Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: 1SXe4B/XmhnBPJrssZWPDgGj2d/g/ijVABPu/SMzI1Y=
Subject key identifier: 8E:8F:81:7D:D6:0B:4A:0C:F6:5E:5F:C8:73:06:6E:13:4C:34:8D:4D
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 0197BFDAD34319CE75F0652FF6A74E894993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0A34
Signing time: Mon 30 Jun 2025 08:01:18 +0000
Manifest this update: Mon 30 Jun 2025 08:01:18 +0000
Manifest next update: Tue 01 Jul 2025 08:01:18 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: uceop4xCTML9Q0ibS8xN+dVSXseuMzonTGCnwIdyiso=)
2: KtAzNYXVImWMGMH8A6HLsIQbFYc.roa (hash: ltDvt7Ps4IWIzfc/uVIIbjH4kHjztdeIqznwfwNq8iY=)
3: X7mQYJCLCkSBMPn_lrSoI8KIXAY.roa (hash: qkjXPDtCPdPuWts7n2uaYetfDj2xIXD2HuaNsodcZ5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:da:d3:43:19:ce:75:f0:65:2f:f6:a7:4e:89:49:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Jun 30 08:01:18 2025 GMT
Not After : Jul 1 08:01:18 2025 GMT
Subject: CN=8e8f817dd60b4a0cf65e5fc873066e134c348d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:12:8c:81:58:d8:b4:69:4c:ac:b2:92:ac:
cd:e2:48:3a:6a:7f:d6:d2:5c:ec:86:f5:47:a2:84:
4d:03:d1:34:9a:1d:e1:85:2e:0d:53:3a:3f:e7:7b:
40:e7:1e:58:97:0e:f8:32:cb:09:80:57:b0:f3:56:
8b:55:3e:8c:0d:f4:16:f9:c1:78:7b:0a:31:de:c4:
0b:9c:d5:37:5a:af:85:4f:b9:2b:05:7c:f4:ff:a2:
b9:db:6e:63:7d:16:aa:ca:4f:a1:d1:9b:de:e2:0d:
d0:59:73:3b:f9:ca:86:4e:09:00:c6:1a:1e:57:e9:
da:16:7e:b9:06:d9:05:53:67:9b:91:59:9b:6b:b0:
e3:b8:fd:cb:84:bb:9d:6a:88:66:56:f5:b1:4b:5e:
ba:da:2a:2e:a4:71:f1:74:ad:89:99:62:03:08:f0:
eb:08:b6:9f:00:cd:75:03:4c:3f:e3:72:80:37:04:
16:e6:38:ad:70:c2:38:51:6e:d7:d5:4b:e1:bb:79:
28:32:21:8f:0e:93:15:d1:50:5a:02:a5:b9:85:ea:
81:d6:90:7b:98:1a:29:e8:66:3d:8d:f9:5b:28:21:
76:3a:1b:28:e5:55:0b:9c:f2:37:95:e9:3f:3d:96:
59:31:22:6f:10:d7:df:70:b9:6f:30:83:ea:59:9a:
b0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8F:81:7D:D6:0B:4A:0C:F6:5E:5F:C8:73:06:6E:13:4C:34:8D:4D
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ab:eb:2c:92:2e:bd:1a:72:cd:ef:31:b8:96:45:b3:b2:66:
f7:1d:54:99:7d:f8:21:a9:59:e9:bd:30:1c:54:05:52:44:2c:
49:fd:0d:bd:b5:62:68:60:9d:3d:9c:45:a0:19:b3:8d:98:ae:
2a:e9:eb:26:6a:18:2b:bb:27:e5:8c:0a:3c:54:15:93:3e:90:
12:77:4f:50:19:89:8c:be:cc:49:eb:29:a1:07:c0:62:06:37:
4f:99:2e:1e:80:1f:db:94:76:22:38:13:cd:1a:76:69:74:15:
74:a3:bd:67:e1:37:0a:4c:7b:5f:02:ae:3b:8e:e3:95:2b:a9:
ac:f9:1f:fc:a6:db:97:96:5a:ef:04:63:5a:16:6c:71:8c:a8:
b2:97:35:9d:04:62:5e:d3:d6:70:62:99:ff:18:e5:44:43:50:
05:0b:03:f9:81:8c:ba:a3:38:71:62:2f:62:59:72:f0:93:56:
29:9a:21:9d:74:a0:e8:17:8f:53:2f:f1:09:0b:7b:be:3b:b7:
f2:c8:d3:6e:2a:dc:02:64:28:83:03:17:ac:ba:63:70:70:d9:
ab:23:ff:49:2b:fd:1a:b3:3c:e4:1c:82:a8:89:7b:ad:fe:37:
e7:a0:33:67:07:05:c2:f9:69:8d:fd:9d:9a:06:2d:17:11:c4:
01:d2:09:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:59:21 2025 by rpki-client