F:4B:4C:68:D6:AF:E1:D7:3E:DC:11
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:6b:5c:29:f2:99:1b:8b:6d:88:ba:fc:a9:3f:8f:5b:3e:0e:
0f:59:7d:4d:d5:4e:ba:f3:52:bc:94:22:17:56:05:9e:1d:e2:
ab:82:6b:7f:e9:e5:6f:d6:da:9e:b2:16:ec:13:a0:11:b8:7b:
93:67:39:02:51:55:80:59:e0:4e:f0:35:b2:88:91:2f:6a:3a:
60:ee:0d:3f:01:eb:a6:36:ec:ad:42:d5:36:4d:89:e4:3e:ca:
8b:90:8d:b4:74:49:a0:4d:b8:2d:2f:33:22:79:6d:bf:3d:62:
9c:48:d6:98:21:4a:34:34:76:4c:af:7b:68:ae:75:bd:23:17:
0f:56:0f:42:3a:76:50:df:7b:07:0e:9e:61:ab:6c:b3:5d:a0:
74:92:0d:4c:bb:f4:07:60:a7:7f:3b:c4:ce:3c:a8:4d:77:2e:
1b:4d:13:73:71:8c:40:bb:08:83:01:a4:fa:3d:ad:10:b7:37:
23:f9:04:9e:2f:bf:70:f8:39:52:49:70:85:bf:5a:b4:8b:15:
d1:21:15:ce:6e:c4:58:e8:b6:a4:42:5e:1c:56:ad:b2:ba:76:
38:19:98:50:9c:3b:0e:aa:53:ae:fc:82:d3:80:a7:d5:c9:e1:
9f:03:27:6c:e5:6f:74:80:2f:c9:30:cd:62:b0:c8:a7:0f:aa:
5b:a1:84:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:51 2025 by rpki-client