Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
File: 9pglYdLaF5Avg-_-EySZ-C1S8WM.mft (raw, json)
Hash identifier: bRR+GZKQ2MHRH20TEm2wC8OYX0gjq5BTq6bSVEsuVNs=
Subject key identifier: D7:1B:37:4D:A8:36:2A:69:C9:6B:EA:F5:42:67:CA:85:C4:67:38:15
Authority key identifier: F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
Certificate issuer: /CN=f6982561d2da17902f83effe132499f82d52f163
Certificate serial: 0197B88ECADC2D568FCF73E704679549B351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
Manifest number: 136F
Signing time: Sat 28 Jun 2025 22:00:55 +0000
Manifest this update: Sat 28 Jun 2025 22:00:55 +0000
Manifest next update: Sun 29 Jun 2025 22:00:55 +0000
Files and hashes: 1: 9ab4gsm8HWV3453txi9GuHhETfI.roa (hash: +RCpHHVjRUNbeQhE7D5a86WvNpwACKkVCiWoO5pNIb0=)
2: 9pglYdLaF5Avg-_-EySZ-C1S8WM.crl (hash: rSPSgdrt5XhFic2NVGNOtOg8L7i582F2PQIJqvLbN0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:ca:dc:2d:56:8f:cf:73:e7:04:67:95:49:b3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6982561d2da17902f83effe132499f82d52f163
Validity
Not Before: Jun 28 22:00:55 2025 GMT
Not After : Jun 29 22:00:55 2025 GMT
Subject: CN=d71b374da8362a69c96beaf54267ca85c4673815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7f:ee:1c:64:44:94:05:19:ac:29:22:0f:99:
99:ac:94:8f:5c:18:02:51:9d:2d:43:52:d1:2b:88:
fe:80:32:09:a8:d1:05:12:cb:8e:95:99:95:4b:03:
9a:28:68:fa:40:bc:f5:9a:27:54:97:6c:6d:ea:e0:
0c:c0:ae:21:3d:a0:91:40:3a:3a:db:1d:51:bd:db:
2a:7c:05:7f:44:0f:98:63:52:58:b4:8e:32:6d:89:
31:a3:a8:3f:cc:bc:60:c4:6a:b6:43:89:da:25:85:
95:db:48:bb:45:06:d0:f3:94:db:e2:7b:cf:49:52:
ed:9b:3f:35:ba:e1:4f:21:f9:29:dc:f6:5d:2a:dc:
f0:7c:90:d0:c2:c2:ba:1c:f5:cb:a0:f4:20:04:25:
df:42:24:07:f0:36:d8:45:5a:12:27:89:5d:98:83:
b5:4d:76:36:16:53:64:e1:87:6b:97:4e:5f:ea:b1:
5c:bf:c7:8d:ce:69:48:f6:f2:62:78:01:59:b2:35:
ae:bc:ea:05:98:ae:c9:f4:76:26:6a:bb:b2:45:24:
90:2e:82:66:15:45:6b:98:75:a6:f4:ce:1c:8c:50:
ba:ff:99:96:6d:e6:18:de:b7:8d:a7:09:84:af:ad:
02:33:61:13:c6:89:3d:b9:84:aa:b0:d4:6e:dc:ad:
2b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1B:37:4D:A8:36:2A:69:C9:6B:EA:F5:42:67:CA:85:C4:67:38:15
X509v3 Authority Key Identifier:
keyid:F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:99:23:08:de:b1:dd:18:69:7f:72:cd:7d:bd:24:59:06:0a:
01:65:19:4f:a7:08:95:11:de:2a:a8:ac:88:fc:3f:e0:0b:8c:
29:ea:ea:34:f9:60:e9:d0:fa:d7:7e:2f:6a:36:f6:e6:84:05:
ea:cd:0d:56:78:b2:bd:84:7d:d9:2c:21:29:f9:ba:28:f7:de:
06:55:43:02:68:c6:c9:84:3d:2d:c3:d6:10:3d:c7:b0:60:2a:
06:55:3f:35:3e:80:04:72:5e:04:a0:c4:37:bc:18:f1:96:a7:
f2:15:d1:09:2d:9b:e0:ea:e7:25:29:76:70:6b:e5:d1:a9:68:
f8:df:93:ac:7f:3b:0e:f2:8d:a1:d4:bc:ff:ba:cb:d9:5a:f6:
dc:aa:0d:36:19:36:18:3a:29:7d:69:f7:d8:bd:64:b6:a2:39:
d6:04:c7:70:0c:6a:5c:d3:35:9d:3e:f2:62:29:50:74:bb:85:
d5:69:0f:92:8c:11:2b:aa:c9:2a:b7:c0:85:e1:e5:20:a1:c1:
48:c9:10:a6:be:51:d7:0c:51:8f:f3:da:79:f3:d1:56:35:bd:
f8:d2:8f:1b:8f:0a:9b:da:55:8f:2c:a1:69:39:e1:10:15:78:
e3:8f:33:40:bb:89:0a:b7:25:ff:2a:1d:6e:0b:a2:5f:46:cb:
e2:ca:bc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:16 2025 by rpki-client