Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: F+odRikFC0d/wX2gSESlhWdS2+Pnc1xd3pDo++Kp58M=
Subject key identifier: 2C:B6:90:00:38:2D:85:D0:D9:A3:82:CE:22:3E:AE:04:46:57:D7:D5
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 0197B6325B3292C89F6AB4886C2A164D1224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 0554
Signing time: Sat 28 Jun 2025 11:00:42 +0000
Manifest this update: Sat 28 Jun 2025 11:00:42 +0000
Manifest next update: Sun 29 Jun 2025 11:00:42 +0000
Files and hashes: 1: 91Ml2kQH8w2tLiMLT6Fbcu6KSJM.roa (hash: EmTDmBXIKNOaEr2bWKxBRH3EXyiQ1ZJtO/knk/QxnbE=)
2: OI1uK9LvyBYMrxZk6Wtsms4rrxQ.roa (hash: r4xm6yQr/cgOXWzX1uA52pwqnclq3721sVsfso5FXPI=)
3: RuN1CEEKgWM9o41cCPWtfZFuKKk.roa (hash: KY9kNkQ0Sz03RyPbQ91gb1ujhJwFYP1J5IWur4t9itw=)
4: XtH0htLAKG6Q5dcfnWZEaEHDokg.roa (hash: 6hipGrL8gPx/AA1jsYDtYKkvzd7jAI7crI4ZoMmJgjA=)
5: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: SIaMZLVcgYw75Y0sweagQvJ077Rfh4iCh9adEfbXzWY=)
6: iw9kNkv-dkyYtEoLjtCHmwGGJs0.roa (hash: WAVrCgR0Lig7wZih5a6i+wCsRj3CJZHI3ntVJTN6GcM=)
7: jEuhOWOO-QlWKQlP_vQxpSPLQb4.roa (hash: T76BJeDOcF7APO1x6/gqGhi/5iskR6Zu3KBZKjePpuU=)
8: m07e6_Z6kS56JVFoiRbJDvuGsTk.roa (hash: VoYIwiaKUUQlxS0/2rdwETdn1uq8+mUfKc36O3nLq/M=)
9: w065yF2KMBb9aVnQ4BfNT-qmTRU.roa (hash: jJgjEmmyXXQf+/0rV+v9URt/GJe8fT1hRfQv43u3dw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:5b:32:92:c8:9f:6a:b4:88:6c:2a:16:4d:12:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Jun 28 11:00:42 2025 GMT
Not After : Jun 29 11:00:42 2025 GMT
Subject: CN=2cb69000382d85d0d9a382ce223eae044657d7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:f4:93:00:23:7f:a9:cb:0a:91:57:eb:cf:
73:29:6d:ac:0b:4f:d5:8b:c4:ed:c7:5f:cd:31:7d:
83:9a:98:6f:cd:f8:64:9f:6d:1f:2f:a7:69:4c:7e:
1a:39:79:97:6a:42:ca:db:87:b2:7a:2f:57:d9:c6:
1c:61:97:be:f0:18:42:54:ec:bb:59:1e:30:34:73:
9c:69:79:89:82:81:ff:97:e4:c9:d3:f7:b5:c5:f4:
55:85:d9:34:53:1f:15:d9:17:03:e0:1f:77:db:c8:
95:16:b3:43:3a:c2:47:65:09:82:f3:c4:3e:fb:a7:
a3:3b:23:df:75:fb:5d:b6:c1:4e:6a:f4:24:a0:01:
bc:9a:75:38:f2:08:da:b7:82:df:2c:5d:bf:d6:41:
b7:4c:04:5c:23:46:ba:cb:bf:de:75:c4:27:76:68:
e2:ef:70:a7:5a:41:cf:a3:99:e5:0b:ed:31:b4:58:
f3:b5:7a:7b:c6:ba:8a:79:37:17:7d:82:27:12:ea:
97:ec:b0:4f:19:87:fb:e6:be:7e:13:33:6b:c9:e2:
b1:9d:7d:98:9b:e3:25:c6:49:2c:2c:9f:4c:03:e1:
c2:ff:8f:fd:b3:17:29:fc:52:53:42:b0:73:64:7b:
ae:7c:fc:d9:7e:9c:d1:d7:b9:a8:3f:4a:70:09:f0:
ea:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B6:90:00:38:2D:85:D0:D9:A3:82:CE:22:3E:AE:04:46:57:D7:D5
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:9b:4f:55:f3:6d:e4:f7:5d:79:10:32:7f:6a:9b:4e:da:0e:
15:d9:43:6e:aa:74:35:09:51:da:82:bf:51:78:37:99:ab:37:
36:30:5f:4d:d9:97:1b:08:b8:c0:49:3b:13:2b:7f:f0:30:49:
52:d7:8b:7d:d4:bb:71:17:e5:b6:ac:0d:ff:70:26:03:f8:b9:
9c:86:c3:cd:9d:a5:c8:48:53:05:6f:13:16:ce:d1:90:90:fa:
28:95:b1:18:c8:dd:34:67:76:b4:af:00:ca:09:d1:73:a9:88:
0b:24:92:0c:06:1f:6b:01:1e:15:de:4d:fc:2e:ba:d3:e3:3a:
b6:0f:e9:9b:24:56:d7:f0:4e:35:8b:c5:bb:32:c5:a4:a1:ec:
f4:ba:45:33:12:5a:e1:db:34:a2:87:f8:2a:9a:6b:ed:f9:f4:
52:7b:0d:88:80:78:a4:20:3d:ac:b2:d8:c1:2a:0e:c0:a3:0d:
85:ef:0d:c9:73:83:27:5c:cb:75:e4:17:36:19:30:3f:80:de:
62:9c:70:b8:ab:64:9a:19:b1:e6:32:2b:c9:d2:c0:1f:cd:77:
5f:67:84:2b:c6:cf:78:fe:91:27:79:46:cd:b4:8f:8b:ac:c9:
3e:60:bf:80:a4:69:c2:12:68:aa:a2:d0:b2:b9:9a:8a:bb:e1:
45:a5:8f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:30 2025 by rpki-client