Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
File: 9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft (raw, json)
Hash identifier: CCI95BLnQa79a9ZCuZQl7qjSSfMuzqhBjUUL3xoDk8U=
Subject key identifier: B8:56:EF:D9:9F:2F:19:E3:F7:42:22:32:4B:7C:29:B2:E4:58:F5:05
Authority key identifier: F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93
Certificate issuer: /CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
Certificate serial: 0197C04A1DFA9F5BA5F3F0D41115A31CC431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
Manifest number: 0A04
Signing time: Mon 30 Jun 2025 10:02:52 +0000
Manifest this update: Mon 30 Jun 2025 10:02:52 +0000
Manifest next update: Tue 01 Jul 2025 10:02:52 +0000
Files and hashes: 1: 9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl (hash: i3YSy4xSxW0tKFYUXMqvHD2rG1ajDk48S048jEkG0dU=)
2: Ecb-mPJB0EgEtmCxBO-R8Q4l8Pc.roa (hash: gJwQTQJlZO5UonEbd+MqbZuAtcvQedjepcRUTfg3vec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:4a:1d:fa:9f:5b:a5:f3:f0:d4:11:15:a3:1c:c4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
Validity
Not Before: Jun 30 10:02:52 2025 GMT
Not After : Jul 1 10:02:52 2025 GMT
Subject: CN=b856efd99f2f19e3f74222324b7c29b2e458f505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:16:68:ff:3e:ea:44:ca:ac:e8:9c:a9:b3:
0d:be:5c:4f:2f:c7:bc:83:cd:e9:b1:34:4d:cc:67:
5a:76:c6:36:9a:b0:22:80:4d:24:fe:55:db:1f:cf:
8c:df:71:fb:1a:fe:ae:b1:28:44:aa:29:c9:f5:1f:
c8:4b:ce:65:c7:b2:29:b7:12:da:aa:dc:58:33:56:
85:88:06:a2:a8:35:94:96:ea:d9:5e:60:f7:ca:e1:
69:d9:27:49:60:3a:ee:f6:83:af:5d:46:08:2e:55:
9a:86:37:25:26:42:1a:6f:90:43:d3:19:08:03:c9:
2e:5a:e6:30:47:44:43:e1:d4:88:ce:ed:3c:41:c8:
dc:22:e9:16:d4:30:0a:60:4c:5e:66:c4:9a:05:be:
84:ac:47:f1:22:74:b7:e6:79:18:c4:64:7b:08:6a:
58:aa:a7:a1:f4:d3:ee:a0:63:19:65:29:1a:3e:1f:
11:3e:e0:c4:33:33:48:91:04:7e:a5:15:3d:53:3f:
b8:bd:95:ab:3c:5c:b5:07:46:05:31:88:c8:ca:d2:
71:ea:e8:63:a1:0c:7c:2a:c7:c9:0a:45:c6:d8:1f:
df:6c:b6:b5:02:28:3f:42:de:de:10:3a:8f:85:b5:
1a:35:90:d6:cd:5a:25:99:5e:66:b9:f6:a2:e7:46:
3b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:56:EF:D9:9F:2F:19:E3:F7:42:22:32:4B:7C:29:B2:E4:58:F5:05
X509v3 Authority Key Identifier:
keyid:F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:de:60:71:41:c6:39:3d:48:39:a2:5f:9e:42:93:96:58:cf:
a7:c5:90:25:5b:29:57:98:ba:f1:68:8b:92:74:d5:bc:3f:d3:
4b:e0:65:30:a7:5e:2e:39:4b:49:25:26:c7:8d:d1:59:a5:14:
f0:fc:82:b7:60:4f:80:7a:7e:71:b3:59:e7:f4:80:dd:86:ce:
b9:b2:7d:1a:3e:2f:18:fb:1b:9e:a8:82:b1:c3:4a:fc:eb:1e:
a5:2c:9e:45:80:47:51:d3:72:fd:cc:2a:bc:cb:52:99:1e:c5:
5a:a2:90:ab:c5:6e:5e:29:df:f0:d0:ce:c8:f5:9e:41:fa:d1:
39:ca:19:77:a5:72:ae:a6:bc:5c:34:e8:c5:92:4c:8b:78:e6:
15:fe:11:1a:2a:35:74:fd:b5:48:44:11:9b:30:8c:e1:fc:b6:
95:05:93:94:b7:6e:f8:3f:27:cf:a8:6f:84:fd:5b:f0:80:09:
a5:85:a5:c9:cc:af:1e:1f:2f:35:40:a5:b6:2c:7a:88:3e:e6:
0c:22:1e:f5:58:16:db:00:35:5e:2b:e6:e9:bb:fd:44:60:1c:
0f:9a:42:ff:53:e1:c7:91:8f:52:2d:47:9d:0b:c1:2f:5d:fe:
12:66:ba:3c:95:16:c9:a5:cf:fd:3a:84:50:ea:eb:21:64:ea:
46:c7:22:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:05:40 2025 by rpki-client