Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
File: 9U47eX9Lo36_cYmkwU8FINfPMNc.mft (raw, json)
Hash identifier: Itee41aYtbqpsWFvMFTLq2gnxUbRnmAa9o1CnmGusvY=
Subject key identifier: 44:BF:D8:9A:CC:2D:8D:F1:A3:49:1B:E5:E5:14:C7:4D:A4:6E:FC:83
Authority key identifier: F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
Certificate issuer: /CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
Certificate serial: 0197B7450F5B5B7F866763A20FC313508AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
Manifest number: 02CE
Signing time: Sat 28 Jun 2025 16:00:45 +0000
Manifest this update: Sat 28 Jun 2025 16:00:45 +0000
Manifest next update: Sun 29 Jun 2025 16:00:45 +0000
Files and hashes: 1: 9U47eX9Lo36_cYmkwU8FINfPMNc.crl (hash: Fri1BzC5RrSMWYmKUq8tPW6lYup8Xn3G0W6KIbBlFPI=)
2: UmpOhRez3moOZWrjBKIN45JkCE8.roa (hash: rPkye9amYErKpRGECf5NJc6OYwjs4QcPoervOMLXjak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:0f:5b:5b:7f:86:67:63:a2:0f:c3:13:50:8a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
Validity
Not Before: Jun 28 16:00:45 2025 GMT
Not After : Jun 29 16:00:45 2025 GMT
Subject: CN=44bfd89acc2d8df1a3491be5e514c74da46efc83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:73:a3:16:3e:3c:07:82:02:ce:9f:0b:b7:
98:20:d5:fe:5a:e7:92:65:6b:27:63:0c:d2:cc:42:
57:65:58:71:da:7f:82:99:ed:8c:68:55:06:4c:03:
f9:69:e7:40:4f:b9:79:53:dd:e5:99:fc:6e:0a:08:
a9:7b:c7:d5:99:b6:2e:d2:f0:81:a3:92:e3:fb:fa:
7b:47:18:0f:3c:5a:74:3e:1b:c4:3c:ce:3d:b0:56:
84:66:3b:07:ea:b6:3c:eb:d0:0f:ba:c2:da:8d:24:
65:2b:e7:e1:af:71:9c:14:4a:16:22:2f:38:1b:66:
b8:57:c8:e2:0a:f3:9d:02:dd:52:c4:f6:46:97:66:
aa:ab:c9:3b:78:87:05:e1:ab:1e:47:21:42:6c:42:
50:93:ce:da:6f:fb:63:07:e9:34:54:a2:cf:bd:2f:
d7:ab:aa:35:e0:56:c2:d2:3b:4d:8c:cc:c2:30:a9:
ab:eb:ab:4e:f5:3c:41:57:5d:b6:7c:27:01:38:11:
b5:31:71:0a:40:e6:22:75:86:0d:37:be:a8:a2:61:
bf:2d:03:5f:08:e5:73:eb:0a:8e:80:bc:82:11:2a:
aa:2f:60:a7:78:50:7c:d0:e8:f6:c7:66:2f:51:ce:
b8:d0:73:38:d1:e3:d4:c0:03:25:b6:21:2b:58:d8:
43:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BF:D8:9A:CC:2D:8D:F1:A3:49:1B:E5:E5:14:C7:4D:A4:6E:FC:83
X509v3 Authority Key Identifier:
keyid:F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c2:43:79:75:c1:a3:be:26:07:aa:64:40:01:8b:96:b5:0e:
2a:6c:d7:4f:e9:09:98:d3:ac:83:1e:3b:41:54:d5:1a:e7:fc:
28:57:59:51:b2:22:04:c8:94:8f:ef:cd:71:0c:00:4c:7e:93:
e9:59:91:4d:6f:e0:ad:a9:8b:9f:dc:91:5b:32:a9:68:ce:81:
04:42:43:b3:30:73:f0:02:66:66:36:f6:59:18:c6:db:ce:71:
d3:df:66:07:ac:33:5f:cf:9d:a5:2c:d3:6e:fc:05:8c:c0:2d:
5d:b7:ae:e5:71:05:1e:63:f1:c1:48:0c:90:2c:ed:61:d8:7e:
04:fe:a5:72:24:96:9c:12:53:23:0f:51:dd:ba:20:b0:bf:cf:
a4:80:05:a5:65:bc:58:8f:01:ae:2a:87:e2:34:8e:2e:bc:a2:
ec:2b:e8:52:36:57:f0:d6:d4:3e:c8:54:d9:09:68:9b:ee:57:
a0:4d:53:e9:e0:af:f9:8a:5b:8a:9c:5b:8a:64:aa:79:35:16:
15:5c:8b:11:63:9b:a1:f8:a0:eb:d5:ce:92:4a:a4:3f:f0:76:
f0:58:6c:2d:06:a3:5f:37:01:cf:bb:7a:22:a3:bb:6f:04:ca:
d8:40:f4:93:e7:21:b3:eb:8d:21:bb:be:c7:5a:81:aa:14:54:
83:dc:4c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:12 2025 by rpki-client