Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
File: 9n7U99NVdSgcF2yuPdy9QMxcHdY.mft (raw, json)
Hash identifier: 3JrGWSPrMmCJrc9lJsOFX6hrkCNqPPjcQeReme8INQY=
Subject key identifier: 7A:68:64:F3:BF:23:98:68:64:F8:62:55:51:09:9E:AF:C9:51:45:8E
Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
Certificate issuer: /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Certificate serial: 0197B7B36C758C6D92B818E2E57916234FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 18:01:18 +0000
Manifest this update: Sat 28 Jun 2025 18:01:18 +0000
Manifest next update: Sun 29 Jun 2025 18:01:18 +0000
Files and hashes: 1: 88-pt2hIN1dTOb7W_yyIcsyIKos.roa (hash: rXxfNXMHY0jcVNFeL7a/dvDj6ZDtDB0GLjdB35wLnIg=)
2: 9n7U99NVdSgcF2yuPdy9QMxcHdY.crl (hash: QSwHIl0zdc4UbisYNKFiEwjTbRTOefBhTerEHE1gFwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:6c:75:8c:6d:92:b8:18:e2:e5:79:16:23:4f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Validity
Not Before: Jun 28 18:01:18 2025 GMT
Not After : Jun 29 18:01:18 2025 GMT
Subject: CN=7a6864f3bf23986864f8625551099eafc951458e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:f2:00:be:ca:e1:0c:79:e2:af:ff:99:be:
6f:fb:ac:5c:22:88:3e:6c:98:7c:44:5a:4f:87:19:
16:11:95:9c:d1:39:52:3d:00:24:77:b3:bd:84:8a:
b2:42:46:3b:39:d9:47:20:22:74:70:cd:17:d2:4e:
36:8b:29:b3:b3:d7:7a:e4:32:0a:95:9a:f9:95:32:
05:60:85:9f:a5:de:e6:b3:b7:2b:7a:59:f7:54:3e:
0f:6a:39:91:67:fd:4b:76:f7:c9:52:c6:6c:56:75:
15:00:43:08:75:08:94:e0:79:b8:e9:dc:c4:76:20:
9b:06:f2:fb:09:61:6f:68:04:75:93:1e:6d:2c:16:
03:02:67:1f:c4:ca:8d:f9:09:45:60:01:fe:fa:cb:
12:95:fd:96:fc:37:b4:c6:d5:87:37:d2:0b:93:43:
de:a4:91:78:0c:df:1b:9f:40:bf:57:21:e9:27:ea:
29:57:3f:31:0d:52:55:34:50:39:3a:b0:bf:65:07:
0e:8f:3e:b3:86:5b:c2:10:b1:12:ce:6e:a8:51:cc:
06:4b:cc:42:58:ab:97:ca:bc:1c:20:ed:f1:03:c9:
a9:dc:f9:58:e0:0d:c5:6f:c3:a7:37:b8:97:f1:2d:
e9:2b:d2:62:54:57:5f:69:53:a0:cb:91:8e:37:ee:
e0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:68:64:F3:BF:23:98:68:64:F8:62:55:51:09:9E:AF:C9:51:45:8E
X509v3 Authority Key Identifier:
keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f7:75:d5:a1:7d:3a:30:50:1e:4b:56:49:0f:51:d8:70:35:
1f:0c:0f:b7:bf:57:8c:38:0e:a2:44:9e:b7:3d:51:aa:25:38:
4e:04:4e:97:42:bd:a0:0a:34:fc:5e:8d:7a:3f:be:33:80:97:
97:97:4b:e4:83:09:db:b9:cf:b3:cd:d6:95:2c:3c:8d:f0:8f:
5f:3e:54:08:31:fd:db:27:24:48:40:54:b8:32:87:12:5a:cd:
00:08:03:f6:d5:50:59:a1:4f:f7:a4:ce:a9:19:98:b3:1e:cc:
4c:61:9c:18:5b:c0:dd:6c:cc:a2:81:00:ee:9c:5e:da:fe:ef:
9f:ad:f2:13:75:a2:58:dc:28:a8:96:13:87:15:ea:9a:cd:0c:
40:f3:12:09:dd:50:c9:50:b6:d6:23:4f:6e:19:ce:f4:2a:b9:
5f:f9:ca:27:9a:4a:c5:65:17:32:a9:66:c8:fc:a2:2d:1d:71:
91:af:9d:da:20:ca:65:a1:86:2c:65:0b:e3:4c:fb:fb:84:39:
fa:0e:69:90:54:b4:32:e0:f0:fa:ad:8e:02:3c:e9:b6:da:df:
12:28:b9:07:9c:bf:de:fb:74:77:91:df:f3:ee:80:62:28:2b:
54:32:2c:a5:ce:4e:66:3b:f8:51:f9:c9:21:5a:5d:cd:1c:43:
e5:12:5f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:47 2025 by rpki-client