Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
File: 9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json)
Hash identifier: UZOhe2Cr/TbP6fDgnO0jhUeBjSdMWciPCOEAn3StR5Y=
Subject key identifier: 35:E8:13:66:E3:2E:84:1B:A1:07:14:A9:6E:CD:FC:B1:0C:60:73:FD
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial: 0197B7B300F2E6548BAB0AAACE645CAE546A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
Manifest number: 1463
Signing time: Sat 28 Jun 2025 18:00:51 +0000
Manifest this update: Sat 28 Jun 2025 18:00:51 +0000
Manifest next update: Sun 29 Jun 2025 18:00:51 +0000
Files and hashes: 1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: 7SR3bo9GrqeLHJB53Nxz8E/gqtGIKfiEvU5VEC6NO1I=)
2: rnFKFHUDJ2VK_n3nnMWQgvu93Us.roa (hash: ddxwbWDe9h7jTPjb6zGryBRSU7cXly9K/marvCxyA4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:00:f2:e6:54:8b:ab:0a:aa:ce:64:5c:ae:54:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Validity
Not Before: Jun 28 18:00:51 2025 GMT
Not After : Jun 29 18:00:51 2025 GMT
Subject: CN=35e81366e32e841ba10714a96ecdfcb10c6073fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:01:b0:ad:75:6a:fa:6c:7d:b7:bc:d7:c0:
b5:f2:4a:8b:17:c1:cb:72:67:5c:1c:e7:cf:e5:43:
c2:0b:a9:b6:78:55:e8:71:f2:2d:34:5b:9b:31:a8:
e3:44:da:01:4a:47:94:dc:c4:dd:a8:87:85:8c:a4:
59:0d:83:5c:74:52:7d:b2:d8:60:9b:d8:54:9c:66:
a6:99:3e:a5:87:05:d9:8c:6e:72:ba:b4:a9:31:cd:
e9:fe:7f:ef:ba:0f:55:ee:18:54:d5:43:57:b4:a7:
88:c6:ee:94:76:31:07:6c:1e:54:f1:6c:b0:6a:69:
aa:e3:61:30:d6:ca:c4:5f:7e:a7:3e:ec:00:f1:d7:
ae:24:08:45:7b:7d:6c:da:a4:94:81:8d:c0:5b:88:
c2:b2:45:60:a1:87:0d:c0:23:16:90:ca:4c:f6:fa:
47:a3:0e:20:0b:cb:cd:89:a7:68:f6:61:3f:bd:7f:
41:6f:26:66:23:27:ee:51:f3:dd:b3:e6:77:07:67:
a6:e1:c6:f4:99:3a:46:ef:4e:ca:b2:a3:f8:9b:1e:
1e:cf:27:af:3e:ae:7c:dc:fe:34:cc:25:e3:9d:5d:
10:be:49:1d:81:f1:e0:3d:18:11:a6:99:e1:38:75:
22:8d:28:de:35:25:a8:bb:48:12:9c:9e:20:86:a1:
f5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E8:13:66:E3:2E:84:1B:A1:07:14:A9:6E:CD:FC:B1:0C:60:73:FD
X509v3 Authority Key Identifier:
keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b9:ed:36:f8:63:98:4a:e7:c7:f4:3d:3d:36:28:a1:eb:0e:
9d:fc:be:4a:60:bf:ad:43:f6:3b:2c:e8:2b:62:c4:8a:bc:e1:
87:64:bc:77:3b:ef:09:3b:13:3a:5f:b0:75:28:39:d5:1b:c9:
67:11:7b:69:0e:a2:ec:94:ef:fd:ae:4b:b6:d6:11:e4:20:01:
8a:fb:e9:ea:c4:0e:1f:24:cc:72:e9:9b:2c:2e:71:8a:68:03:
9a:55:35:e1:ca:1f:5e:cb:eb:e4:3b:df:59:3b:51:c6:30:f8:
b2:59:14:6b:59:94:a5:6f:98:b6:7c:85:40:02:4f:2c:d1:d7:
62:ba:e2:30:ce:ad:f6:78:d3:90:0c:b1:1c:30:bc:4d:20:a5:
1f:68:b5:6b:47:91:32:ea:5d:bb:66:42:72:54:7a:d0:4e:20:
92:22:e5:0a:73:f6:3c:47:ef:e1:46:9e:8a:1e:70:e2:e3:13:
f1:8a:93:51:15:74:83:8d:0d:01:11:85:89:dc:d7:b2:8c:fd:
a3:a7:a2:dc:4a:63:11:2e:13:8d:3f:27:d8:75:5d:1d:be:85:
96:9d:b9:65:04:f9:2b:1a:99:f5:71:08:d2:bc:c5:c0:79:4d:
88:79:e9:99:b9:93:3e:da:b1:33:7a:e8:27:6a:f1:5c:46:93:
5b:b9:4e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:42 2025 by rpki-client