Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File: 9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier: rWvlD4sVVmM4OZT/AYh9Y2mgf+UjXwf6DiKP+GZUoxE=
Subject key identifier: 45:2B:95:25:7C:74:32:8A:4B:3B:50:9C:3E:90:87:7D:C4:17:59:60
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer: /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial: 0197B9D88524DC9907BD65AA7E46DB396508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 04:01:04 +0000
Manifest this update: Sun 29 Jun 2025 04:01:04 +0000
Manifest next update: Mon 30 Jun 2025 04:01:04 +0000
Files and hashes: 1: 3gQqwuDknMD1by1_10QyLFjqTSQ.roa (hash: 7rS6ATpFIQATm/1nB63KRTZ9v2IEBgVrsScfZWZHuYo=)
2: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: DkSiFpxLUugROPX8UJH+qKI8DVqtdGPwm1Nk8UBdN/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:85:24:dc:99:07:bd:65:aa:7e:46:db:39:65:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
Validity
Not Before: Jun 29 04:01:04 2025 GMT
Not After : Jun 30 04:01:04 2025 GMT
Subject: CN=452b95257c74328a4b3b509c3e90877dc4175960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:e4:05:f7:b7:9f:bc:a5:c0:ee:21:bc:83:
0e:61:6c:7d:87:21:5f:dd:73:74:cc:9a:37:ef:74:
00:91:36:85:4a:16:d9:15:89:3b:ae:d4:fc:0c:4a:
4c:db:b7:35:cb:39:a1:73:c8:b4:1c:dd:26:22:bf:
f3:31:19:d8:3b:67:da:67:19:bb:25:3a:0d:c5:af:
69:d1:d2:ae:d6:c6:11:de:8d:1a:8e:4a:3a:ec:f9:
6b:00:d4:1b:65:09:ba:c5:27:0c:a4:c7:0e:78:6c:
47:eb:8f:68:06:62:f9:da:8a:bc:ac:79:24:47:e0:
ef:1e:ba:b2:bf:b3:1c:3f:0c:5f:93:26:ea:b1:50:
21:56:75:52:84:a3:61:42:4f:3d:b3:bf:24:2d:41:
08:66:55:53:fb:40:5f:a6:3f:0c:a2:52:80:a8:e8:
e8:e1:17:c4:dc:7e:f9:be:c1:91:49:b1:46:bb:53:
04:83:9e:0c:00:26:76:f9:b4:c4:5d:6d:fc:d7:7f:
bb:a9:d2:de:b9:fd:03:b2:12:ef:10:55:21:d5:97:
ea:bd:b6:ed:c6:b1:a8:8e:48:d5:f1:b7:c1:87:3b:
0a:4e:00:e3:f6:ce:dc:d2:9b:3d:a0:78:24:14:9e:
60:81:f3:17:1c:09:b5:44:1b:bb:e6:39:c1:8d:a2:
c8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2B:95:25:7C:74:32:8A:4B:3B:50:9C:3E:90:87:7D:C4:17:59:60
X509v3 Authority Key Identifier:
keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:61:28:7d:ee:6c:2f:23:4f:70:e8:52:5e:3b:7a:af:14:a2:
c2:7a:8f:01:1e:d5:74:db:22:58:de:10:4c:30:dd:8d:c7:74:
b5:44:9b:e1:41:bf:ef:74:e8:5a:81:c0:42:05:11:0c:89:db:
70:d7:4e:78:2c:44:c7:09:89:e2:93:89:18:48:36:aa:45:75:
f3:12:60:58:23:f9:92:93:b4:2a:8e:9c:61:fe:fd:88:e0:71:
27:ab:02:91:02:ad:ee:1b:93:13:c5:ab:e5:c0:5b:33:33:bf:
71:c1:54:37:27:2c:2f:a7:8e:87:ff:d7:5d:eb:48:c8:f2:b5:
9c:31:6a:36:4f:67:26:48:6d:80:5d:52:64:6b:c2:cf:1f:70:
9e:ca:dd:8a:17:35:65:8e:fe:27:b4:cb:5b:a6:fd:68:77:16:
34:c2:36:b6:2f:30:83:8b:04:e1:f5:46:55:da:ec:8a:be:0b:
4d:9e:51:d6:ea:a7:22:73:ad:91:97:c7:ba:95:02:ca:f2:21:
83:3e:da:b0:c3:8d:1c:ab:f6:f4:e3:2b:ae:85:67:9a:02:b2:
71:37:14:cd:ba:96:7c:7f:63:59:2a:90:f9:a2:95:8b:0d:37:
16:d0:2b:0b:81:e6:26:4c:fa:78:e7:6f:6a:13:f6:7b:58:46:
5f:c9:a3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:48:50 2025 by rpki-client