Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json)
Hash identifier: RxjbAqH+0+wd7Msg9FZ+yQMdPBiulyYK1sf3ylEXjFI=
Subject key identifier: 9B:0C:92:C6:C8:F3:A4:37:AD:C1:F9:48:43:9A:9B:9D:29:EB:76:70
Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Certificate serial: 0197B7EAB0725B4F68C466C2311CDDE15F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
Manifest number: 09F4
Signing time: Sat 28 Jun 2025 19:01:40 +0000
Manifest this update: Sat 28 Jun 2025 19:01:40 +0000
Manifest next update: Sun 29 Jun 2025 19:01:40 +0000
Files and hashes: 1: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: qYYayb5tsGEwhAsupRk0yJP3q/QZjAMOGbapfli4lT0=)
2: iTTW-6mQkAe_ptbEUsV9bdJZhbM.roa (hash: IaZjtmRfbfeEiXlxoZz2N565FeKeU2Yttq1mO64u+IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:b0:72:5b:4f:68:c4:66:c2:31:1c:dd:e1:5f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Validity
Not Before: Jun 28 19:01:40 2025 GMT
Not After : Jun 29 19:01:40 2025 GMT
Subject: CN=9b0c92c6c8f3a437adc1f948439a9b9d29eb7670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:f9:ac:da:02:5c:b9:6d:e3:f4:1d:ab:2d:
e7:1e:5d:57:10:05:57:c7:6f:b3:70:6a:2a:1d:64:
15:7d:05:72:4c:78:98:0e:56:37:3b:25:b6:6b:28:
c9:b4:78:43:da:59:f8:d2:f5:5b:fa:34:b6:76:8b:
70:4f:65:65:6b:6f:b2:14:ba:16:5c:82:f2:34:f5:
ca:b4:61:81:a0:32:44:ac:12:27:e3:b8:67:e3:b7:
a7:3b:06:73:d9:5e:bb:80:a0:b4:e9:83:11:bd:20:
f2:30:5b:e5:0e:67:ee:82:c7:e7:14:95:e0:79:ca:
5e:1a:41:b9:c0:49:08:f7:60:f0:18:1c:51:bd:ed:
50:cf:68:b6:8f:83:1b:d4:0e:02:b2:85:b4:bc:1d:
5f:21:c3:c2:ad:d9:63:ac:bb:8a:1c:99:da:4e:ef:
47:20:96:dd:b9:a9:37:ce:c6:5b:2e:63:05:dd:db:
96:65:47:6e:41:88:f2:91:55:ac:2c:3f:eb:c0:f0:
b1:21:22:a1:27:dd:ad:4c:31:9e:e5:b6:a5:c6:e1:
bf:84:61:94:b5:fd:01:24:13:a0:fd:92:ce:e8:54:
98:0f:67:b7:58:21:e6:07:4b:e8:39:4d:b2:8e:b6:
38:bc:ea:a7:c0:d8:8e:f2:75:ee:be:43:81:bd:7e:
d3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0C:92:C6:C8:F3:A4:37:AD:C1:F9:48:43:9A:9B:9D:29:EB:76:70
X509v3 Authority Key Identifier:
keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:76:56:58:36:67:25:e3:fc:f7:cc:b5:ef:cf:67:e6:af:01:
98:76:72:dd:a4:c2:b6:09:84:43:ac:90:2b:50:59:69:34:ef:
82:dd:b9:38:71:01:ea:9d:fb:e5:55:b0:80:27:0a:04:ad:b9:
13:60:e4:f3:d5:a9:06:1c:5f:39:69:a9:50:6d:e6:a6:b2:dc:
1a:a1:16:f7:75:a8:3c:7f:6c:33:26:6d:73:57:c7:d1:4e:a5:
08:82:45:19:02:89:c3:cb:fa:f8:fd:cc:97:c3:9e:9d:cb:d6:
59:70:67:dc:54:18:b5:e4:42:90:ae:bb:97:91:47:50:1c:a4:
c1:67:14:d8:5c:8d:79:ed:2b:0f:27:70:e6:b6:c7:dc:43:50:
6e:05:47:11:7f:a7:9d:3e:7b:49:e7:66:63:9b:f6:07:42:4c:
65:c7:fb:b9:e3:1c:21:3f:7b:71:41:0a:7c:6e:af:15:2b:b2:
61:2e:62:4d:0e:06:50:98:d2:59:c0:50:be:12:91:16:92:a4:
74:f2:21:6e:ac:29:2f:7b:b4:44:5f:be:f1:54:91:6f:0a:71:
f0:68:1f:81:d0:5b:9e:e2:66:3a:7b:66:86:64:1d:ec:02:73:
67:58:01:a4:fb:e3:66:59:37:82:d7:8a:da:4f:0c:5c:69:1b:
ba:95:6a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:35:12 2025 by rpki-client