Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
File: 9XvH8urwyvppvuX6vmcSK0Nj_nI.mft (raw, json)
Hash identifier: dtQTZPWw/TzabTyxS394DOmL3UcuMkpoKZAiIF53aBY=
Subject key identifier: C8:1B:F3:18:F8:92:79:A7:65:71:39:EB:1F:2C:66:9A:0D:1D:A7:E0
Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
Certificate issuer: /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Certificate serial: 0197B6D76D77F8C86256678091A527D1CD57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:01:00 +0000
Manifest this update: Sat 28 Jun 2025 14:01:00 +0000
Manifest next update: Sun 29 Jun 2025 14:01:00 +0000
Files and hashes: 1: 9XvH8urwyvppvuX6vmcSK0Nj_nI.crl (hash: dVG0YFY2w/Zw/Es02b+DScR6fefxivK/D5c7bhtY3kM=)
2: KNQf97WzItrOYioPwLu-Tdh4fNc.roa (hash: RIjtWc8dl547OecCvbWgp63AohvHeAGZkMZVo9/tFEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:6d:77:f8:c8:62:56:67:80:91:a5:27:d1:cd:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Validity
Not Before: Jun 28 14:01:00 2025 GMT
Not After : Jun 29 14:01:00 2025 GMT
Subject: CN=c81bf318f89279a7657139eb1f2c669a0d1da7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4a:0b:7e:c2:94:3d:7f:bb:42:df:0c:5b:85:
ee:b5:18:89:92:b2:bc:7c:e6:22:a2:43:3a:ba:88:
ca:43:2a:62:f8:4a:c8:48:ce:a7:99:b4:21:97:b9:
0d:3e:fe:41:5e:b4:be:5a:c8:34:48:d8:b7:68:44:
df:2e:ed:45:bd:0d:86:aa:b7:df:44:e1:46:88:4c:
44:b1:95:44:26:01:b8:a6:4e:27:e1:e0:8d:71:13:
e6:92:c3:42:41:52:1f:65:09:95:c9:bf:20:b2:7b:
58:54:06:e9:b4:1a:d8:f7:7b:3f:f8:2d:d1:32:9e:
7b:96:06:33:4a:8e:84:e3:83:64:00:ca:a6:f0:26:
33:b9:4d:1f:76:55:0b:44:b4:84:ed:a1:de:43:07:
57:a9:17:16:c8:a6:56:fc:68:aa:7a:14:3e:4a:11:
bf:b7:27:c7:ce:96:15:fe:16:ff:4e:0c:2c:30:38:
7b:a2:32:e5:78:ff:2a:f9:a0:c5:cf:cb:70:59:da:
f1:fe:bf:30:ab:c2:90:3c:d5:17:21:81:10:91:79:
f6:2e:c4:00:9f:73:80:a9:4c:90:8d:6b:92:88:23:
d5:46:9c:78:81:01:49:31:10:b3:66:92:04:58:7d:
92:93:33:9f:9d:7a:35:b8:2e:d5:dd:e5:5a:81:3a:
b8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1B:F3:18:F8:92:79:A7:65:71:39:EB:1F:2C:66:9A:0D:1D:A7:E0
X509v3 Authority Key Identifier:
keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:96:4a:b7:e4:1b:ec:e5:61:ba:82:0a:8f:f1:27:ea:f7:dc:
b1:5a:95:6b:96:f1:f6:ec:ae:59:97:26:7d:89:ea:f2:31:58:
62:62:82:8d:ac:9b:23:3a:fd:2c:bc:76:a2:b6:b3:27:01:1f:
8f:ce:60:3a:a7:b2:43:35:a3:3b:a4:30:ec:15:68:1d:d5:73:
00:6c:1d:ac:04:fc:63:87:bf:f0:1d:80:d2:83:d2:da:53:81:
11:cb:e0:64:54:bd:13:d7:ce:54:ec:c0:a7:5c:85:16:1b:45:
a3:92:e3:a5:53:e9:f2:36:a6:ee:99:14:98:f0:c9:b3:c5:d0:
ba:8e:dc:ce:2c:05:de:57:03:5a:76:38:0e:63:74:e2:11:a8:
9e:e5:d2:14:b4:ff:2e:65:b6:5f:bb:3e:fd:8c:df:08:1f:ff:
43:1c:7d:73:35:77:d6:a8:2e:83:f2:84:89:55:4d:4a:f5:35:
93:03:12:fd:ca:34:03:ff:a1:97:33:18:5b:c5:8c:2c:f1:a1:
59:c5:74:08:95:7c:d5:30:a9:03:55:b6:4c:06:fe:44:97:a2:
5e:a8:d9:07:be:dc:40:d1:04:d4:c5:d3:bc:d2:9b:15:31:25:
e0:ca:7c:e2:e7:5b:b3:f2:50:27:e3:7e:27:a1:87:b3:ea:03:
de:ae:41:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:58 2025 by rpki-client