Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
File: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft (raw, json)
Hash identifier: zkQopfjfEQRQ9/wKRPHrMisW5NF1C1Vh8W4gWSHQf54=
Subject key identifier: 5F:1F:E0:D6:D1:0C:FD:A9:02:AF:F3:B1:76:F6:DA:C4:A3:02:FB:6D
Authority key identifier: F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
Certificate issuer: /CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Certificate serial: 0197C2DBD2F7CF0E6F54297D10003B980DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
Manifest number: 10C2
Signing time: Mon 30 Jun 2025 22:01:15 +0000
Manifest this update: Mon 30 Jun 2025 22:01:15 +0000
Manifest next update: Tue 01 Jul 2025 22:01:15 +0000
Files and hashes: 1: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl (hash: O7c1q55bqucCv1YVgGNWRaPhuYoF3ZJwOgvFcM1kvYI=)
2: DaSMaWZYfnj6ceinzYPrOhJJgQA.roa (hash: tLMLMu2mXxzV//rWf7p3b0LjE6TE93dgy9UoXP39ok8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:db:d2:f7:cf:0e:6f:54:29:7d:10:00:3b:98:0d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Validity
Not Before: Jun 30 22:01:15 2025 GMT
Not After : Jul 1 22:01:15 2025 GMT
Subject: CN=5f1fe0d6d10cfda902aff3b176f6dac4a302fb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:23:90:32:3b:04:8e:bc:49:f1:92:69:81:22:
5e:66:85:02:4c:d0:84:fb:3e:d9:17:16:4c:71:4f:
11:4f:3b:aa:a2:d4:f8:c1:f0:38:68:d2:34:dc:36:
b8:51:a2:0e:74:b3:4f:a9:a1:36:0b:c5:f5:35:eb:
7d:86:96:36:e1:c8:4e:a4:22:d1:68:2e:90:86:eb:
bb:33:41:bf:40:21:9f:e0:aa:cb:0d:06:36:92:21:
f6:5c:0b:54:a5:cf:93:8e:21:c7:2a:7d:5d:5c:29:
1d:ea:16:9d:82:32:8a:e0:48:1e:f2:ce:c3:63:44:
27:3d:b4:e3:8f:81:28:68:54:1d:b0:ee:86:97:57:
f8:2c:e5:6e:15:b1:b7:1c:0a:69:4d:60:da:a0:2c:
c4:7d:f2:21:5a:62:cd:28:06:e4:81:f7:61:be:1f:
e5:4a:b4:f0:a1:a7:35:b5:a3:c6:99:0f:28:c2:e1:
2e:2f:db:63:a9:0e:ad:54:d3:1b:73:a8:74:24:c8:
88:5a:6e:9d:18:13:7e:5e:73:87:28:81:e3:c2:d0:
3e:a3:58:d2:44:f3:72:44:f1:b4:04:b3:4c:4d:74:
52:86:fd:c7:d2:27:bf:c3:c6:0f:6c:a6:32:ce:9c:
63:9c:ae:da:7d:99:2a:cd:4b:c1:a7:05:b3:b2:40:
5c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1F:E0:D6:D1:0C:FD:A9:02:AF:F3:B1:76:F6:DA:C4:A3:02:FB:6D
X509v3 Authority Key Identifier:
keyid:F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:76:26:9a:ec:7a:2a:9c:05:b0:55:d2:6f:25:1b:41:9e:e1:
cd:b4:ea:39:63:1b:de:a9:50:03:91:bd:47:4d:16:30:ed:e5:
cc:a0:ae:4b:a0:dd:86:9b:80:df:5c:94:1f:ec:2c:e6:06:9c:
34:c0:07:12:29:85:2f:7a:4f:c6:8e:31:e4:3f:9a:e8:38:bb:
bf:5a:fb:61:74:09:a1:97:6b:8d:13:12:9e:59:8f:ef:d5:4c:
52:e0:69:91:d6:dd:8a:93:12:66:98:12:8f:45:53:c3:8c:bd:
fd:7e:b9:b4:45:fd:d8:9d:98:2b:68:c1:4c:fe:cc:99:57:eb:
16:20:3e:5e:ea:ef:e3:a2:48:51:a4:34:70:a3:69:31:9a:c7:
93:7b:b0:96:28:16:a9:66:80:04:a7:1b:89:00:0d:d9:a8:8d:
8f:d7:f3:6f:80:21:f2:d8:e6:17:c5:8c:ac:b3:08:c7:16:dd:
9a:24:bc:86:4b:1b:26:9b:49:b9:58:da:8d:53:e7:eb:3a:56:
8a:c9:de:97:c2:09:a7:e9:50:15:5b:d9:92:7a:b2:8f:5c:db:
6e:3b:66:c7:48:7d:14:27:fa:09:8f:99:0f:bb:b7:52:54:df:
45:17:17:e3:f2:09:5e:43:64:a9:51:cb:02:93:17:e3:6e:30:
1d:4d:9e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:20:43 2025 by rpki-client