Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier: ciDRuJZmzrjkvkUTbl7NgdMFoiJLiEILvqKdxGC6s6U=
Subject key identifier: 4B:BF:65:90:B0:1A:C5:0B:3E:04:13:87:74:B4:CA:DD:F7:83:C9:9F
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial: 0197499EF1E058AFBBCB576EC581933B64FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number: 09A6
Signing time: Sat 07 Jun 2025 09:00:42 +0000
Manifest this update: Sat 07 Jun 2025 09:00:42 +0000
Manifest next update: Sun 08 Jun 2025 09:00:42 +0000
Files and hashes: 1: 9jRjdTO7fBkjcFHt1fnUnaX_T3k.roa (hash: 3WY7AgxSwDZyrJrZX0H0mFMYrwb18tzFjzAuAbCSY+Q=)
2: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: xSBEasMcBPvn8Ul/mg1/qs1jC4Z2YFxjna8DKjA1pIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:f1:e0:58:af:bb:cb:57:6e:c5:81:93:3b:64:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Validity
Not Before: Jun 7 09:00:42 2025 GMT
Not After : Jun 8 09:00:42 2025 GMT
Subject: CN=4bbf6590b01ac50b3e04138774b4caddf783c99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:ea:10:ab:6e:fa:d9:9d:5d:fc:5e:38:02:
80:ff:d4:64:bc:71:09:06:c8:cd:cf:1c:75:ea:1f:
85:92:6c:ae:31:ed:cc:06:48:92:ba:9e:7c:5e:84:
e8:ff:a7:a0:92:8e:5d:a3:39:cf:c9:f7:50:0d:b3:
d9:12:ca:14:46:f2:01:9c:d9:4c:f3:bc:6d:56:e2:
45:50:00:d3:02:90:73:f2:ae:4f:8e:58:57:18:03:
57:57:dc:5a:83:3c:b2:09:36:3a:00:9a:f9:9c:53:
e4:86:e2:83:07:bd:4f:75:3a:bf:4f:d3:6a:17:41:
83:27:a6:be:ee:8f:a8:83:42:47:e9:46:d4:48:e7:
f8:d7:b2:a6:84:1a:f9:0b:b0:26:be:b0:fa:5c:1a:
05:92:c5:79:93:49:90:6c:0c:df:f4:ff:eb:b5:d6:
97:92:e3:c0:f7:06:a5:61:83:e3:df:97:42:35:35:
cc:7d:a5:c0:fb:b8:49:0c:14:24:82:9f:a7:20:10:
e7:7a:5c:e9:b1:71:3d:5f:0f:72:33:f1:49:0b:ef:
63:e7:8e:08:39:4b:85:4d:5b:76:3f:da:0e:5a:e7:
fc:76:c0:b5:3d:a5:e9:3d:92:c0:79:ad:55:7a:8e:
37:91:0f:1a:45:53:75:d6:d8:52:c4:eb:04:57:8e:
bf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BF:65:90:B0:1A:C5:0B:3E:04:13:87:74:B4:CA:DD:F7:83:C9:9F
X509v3 Authority Key Identifier:
keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7e:fd:77:33:4a:58:cb:45:fa:e7:5b:9c:e5:cf:76:19:66:
9f:ca:99:fa:ce:5f:61:03:20:36:78:93:e6:a0:a5:70:89:7c:
9d:aa:dd:38:b1:9e:ff:8f:66:89:ef:ae:a0:21:b7:11:6e:b4:
26:de:9e:83:12:70:37:73:78:fc:59:72:d5:94:b2:5e:d4:2a:
f4:ca:ee:28:a7:71:2c:90:aa:43:c8:44:15:6a:08:ab:82:f0:
ce:27:10:6a:31:d0:ae:53:30:e7:a7:76:20:3b:39:2e:48:9f:
b5:e2:d1:22:0d:9a:ad:15:25:91:80:42:53:4d:63:c2:06:b5:
b8:07:85:30:96:fd:74:12:ae:59:a0:71:58:52:14:88:c5:f3:
29:e2:94:8f:ed:cf:a8:16:77:c4:d2:ef:7c:d4:bc:4b:6b:f9:
39:5f:ab:d8:f0:74:96:84:52:8a:16:c0:50:2f:2f:c5:52:2f:
fa:33:43:c8:7c:83:b3:3e:fd:f6:6b:dc:dc:37:c6:d7:cd:99:
3f:76:32:61:0c:43:ba:da:f7:9a:85:0f:44:77:58:52:ef:7c:
08:1a:69:1c:ee:44:b1:a6:b6:ca:72:cd:03:cd:47:d7:a1:1b:
ad:0b:7e:cf:d4:fa:f0:42:6f:ff:f7:b4:f4:8c:fb:ed:20:9f:
ba:de:4c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:05:39 2025 by rpki-client