Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json)
Hash identifier: cq8Gug2j/rBOtRecPU2iXST0PfPTHJhKwR/ycsyvi6M=
Subject key identifier: 99:3E:EF:D3:A6:88:BA:4F:13:0E:C2:10:A8:AA:CA:D1:71:A0:A7:05
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Certificate issuer: /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial: 019854FBD29039FD353BF0604B109E21E342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
Manifest number: 0BCF
Signing time: Tue 29 Jul 2025 07:00:46 +0000
Manifest this update: Tue 29 Jul 2025 07:00:46 +0000
Manifest next update: Wed 30 Jul 2025 07:00:46 +0000
Files and hashes: 1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: dlsbJaDH2BGl7TkRj7LsyrVcOf3pk3BuZff/YttIYQs=)
2: HnZ1VjQW735MMUi4UDqiepCAdeM.roa (hash: 31a3rYl8qptlSMbknXPbZIkMQ7iUM4ri0d4GzZPfheM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fb:d2:90:39:fd:35:3b:f0:60:4b:10:9e:21:e3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Validity
Not Before: Jul 29 07:00:46 2025 GMT
Not After : Jul 30 07:00:46 2025 GMT
Subject: CN=993eefd3a688ba4f130ec210a8aacad171a0a705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:66:8e:ec:8d:4b:19:36:5f:28:af:41:69:49:
c2:ad:ad:7f:0a:ea:7a:c7:fa:18:b4:57:b6:7d:bd:
55:46:b6:b6:33:03:f3:d0:0c:6e:ca:09:2a:98:5b:
0e:4c:50:0c:c5:49:5f:0c:a6:62:c4:d3:6c:a9:ed:
fc:78:80:d9:27:03:c7:81:86:fe:26:2c:16:d4:f8:
91:70:de:fc:36:a5:47:a0:d5:9a:0b:16:bf:3b:35:
db:72:22:99:dd:ab:62:90:bb:62:d3:a3:13:83:90:
c2:1d:7d:e5:4e:7d:5b:f2:dc:ae:e2:5f:0f:32:fc:
03:09:b5:da:65:ac:20:f6:e2:ce:cd:d6:cc:a3:9d:
e3:fa:1b:89:c1:33:cc:09:0b:fa:a9:b5:f9:e8:69:
98:6e:51:58:56:a8:a5:8d:d2:a4:09:d2:df:0d:81:
f1:27:c9:b9:9a:e6:d2:8b:30:eb:8c:73:38:6a:04:
6f:3f:e9:db:97:e3:42:60:3e:e6:01:7b:0b:79:84:
4a:82:07:dc:d5:9f:19:47:61:36:ec:bc:96:65:6a:
f5:84:9a:f4:e1:af:c8:ad:32:33:97:11:a9:d8:11:
46:64:23:3a:12:31:20:a7:c0:23:10:09:1a:19:96:
bc:16:11:0e:85:d0:67:11:d9:25:44:69:9c:67:36:
ea:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3E:EF:D3:A6:88:BA:4F:13:0E:C2:10:A8:AA:CA:D1:71:A0:A7:05
X509v3 Authority Key Identifier:
keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9b:ef:48:42:1e:5d:df:9d:02:7e:3b:20:5e:41:df:90:f8:
df:4d:d6:e4:c2:a3:11:96:05:8f:c1:54:ea:87:96:6e:87:74:
41:e7:36:12:9c:9b:83:58:59:99:31:d1:a4:d2:7c:bd:6d:85:
bb:72:bf:bc:a2:26:06:24:7d:55:54:12:92:79:e9:15:4f:6c:
98:db:e1:83:79:91:14:11:19:3d:b6:51:3b:21:ed:7c:00:16:
c4:c9:41:4e:bb:76:d6:a7:b1:d4:e3:b2:ec:4a:ff:3e:d0:a2:
ea:5c:50:84:3c:79:a7:42:dd:33:6d:e1:dc:b4:3f:4c:e6:54:
83:1d:ac:b6:69:f6:b7:71:21:94:1d:8b:ca:81:1c:29:8d:5f:
5d:54:bd:fc:0d:da:95:aa:86:58:37:75:43:6a:d2:84:e7:0d:
b1:58:7d:d2:73:a0:82:84:3a:cd:cf:66:93:2a:39:d0:43:c4:
ff:0f:72:28:e5:6c:c6:ca:38:ea:fe:ab:d1:3d:22:4d:3d:d3:
d6:03:85:80:4c:42:81:b6:75:5d:c7:a1:91:70:77:36:33:76:
77:5b:8d:e4:d9:aa:9d:e6:9a:9b:e4:0d:64:fa:5c:7c:b4:fb:
8a:0d:a2:49:03:16:74:2d:f2:db:9f:8e:7b:b9:9b:1d:42:63:
d3:55:ec:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:40:51 2025 by rpki-client