Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
File: hX9MEi5PjGAfIcXIaHFtRgidheE.mft (raw, json)
Hash identifier: B1CnjcXHT67pwksxfIgoZKH9E1pf4qwGsbLE2mnZ48g=
Subject key identifier: 69:C3:24:F8:9D:FA:05:13:68:71:77:82:81:11:CA:DF:5B:94:3E:8D
Authority key identifier: 85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
Certificate issuer: /CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Certificate serial: 01984A781459FAC1DCEB78D3E91796E72AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
Manifest number: 0AC9
Signing time: Sun 27 Jul 2025 06:00:40 +0000
Manifest this update: Sun 27 Jul 2025 06:00:40 +0000
Manifest next update: Mon 28 Jul 2025 06:00:40 +0000
Files and hashes: 1: hX9MEi5PjGAfIcXIaHFtRgidheE.crl (hash: CCbs8w5LpKN4osunc67yCEF1jHsaKPg9hzm5ZFaEYb4=)
2: wypxlBc1J8Bpx8wsCukzLkT7CzM.roa (hash: VSR04yRc8P3tg6W5nBtOO4BrNXPIDW2s4T0F9VJBzcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:14:59:fa:c1:dc:eb:78:d3:e9:17:96:e7:2a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Validity
Not Before: Jul 27 06:00:40 2025 GMT
Not After : Jul 28 06:00:40 2025 GMT
Subject: CN=69c324f89dfa0513687177828111cadf5b943e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:46:06:57:e9:5e:4f:65:4c:ba:ff:eb:7d:
8b:18:fa:0b:41:68:73:48:98:05:b4:e2:d4:85:6e:
a8:95:7f:e7:ab:61:34:ae:19:38:91:f1:cb:fa:4a:
8f:05:9b:dd:01:13:55:81:02:00:c0:b5:ce:cf:d4:
40:95:4f:8d:fa:58:39:67:e9:4e:df:06:fa:c2:ed:
c1:e3:be:0f:ca:bb:32:b3:97:6a:e5:c6:44:ea:80:
ad:c2:6a:51:26:5e:0b:a8:5d:95:a4:25:c6:7e:5c:
31:f9:73:98:39:1b:75:2d:d8:f5:41:35:0b:ee:45:
a4:2a:05:c9:de:22:da:b4:a2:59:90:e0:d0:66:95:
b3:e1:d2:ca:b4:04:4e:f0:b2:10:b5:dd:b2:45:e5:
f2:77:65:02:76:c8:88:2e:7d:f2:63:60:85:87:b6:
5c:b0:cb:49:c7:81:a7:a3:e5:c4:3c:2a:9b:9d:c0:
4a:50:da:42:1b:bd:4e:53:a9:e7:91:5a:31:e9:ff:
2e:f0:e0:8c:a5:d8:3e:81:51:14:c0:b1:d0:69:32:
de:d6:8b:60:b8:b7:2a:0c:30:ea:a5:d4:85:9b:8b:
d9:ac:cb:f8:fa:a0:13:96:3f:80:74:b0:a9:10:0d:
4a:6e:f9:44:bf:93:94:51:65:09:09:cf:9c:5e:e8:
3e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C3:24:F8:9D:FA:05:13:68:71:77:82:81:11:CA:DF:5B:94:3E:8D
X509v3 Authority Key Identifier:
keyid:85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:40:91:d4:c8:81:e1:cf:21:70:ff:c4:68:c5:16:ec:cc:80:
8f:a4:0b:bd:94:79:1f:46:51:d5:6d:11:8a:f6:8f:38:9a:50:
b1:b4:49:9f:7d:b4:5e:0a:4b:53:2b:b3:50:ae:61:7f:57:4d:
ef:6b:32:aa:02:c4:b8:5c:a6:ce:d0:fb:a4:77:3a:80:cd:f1:
3a:c2:f5:c9:44:81:23:4e:58:b6:98:e3:68:cd:97:80:2b:63:
d5:b4:7c:6f:da:13:3b:c6:cc:d2:a1:1f:9b:31:89:26:11:3a:
1b:34:e9:09:ee:f1:e8:e9:87:7c:78:22:2e:46:94:f9:3a:bb:
26:35:39:d8:6d:0b:a4:65:66:58:17:cc:12:b7:f4:79:b6:72:
a0:07:43:7e:84:8d:97:83:0c:ef:f9:2a:11:b6:14:f1:26:0b:
fc:f0:b1:37:0c:e9:fc:52:9b:41:e1:71:4e:f6:91:e6:9e:9a:
c2:76:71:a0:8b:a2:18:b3:f8:d5:b5:0a:dd:c7:47:88:16:49:
e6:68:6e:66:89:cf:7e:eb:ee:c2:bd:e0:1a:48:87:60:e2:bd:
78:f4:9a:eb:cb:56:69:6f:bb:7b:58:20:4e:34:48:82:47:dc:
fd:f4:9d:78:ad:6d:5b:d3:41:5f:b7:47:96:a1:f7:35:d1:ff:
0d:f1:1a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:49:38 2025 by rpki-client