
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
File: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft (raw, json)
Hash identifier: qM6a+vYB7rH4/6PCIfbyAhPw25gOKwgB56NHBzrWKbM=
Subject key identifier: 9F:F1:DB:66:71:54:1F:2A:9D:45:39:2A:7E:44:DC:69:2A:F1:E2:65
Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
Certificate issuer: /CN=f4b207ef8024244bbb4a0106af19270150c9f624
Certificate serial: 0197B7B30B939BF789EDF55EC85470F9FCAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
Manifest number: 052C
Signing time: Sat 28 Jun 2025 18:00:53 +0000
Manifest this update: Sat 28 Jun 2025 18:00:53 +0000
Manifest next update: Sun 29 Jun 2025 18:00:53 +0000
Files and hashes: 1: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl (hash: vmvFmUF0a6IFI7pQdETUbIlgRiUyk0trfEpi6qI6O/k=)
2: zYg006i-1WUWweE30u-SYPbT9Pw.roa (hash: Z8k/zZnitgyMfHbzB0hfDTUSf1BlauNSPllDbsEjoIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:0b:93:9b:f7:89:ed:f5:5e:c8:54:70:f9:fc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624
Validity
Not Before: Jun 28 18:00:53 2025 GMT
Not After : Jun 29 18:00:53 2025 GMT
Subject: CN=9ff1db6671541f2a9d45392a7e44dc692af1e265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ff:f0:2b:21:d3:f5:16:3a:c4:0d:b1:6d:f6:
44:51:e8:48:9e:e9:77:34:87:47:e4:2b:26:7b:6c:
b1:f0:64:2e:ba:9a:95:d7:ad:e6:13:0d:a6:12:0c:
06:36:37:37:77:29:68:cf:67:fb:1a:7a:ce:8c:8b:
15:fd:14:42:57:f8:57:11:2b:7f:5b:68:e6:33:60:
65:da:4e:44:19:67:d8:6b:35:55:65:68:f7:99:75:
6f:05:11:98:fd:4e:12:cb:7a:75:3f:ef:f7:01:d0:
ac:9c:63:d2:14:f5:15:e2:5d:0e:1d:27:be:bd:a9:
78:54:d1:4d:33:9f:6b:e5:18:da:63:1b:1f:af:ac:
b3:34:47:50:7b:73:6f:ba:87:3e:0e:4c:4c:8b:42:
dc:a8:77:5d:e7:80:d7:93:ef:0a:e1:72:3b:ba:d6:
ca:47:8d:b4:c4:f6:87:e5:3d:a7:e4:b7:1b:83:8a:
db:3a:df:87:c0:71:90:c4:5f:0c:d7:a0:af:ba:ce:
b5:48:b1:e9:95:0c:b2:6a:7d:28:76:a9:36:41:c0:
24:79:20:41:7b:f4:8d:a6:20:ad:71:8f:93:d5:57:
bc:b1:24:62:c6:26:e8:aa:f2:ec:e9:4d:57:ae:fa:
ab:ba:8a:54:e8:31:e5:76:4b:27:bf:48:a0:e4:d8:
c0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F1:DB:66:71:54:1F:2A:9D:45:39:2A:7E:44:DC:69:2A:F1:E2:65
X509v3 Authority Key Identifier:
keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:aa:74:ad:3d:6c:51:19:71:f0:31:b7:24:ea:61:b9:ef:2b:
c0:03:eb:16:57:07:e6:5d:7b:62:fe:b4:bc:ed:44:c6:98:94:
64:66:ac:1c:dd:cf:3a:f1:23:a1:cc:61:d7:ec:3e:a5:56:17:
2a:22:26:44:a0:20:88:07:7e:5d:bb:34:62:76:d9:21:67:6f:
84:8b:3e:d6:59:b8:03:37:45:f4:d0:35:ba:ff:15:4f:4a:72:
56:23:7e:4a:54:88:be:d1:36:0c:89:cd:ad:24:b7:b9:c2:c5:
8b:e7:35:3b:11:64:ed:78:09:64:17:f0:46:e9:dc:a1:5d:be:
88:54:b4:da:5f:ee:1f:0d:6a:5b:0b:d9:a2:fe:18:1b:8d:a6:
d4:f2:2a:1c:f1:67:f1:ea:83:69:97:78:b6:1e:63:e2:67:e0:
eb:34:81:17:05:ba:13:1b:c2:bf:b9:82:66:23:6a:23:cc:a4:
6d:21:af:aa:70:b0:be:e1:5b:b1:a3:3c:72:fb:43:69:b0:23:
4a:9d:fc:04:ae:fd:b5:ee:30:3d:cd:3b:30:74:22:13:26:fc:
67:f5:9a:b4:54:4b:d8:81:d7:73:16:9b:71:f0:2f:67:c3:19:
aa:ea:ef:b4:e9:e5:b5:b1:72:b8:5b:75:ae:dd:e9:24:92:9c:
54:04:71:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:32 2025 by rpki-client