Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: ahCDgc4TGmzzkqOs+wQWKvZYEUgNHo8o7HEelqXsEbg=
Subject key identifier: 19:5D:E2:BD:85:B7:40:94:9A:0E:64:29:12:22:DD:98:7F:53:CB:F4
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 0197CCBAB3A1FB394949AD2EB5A6829339C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 0CCE
Signing time: Wed 02 Jul 2025 20:01:17 +0000
Manifest this update: Wed 02 Jul 2025 20:01:17 +0000
Manifest next update: Thu 03 Jul 2025 20:01:17 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: BdKc6f/oAcIPb32W4llGOQGRxPgpLYhIu9N8v8WyKVY=)
2: B8bTTGpK1L-pMyO-WGFk_7H-LC8.roa (hash: r0JNxuBgg4on067YK5COQPlyCkk+tp458uDvr2IE4z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:ba:b3:a1:fb:39:49:49:ad:2e:b5:a6:82:93:39:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: Jul 2 20:01:17 2025 GMT
Not After : Jul 3 20:01:17 2025 GMT
Subject: CN=195de2bd85b740949a0e64291222dd987f53cbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:1f:b4:ea:3f:40:06:b0:2b:0a:5c:af:11:
89:bb:d6:8e:e6:09:d7:33:8a:de:96:eb:6c:b2:38:
47:61:15:82:cb:23:41:c0:15:ab:9e:37:b6:52:2e:
60:cd:db:72:cb:8f:00:10:9b:99:94:19:16:69:bc:
06:84:31:46:0b:5c:8e:06:07:0e:38:a3:51:37:43:
53:91:5f:87:53:df:cb:fd:4a:6c:ec:84:5a:cb:1d:
88:d8:aa:6a:e1:24:cc:42:a6:40:44:ca:6b:ad:1f:
62:2b:4c:c3:3f:b1:f3:a4:76:db:7c:f8:8a:09:99:
c7:95:9a:89:5f:10:eb:45:16:0f:ea:d4:f6:fe:e5:
b5:45:57:09:54:13:3f:aa:18:e7:43:38:c0:10:4f:
89:4c:dd:2e:f8:6e:9f:63:3c:5e:ed:ce:9c:70:b5:
df:0c:18:f9:1a:23:57:83:67:ee:74:7c:cd:29:c4:
33:9e:4c:75:75:86:20:40:76:7c:91:06:67:6e:4c:
78:19:85:16:69:fb:15:50:3a:01:31:5c:5f:5b:fe:
67:a5:30:4f:3b:a8:e0:1e:47:4a:1f:cc:84:95:17:
5e:f6:b6:58:83:64:ab:fa:ae:a6:99:37:43:cc:d8:
df:7f:8f:94:fe:ec:26:5d:e8:db:5f:38:93:0c:30:
ec:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5D:E2:BD:85:B7:40:94:9A:0E:64:29:12:22:DD:98:7F:53:CB:F4
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:33:64:f9:ce:88:6a:fe:49:97:1e:41:be:3f:d0:ae:a8:b2:
b1:0d:90:bf:0f:cc:5a:00:3d:5b:50:2e:ab:ff:54:4f:c1:67:
b5:c5:f0:23:9a:b8:c3:45:b0:ec:dd:dd:a2:bc:5f:74:05:6c:
1b:05:55:c3:19:92:10:04:1d:a5:7c:8d:06:a7:a9:f3:7c:88:
16:b8:26:1c:34:5e:60:a9:c0:94:34:c9:44:78:02:84:00:aa:
17:de:92:50:e6:36:d2:1f:01:2d:fa:fd:ab:a1:64:3b:e8:43:
b1:9f:1f:d9:f4:9c:eb:f4:9e:2d:2e:6d:47:3d:91:06:9b:08:
7b:3b:c6:37:b1:0f:97:d3:4a:a0:13:e5:61:d7:30:b8:12:57:
7b:01:00:ac:47:1b:d9:6f:39:1a:b1:68:d4:4d:2f:d7:de:19:
72:43:7b:3b:8d:27:a4:f1:be:9b:c1:f3:f4:a2:b1:1d:c6:18:
7f:71:5e:25:e0:26:73:39:57:5c:55:fd:a8:10:bb:52:4d:ea:
5d:30:f2:7f:d7:08:00:19:7f:58:a4:71:96:3a:09:0e:a1:99:
fb:f6:a5:b4:19:e4:4e:82:a3:e5:ce:61:35:25:03:fd:20:80:
ab:62:55:86:a1:32:72:26:18:ca:16:5a:47:d2:d5:9d:d3:04:
90:c3:89:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:35:06 2025 by rpki-client