Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
File: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json)
Hash identifier: 33DWIpRXjn4gY7TNMUvF7r0JNOesITwPQNnamDRe5ag=
Subject key identifier: AA:6E:C6:8E:9C:6E:00:7C:54:E7:D0:BD:B5:E3:8D:3B:D8:06:B0:DB
Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
Certificate issuer: /CN=f57331288d908dd762e4b56f003b448f01881d24
Certificate serial: 01974AB1A2B2B8B1FC8C1D3E9946877E15A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
Manifest number: 09B4
Signing time: Sat 07 Jun 2025 14:00:44 +0000
Manifest this update: Sat 07 Jun 2025 14:00:44 +0000
Manifest next update: Sun 08 Jun 2025 14:00:44 +0000
Files and hashes: 1: 0bWQKA9zOtioaMzmn9TsZ_m-_Ak.roa (hash: XVs6Vl4wE42XJXEmtUVk+/HVBTJz/D0t8xUAsepjFh4=)
2: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: W0OpKcg7S/MCEqpJjm+Oz1JZjnODt/RyHxxAE13ecCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:a2:b2:b8:b1:fc:8c:1d:3e:99:46:87:7e:15:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24
Validity
Not Before: Jun 7 14:00:44 2025 GMT
Not After : Jun 8 14:00:44 2025 GMT
Subject: CN=aa6ec68e9c6e007c54e7d0bdb5e38d3bd806b0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:16:db:55:c1:41:61:b5:19:20:48:cd:6a:
31:cb:4b:87:98:30:73:0a:64:4a:7c:41:11:82:a6:
d3:7b:7f:e9:ca:5d:8e:49:5f:ca:61:4c:0a:bc:09:
72:8b:e5:3b:9d:5c:32:61:33:14:03:bb:09:fe:ac:
3f:49:52:32:4f:8a:69:47:c6:f1:b8:11:1d:57:8a:
4b:00:0b:63:3e:1f:02:21:92:17:d5:69:56:82:e6:
a2:66:52:22:fd:e2:16:e6:50:0a:a1:ce:01:06:4a:
2f:5a:77:8e:5b:da:74:5b:ad:c6:19:68:10:a8:bd:
e0:5d:94:d3:be:77:d6:2c:7b:db:7e:dd:8b:86:23:
af:77:95:a4:f6:79:3d:ca:19:c0:0d:c1:2b:51:26:
e1:64:08:7b:78:16:4d:32:bd:54:c3:5d:bb:1a:aa:
ac:c6:52:66:95:22:37:8c:d8:b7:28:4d:25:67:ae:
33:2b:a6:31:a5:f8:0d:31:a4:19:18:46:dc:85:de:
2c:6a:f6:eb:be:ed:4b:ee:64:79:52:ba:e2:3d:53:
7e:2c:d5:51:56:50:b3:40:d8:b7:2b:40:df:1f:59:
a3:3d:c9:c3:0f:e9:59:8e:c2:7f:00:35:d1:8d:95:
b0:77:3c:6a:0f:54:b9:ad:98:3f:c5:cf:f3:d5:41:
ef:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6E:C6:8E:9C:6E:00:7C:54:E7:D0:BD:B5:E3:8D:3B:D8:06:B0:DB
X509v3 Authority Key Identifier:
keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:33:e5:d6:e0:76:00:6a:12:c7:74:b7:09:90:d6:51:cf:79:
de:bd:d9:49:36:ce:5a:74:2a:50:00:21:50:e7:4a:f9:b3:bd:
b9:c8:3e:06:0c:95:df:e5:fd:7c:1c:4e:91:2a:ba:1a:8d:3f:
52:84:d2:26:9b:04:d9:c7:e3:84:7e:8c:12:98:90:f0:86:97:
47:dc:0a:b1:8e:05:5a:5b:c7:0a:4d:ae:46:5e:a9:1f:6b:33:
e7:75:6e:d8:9d:f5:d1:a9:10:e9:32:e0:bd:76:5e:41:48:ce:
46:c9:3c:13:0f:0d:39:86:26:81:49:84:1e:30:e8:46:48:64:
96:55:56:17:67:0c:ea:bd:8e:6a:74:ad:40:0b:f6:9d:db:f8:
eb:db:ac:3b:01:2a:bb:91:00:b6:36:38:08:c7:54:39:cf:2d:
ef:a0:ba:a8:0b:a6:02:ce:06:65:e3:d5:2f:da:79:10:95:58:
67:ef:6d:ae:23:87:ce:2a:87:e2:a5:f7:96:77:59:c4:0d:c3:
0d:b9:42:b1:da:2a:02:c0:ed:fd:61:47:f0:4f:92:65:5a:31:
dc:2c:9c:4f:f8:99:9b:fc:cd:7a:44:4d:99:c0:40:e5:1f:08:
7a:5e:2e:26:4f:25:26:31:07:b8:71:e1:28:bd:b8:44:49:b1:
b1:e1:eb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:57:02 2025 by rpki-client