
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
File: da9OLDR4Dz2fUegKU7rDvm8yWUM.mft (raw, json)
Hash identifier: X9umEIqOeFaRT3hfzWnDObFV8aoIefaj+jcIFzN62cc=
Subject key identifier: 6B:A3:25:08:96:41:1E:A2:8A:51:E2:CD:DB:94:D8:84:9F:83:95:58
Authority key identifier: 75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
Certificate issuer: /CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Certificate serial: 0197B7EA1D67B81DC77FAA7C39D912E32E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
Manifest number: 0E9F
Signing time: Sat 28 Jun 2025 19:01:02 +0000
Manifest this update: Sat 28 Jun 2025 19:01:02 +0000
Manifest next update: Sun 29 Jun 2025 19:01:02 +0000
Files and hashes: 1: 4FCKqar0XtnEKUi3gFfvOiKskUg.roa (hash: n0va6MokXLOyx5Mouds6xLFs3obz/ZHN/b5YuHxhU6k=)
2: da9OLDR4Dz2fUegKU7rDvm8yWUM.crl (hash: mPN6+Q5RcHcfDKKlCpbttVhPkPKG6JPSEXvzb7oJags=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:1d:67:b8:1d:c7:7f:aa:7c:39:d9:12:e3:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Validity
Not Before: Jun 28 19:01:02 2025 GMT
Not After : Jun 29 19:01:02 2025 GMT
Subject: CN=6ba3250896411ea28a51e2cddb94d8849f839558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5e:60:ff:fc:60:60:b0:ef:71:f8:35:ae:15:
e6:ff:86:9d:fd:84:be:ae:f7:09:b6:ac:62:a3:6c:
2d:53:52:d0:3b:fb:e5:3b:4b:6d:cf:6d:42:2e:8d:
11:38:48:bb:7d:31:0a:a2:ef:4a:ec:0a:a0:e9:21:
94:e2:2e:7c:a7:7b:fa:50:fe:42:45:54:c9:64:1b:
e8:0a:11:e9:70:92:2a:b1:96:dd:fa:ac:a0:1d:d6:
fa:53:dd:79:61:de:47:9a:1f:f1:10:3c:c7:c6:7f:
a4:6a:e4:1b:e1:88:01:cd:ac:0e:e2:88:db:f9:05:
0d:66:1f:57:f2:fe:6f:e4:9d:af:8c:eb:39:30:94:
51:ac:44:11:b6:34:56:f3:9f:a6:ab:12:53:87:dc:
b5:06:bd:c1:f7:7b:d9:fe:b1:8c:c4:e3:89:9a:24:
22:34:e4:92:d4:01:ad:88:87:59:fc:ef:be:7d:8d:
ea:b2:00:38:03:cc:57:e9:cc:11:18:1e:de:0f:9a:
09:1f:83:8b:ef:d2:50:6e:56:76:b6:5a:12:e5:9d:
5e:88:1d:ab:3e:41:a0:37:4a:79:93:1c:93:0e:95:
16:8a:af:fd:e8:fc:16:d1:5a:02:7a:cc:75:e3:e7:
f3:2b:17:14:0b:8c:79:e1:7e:e1:59:61:44:ed:23:
95:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A3:25:08:96:41:1E:A2:8A:51:E2:CD:DB:94:D8:84:9F:83:95:58
X509v3 Authority Key Identifier:
keyid:75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:23:ea:04:fa:83:7e:c2:8b:a5:68:56:46:5f:07:6e:a0:cf:
b0:45:e3:ef:3f:44:ee:94:67:20:25:4a:44:10:16:6d:b3:bb:
e4:9e:da:1b:c4:2a:66:f3:c6:de:6e:5e:b1:45:6f:80:00:ca:
7c:45:24:92:1a:1f:95:50:f0:65:5a:df:a9:3c:44:b7:1e:2c:
00:a9:8e:8e:05:55:c4:c4:2b:5f:2a:68:ee:13:20:e0:bc:16:
f5:95:cf:d3:ce:ee:a1:10:36:bb:eb:f1:c5:20:02:5d:6d:51:
6a:08:f7:a3:6e:57:98:7b:e2:83:2b:53:07:d1:24:c1:30:45:
8a:d4:4d:cb:fa:cd:53:ff:7d:1b:1d:bc:f2:98:be:d4:8d:ec:
ae:92:78:f7:63:13:58:c9:3b:f8:84:b5:40:b6:2c:b7:05:f3:
42:d2:08:23:c5:cd:82:ca:98:06:41:f1:bb:68:bd:b6:a6:b0:
66:72:5f:0c:0b:7c:5c:7e:b1:1b:7e:2d:57:97:39:3a:74:82:
9f:05:05:34:ed:2a:c4:71:db:df:06:04:30:df:b2:7d:b9:ca:
72:6a:8c:7b:e7:cf:86:93:51:c0:cf:86:f8:60:ed:1f:29:6b:
43:f6:07:e5:35:9a:6b:a8:fd:e1:29:20:c1:dc:9b:04:02:e3:
cf:26:53:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:33 2025 by rpki-client