Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
File: I9NN09IR5cLqe9L1J6E-HploIOw.mft (raw, json)
Hash identifier: RwtcRB3r4w72Q2y4OuOI+jNSUpzWwGBBpP9ZXVDerhQ=
Subject key identifier: 5A:B9:C9:FC:FD:29:3B:75:12:E1:07:33:D3:C8:6F:E0:61:BA:EC:9A
Authority key identifier: 23:D3:4D:D3:D2:11:E5:C2:EA:7B:D2:F5:27:A1:3E:1E:99:68:20:EC
Certificate issuer: /CN=23d34dd3d211e5c2ea7bd2f527a13e1e996820ec
Certificate serial: 0197B6A1E271867F9F316CEBBE886DE514F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
Manifest number: 0FAF
Signing time: Sat 28 Jun 2025 13:02:31 +0000
Manifest this update: Sat 28 Jun 2025 13:02:31 +0000
Manifest next update: Sun 29 Jun 2025 13:02:31 +0000
Files and hashes: 1: I9NN09IR5cLqe9L1J6E-HploIOw.crl (hash: 7+WR2kSCYE/VTFp45KRA/iAH2ClU1Slspny6TE0UiBI=)
2: LposyqjV73-zT4I-NkDoALIwk_k.roa (hash: OHnWiOPJ0+vl8RYqLw+3oMseEcMGYzbghowhWqyDjck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e2:71:86:7f:9f:31:6c:eb:be:88:6d:e5:14:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d34dd3d211e5c2ea7bd2f527a13e1e996820ec
Validity
Not Before: Jun 28 13:02:31 2025 GMT
Not After : Jun 29 13:02:31 2025 GMT
Subject: CN=5ab9c9fcfd293b7512e10733d3c86fe061baec9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bd:aa:bc:bc:d1:f2:65:2d:20:f0:62:d9:8d:
ad:e4:92:d1:8c:72:ab:89:c9:3c:d3:6b:97:8c:3e:
b7:4e:10:85:a3:c5:6d:cc:b1:84:4b:c1:7f:68:07:
d7:74:dc:3a:c9:40:92:56:de:b8:2d:8f:c7:ba:67:
4a:48:87:0d:fc:45:bb:f1:b1:09:45:c8:7c:e7:87:
b2:a9:4b:f6:8a:6e:e0:e7:3f:22:6a:92:a0:5c:65:
65:aa:7e:ce:39:e8:c6:c6:b2:c1:84:f6:f7:50:69:
1d:06:66:83:de:d4:d9:ce:c6:77:45:3e:0e:ff:6e:
44:cd:8b:d3:d8:74:d2:f6:8a:24:27:51:ed:8e:b7:
d0:70:2e:f0:a1:9f:59:2c:c8:fe:09:90:e3:fa:b9:
fa:1c:96:e4:79:9f:1c:ce:97:70:2f:5d:e8:15:8f:
b9:3e:54:33:ac:2c:79:85:63:38:dc:e1:2d:87:00:
71:53:f3:5a:58:1d:da:52:2b:77:2e:d8:2a:c6:e0:
40:15:86:75:4e:6a:03:8f:35:4b:6c:31:ba:b6:3c:
55:66:f8:7a:3f:c4:9e:ce:52:eb:c8:5d:f8:7b:7c:
53:4b:cb:46:00:7a:bf:fc:24:9a:3d:f5:34:9f:61:
ea:3c:fc:ee:95:dc:d2:50:5f:ee:09:6a:49:1a:06:
e5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B9:C9:FC:FD:29:3B:75:12:E1:07:33:D3:C8:6F:E0:61:BA:EC:9A
X509v3 Authority Key Identifier:
keyid:23:D3:4D:D3:D2:11:E5:C2:EA:7B:D2:F5:27:A1:3E:1E:99:68:20:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9f:8d:6a:9a:0b:07:f4:36:a8:f9:d3:36:cf:ec:ac:c9:c0:
01:ed:da:41:9b:eb:fb:4a:0e:7c:ae:d5:c6:50:07:11:f1:b8:
ef:39:94:87:88:8f:f5:a2:31:77:92:7b:92:b4:72:b4:d1:05:
58:cc:88:95:40:79:62:a6:50:8e:d9:4a:35:8e:74:60:7a:ef:
10:cf:b5:3b:31:d6:5b:92:56:54:8c:27:55:09:5a:3f:80:9d:
19:4d:25:53:79:22:bb:75:ee:76:68:4b:e7:bc:6e:01:8d:02:
b7:7d:f1:e7:23:95:59:c9:1f:bb:c1:d1:c5:a3:1e:33:bc:ba:
cb:bc:dd:c1:09:11:3d:eb:88:ff:83:23:2f:d1:2f:7e:8d:5e:
fd:5a:27:eb:af:ca:c0:98:f2:e1:fe:36:26:17:d7:f6:3f:76:
d4:58:dd:14:9f:31:f0:e4:d4:f7:bc:1b:b6:5c:fe:79:fb:bb:
09:14:5a:3e:a9:0d:44:1f:d4:a1:7a:81:61:69:d0:5d:47:d6:
99:1b:20:fd:3d:c9:f9:53:07:a1:61:7c:6f:b0:c1:d7:ec:e7:
4e:7b:2a:22:15:57:64:ed:b4:22:f3:cf:f4:8d:7f:3c:c7:26:
27:14:cb:37:56:00:65:bf:d9:ca:75:27:26:83:b1:b8:6c:a9:
f5:67:0c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:32 2025 by rpki-client