Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
File: 9X2cj_wgS2294BIFMDvfi1BjiqY.mft (raw, json)
Hash identifier: aydffI+vJI2WFZ3neAQv1NxD/4VLYu1TGairqUS97v0=
Subject key identifier: DF:F4:4A:08:97:14:B5:07:2D:AD:DF:82:9C:69:60:E4:44:B2:1D:18
Authority key identifier: F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
Certificate issuer: /CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Certificate serial: 01974DE9849FF5375CCF86469EA8C7A2202E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
Manifest number: 84
Signing time: Sun 08 Jun 2025 05:00:38 +0000
Manifest this update: Sun 08 Jun 2025 05:00:38 +0000
Manifest next update: Mon 09 Jun 2025 05:00:38 +0000
Files and hashes: 1: 9X2cj_wgS2294BIFMDvfi1BjiqY.crl (hash: TAhFoA8U3FR1+PCB/zmLh+VnjEQCFA+icQ0SQJyYbs4=)
2: blFPI1QT3vGyXWS1-axkqAT7T1o.roa (hash: 9ZF4v61ldXuDLq/JdKEO0mrKJOTY13vVthxskJAXAEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:84:9f:f5:37:5c:cf:86:46:9e:a8:c7:a2:20:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Validity
Not Before: Jun 8 05:00:38 2025 GMT
Not After : Jun 9 05:00:38 2025 GMT
Subject: CN=dff44a089714b5072daddf829c6960e444b21d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b5:b4:1d:e4:4c:c2:7e:b5:d1:c5:c0:9d:9d:
38:be:67:5a:43:10:ce:5f:81:43:2e:dc:77:e9:a2:
cf:37:0c:3d:b1:7a:ab:bc:28:d8:54:53:8f:02:1c:
b9:59:ca:ee:1a:0e:f5:14:ec:d6:e4:27:97:4d:e8:
e5:8f:34:14:f7:a0:d9:28:71:19:a8:37:f0:4b:7e:
c4:58:97:dd:20:ec:19:47:ad:2a:d1:09:21:32:55:
62:25:59:41:cb:84:f5:36:9e:91:4e:8c:b9:fb:c4:
96:b3:d3:80:84:9f:3f:b8:3d:de:59:2a:dc:d5:76:
63:a4:23:93:a3:7f:65:1e:34:a0:92:64:44:2c:02:
64:fd:85:a7:83:75:65:4c:4e:42:8f:c5:71:7e:37:
69:2a:5b:95:54:48:c0:cc:3a:bc:58:e3:59:6c:99:
92:eb:fd:fe:84:a3:02:6c:86:e8:b1:7e:10:b9:97:
ea:96:9c:bb:ee:bf:9c:2b:5d:93:5f:33:09:d3:dd:
62:89:e7:ef:11:f4:c0:fd:4e:4f:af:c6:9d:fd:b0:
e1:84:f5:5d:b9:d3:ad:22:50:f8:92:61:88:3a:23:
db:3d:1c:49:bc:0f:0c:40:76:11:39:59:61:44:bc:
e1:52:0e:3c:31:4c:be:99:29:51:e8:4f:6e:b3:b8:
b9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F4:4A:08:97:14:B5:07:2D:AD:DF:82:9C:69:60:E4:44:B2:1D:18
X509v3 Authority Key Identifier:
keyid:F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1b:b7:2c:a8:49:b4:a1:dd:4d:f1:08:d2:85:35:fa:7c:f0:
bf:84:c3:b9:96:cc:8c:03:e3:d4:70:1b:7e:0b:4e:ca:a8:02:
da:1d:dd:f3:32:8c:75:00:8b:e4:a1:57:90:db:5e:c2:ee:15:
6b:bb:3f:10:29:08:11:c2:bd:26:ba:fc:08:47:0d:1f:e6:62:
54:3b:6f:30:c4:10:c1:f6:cf:02:7d:6b:72:27:b8:32:73:40:
06:ca:5c:91:a3:64:87:39:3b:3c:f8:63:b0:34:63:74:c1:71:
c0:1f:d0:27:7a:8f:5c:4a:7c:46:e4:81:10:f9:39:d0:3f:63:
61:7b:48:0a:70:a0:b3:70:a6:b1:e1:0f:e1:23:c4:dd:99:7b:
48:a2:e4:2f:21:37:f7:56:53:7c:8d:a8:e2:ad:5c:61:c9:a3:
84:f5:62:15:ef:8c:84:3e:5c:2e:a0:a0:69:c5:c5:7d:e4:8b:
f8:03:f8:24:0e:6f:e6:80:e6:81:13:e9:56:b1:f3:b4:45:77:
b4:31:ff:7e:94:f6:10:67:ad:1f:0a:0c:d1:63:a9:74:90:d7:
c6:5a:e4:f8:88:47:de:15:f4:b7:90:5e:b4:18:ec:94:d3:c9:
81:9c:8a:89:c9:91:60:04:1d:69:1b:7f:a8:46:19:07:80:e8:
24:ae:d5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:55:23 2025 by rpki-client