Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
File: 9QVXghWs7nPBf6MNApXg2N176J0.mft (raw, json)
Hash identifier: fxd4LxnujIFPgD+rJxElf5/MYCbQCNmI9iDeLahYcZk=
Subject key identifier: 0C:E1:FC:53:C4:10:6F:A6:EC:B1:1D:3E:B3:99:5E:2F:4D:00:A2:4E
Authority key identifier: F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
Certificate issuer: /CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Certificate serial: 0197499F80E4AC6C4341BA653E1004A2BD5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
Manifest number: 0505
Signing time: Sat 07 Jun 2025 09:01:19 +0000
Manifest this update: Sat 07 Jun 2025 09:01:19 +0000
Manifest next update: Sun 08 Jun 2025 09:01:19 +0000
Files and hashes: 1: 1-Lbg3ThJkSQ5UEB1CC2J6SJYq7I.roa (hash: MQY60dXinW2RjKa/YH49asbDcYbOnLmhhQbRiFehf0Q=)
2: 9EsFTJPfhrHzuggwv3Tacy86NPc.roa (hash: g+7gpPPFmcqEG/1q7hm3OgzhQxlfCVb68SP9jb1P1Q4=)
3: 9QVXghWs7nPBf6MNApXg2N176J0.crl (hash: EPtw7KLLwOEdbVM2dXNqMeVU+6/R64UGBS6TJcg14hM=)
4: Pam-mYZhUPxumLyTa-d41AOp2eI.roa (hash: aCi8Qzgn/82AxyGXcRCZJe9cgue7YAZPk3yXhgftdGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:80:e4:ac:6c:43:41:ba:65:3e:10:04:a2:bd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Validity
Not Before: Jun 7 09:01:19 2025 GMT
Not After : Jun 8 09:01:19 2025 GMT
Subject: CN=0ce1fc53c4106fa6ecb11d3eb3995e2f4d00a24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:ea:de:ab:03:fd:32:25:61:17:ac:76:86:
d5:63:73:74:c8:39:28:01:8b:08:17:fc:bc:1c:77:
dd:ac:f7:e1:20:9e:d8:38:ab:fc:1c:39:80:21:b4:
f1:66:ef:25:a7:f7:6c:67:cb:0c:9e:5b:2c:3e:10:
fb:3d:35:a1:8e:66:cb:64:39:c2:88:69:5b:e3:ec:
61:37:8a:ef:4d:a7:68:2a:0f:de:77:5a:b4:d8:43:
53:8a:4b:3b:8a:45:b7:05:e1:73:f2:6a:ca:08:95:
b9:f3:1c:a7:d3:7f:30:71:e2:3c:e7:e9:f2:db:55:
5f:84:80:3a:b8:4f:14:33:e0:ad:b2:5b:41:c0:24:
52:a8:44:fd:5f:82:80:ed:8c:e3:10:dd:a3:0f:35:
00:21:2e:cc:61:28:f3:b1:5d:09:42:1f:e6:6b:c3:
32:18:cc:f0:4d:b8:bb:ee:e3:b8:6a:55:5f:fb:16:
40:37:d8:d2:8b:01:9c:eb:4d:dd:91:38:ae:b2:6f:
64:56:9d:54:0e:b5:8c:de:66:83:a6:43:2a:26:48:
bb:cd:e1:dc:6d:ff:ed:d7:2f:e7:ce:f4:94:a2:e7:
bd:ad:5d:2f:ad:62:93:ff:46:f9:b0:30:e5:c2:2f:
40:f0:94:0c:fe:17:21:98:42:6c:ab:6d:e4:9c:8e:
7e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E1:FC:53:C4:10:6F:A6:EC:B1:1D:3E:B3:99:5E:2F:4D:00:A2:4E
X509v3 Authority Key Identifier:
keyid:F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c0:cc:33:06:8f:f3:76:86:7e:ba:68:04:9f:19:ff:4b:1c:
b8:eb:03:9c:a2:18:ea:36:ea:0a:91:f5:fe:73:00:7a:ba:3f:
e9:47:ab:2a:bf:b7:bc:8b:57:5a:11:e4:2d:02:19:11:21:c2:
7b:e8:21:fe:f6:87:77:68:88:bb:39:e5:30:84:56:3d:2f:3a:
a1:06:b9:9f:3b:e6:8a:f2:46:77:93:58:d1:b2:1b:e6:46:c5:
fe:1d:dc:f8:06:28:2c:95:aa:ac:31:dc:29:73:f3:be:38:cd:
83:73:0e:e9:16:59:fe:13:62:a3:1d:7a:19:ec:85:f5:3b:5c:
da:d7:4d:5f:e5:5d:23:d2:03:b8:f9:0c:07:b4:5f:d9:9f:f1:
94:3d:a6:01:86:7d:15:ed:c3:b2:a4:36:00:a7:cf:4b:49:7b:
77:5d:32:09:92:59:2b:cf:a9:df:7c:00:dc:55:1e:d1:cf:19:
a2:e6:63:b0:6e:63:80:9b:21:b2:d3:11:95:6c:dc:58:53:9a:
72:4b:fb:5a:23:b4:55:dd:fd:9c:9f:e0:d6:18:9f:e4:8d:1e:
b5:eb:1e:67:fe:70:e5:fe:bc:58:ae:d5:01:3a:dc:45:78:3b:
bc:ea:ae:60:e3:b5:f2:5a:a8:cd:11:67:cd:17:95:36:29:5d:
4d:45:1c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:41:46 2025 by rpki-client