Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
File: h9qWV60f35jec4uxmnPv0NsLOio.mft (raw, json)
Hash identifier: W6ooc3mukKFK3I9IrwpZIhGy807HJrj78cjsG80hiL0=
Subject key identifier: 97:7F:E2:F9:35:64:2F:2C:C7:11:8E:56:C2:C4:6F:FC:A1:E6:6A:B5
Authority key identifier: 87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
Certificate issuer: /CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Certificate serial: 01974A43D5523CA70A61B3CDB7EBCE8EA088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
Manifest number: 1C
Signing time: Sat 07 Jun 2025 12:00:48 +0000
Manifest this update: Sat 07 Jun 2025 12:00:48 +0000
Manifest next update: Sun 08 Jun 2025 12:00:48 +0000
Files and hashes: 1: 2GTFPZ68uVkX8Ryfbx92fDQ9upI.roa (hash: lvp+RlxYyEIMygF5MN9RWgH0GLslbYAMM+G4pVyVmkU=)
2: h9qWV60f35jec4uxmnPv0NsLOio.crl (hash: MCMeQtoXsyEoJsH7biA328Df3MDk+IoqbI/EkYxtT0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:d5:52:3c:a7:0a:61:b3:cd:b7:eb:ce:8e:a0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Validity
Not Before: Jun 7 12:00:48 2025 GMT
Not After : Jun 8 12:00:48 2025 GMT
Subject: CN=977fe2f935642f2cc7118e56c2c46ffca1e66ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0e:62:e1:11:83:c7:35:a4:5d:42:0e:b9:61:
e1:e1:29:e2:92:46:9e:9b:8d:ff:c8:11:8b:8d:f7:
9c:f2:31:94:9b:52:54:ef:e0:ff:f5:36:78:3d:94:
77:9d:3f:de:b4:d2:22:49:e3:f2:93:bd:28:c5:d4:
70:8b:ad:ed:5a:61:c2:aa:40:dc:84:56:30:0f:8e:
4e:b0:a8:b6:c2:86:e4:7a:32:a1:58:fa:0b:e3:8a:
e4:9c:3c:53:d1:55:2b:91:c7:cd:b0:16:4a:5a:13:
9c:1c:47:6f:fe:85:79:79:14:10:ec:ca:9c:ad:51:
d1:7e:f5:2a:35:f9:2a:a7:b5:c0:a3:84:2e:3b:fe:
fd:40:9d:10:a6:91:86:61:d5:ce:ae:98:cc:e3:90:
13:1d:59:d4:b4:d0:71:9e:b4:60:cb:25:06:4c:ab:
7b:5e:7a:11:a4:b2:70:67:29:83:ef:9a:de:32:bf:
40:77:ab:bd:cd:9d:81:fc:94:3f:8c:bb:52:fa:0f:
87:34:9f:09:91:1d:f8:e1:42:ee:fb:3a:16:1c:1a:
64:e9:8e:29:cb:28:08:08:f7:5c:58:98:fd:e5:3e:
1f:99:9b:26:4b:2f:d4:ed:45:23:23:78:93:d2:af:
45:57:bb:7b:0a:d2:ad:1e:ee:22:09:d3:6a:97:c6:
d6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7F:E2:F9:35:64:2F:2C:C7:11:8E:56:C2:C4:6F:FC:A1:E6:6A:B5
X509v3 Authority Key Identifier:
keyid:87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:72:d8:9e:42:50:04:a4:c4:ba:f6:f6:85:f2:f9:4a:67:35:
93:e2:31:45:3c:04:7e:d0:10:77:2c:b2:62:f6:4d:18:22:28:
df:cd:33:18:24:1a:20:23:f0:61:9f:f5:b3:26:9b:6c:ef:1c:
80:82:ba:0e:46:f5:f1:08:cb:87:c9:dc:74:0a:1d:c4:a9:ed:
91:e5:07:1f:2c:3b:73:0e:42:fb:f6:04:f3:5f:7e:99:90:c8:
57:5e:f3:08:47:e4:31:17:6d:07:46:c7:91:52:8d:80:d2:ce:
a1:3f:7d:35:a6:04:ec:05:37:4b:1e:71:66:71:2c:84:34:ea:
34:2f:9a:19:07:29:2f:f5:a6:97:a6:3a:fe:68:d9:a9:95:30:
8d:e2:69:fe:12:e0:f5:14:0f:16:32:24:76:cc:7f:76:e4:ba:
1b:83:d3:5a:59:d3:7b:34:bb:32:35:e5:be:cc:3f:8b:df:c0:
44:d6:f6:4d:e9:ea:a0:d4:8f:f7:17:26:58:52:4f:7e:3b:ad:
61:84:15:4c:b7:4d:8d:c5:e8:bc:c4:56:28:0c:7d:a9:6e:ee:
1a:39:9f:6b:5f:34:05:4c:38:2a:9a:c1:00:75:cc:bf:6a:d5:
cd:4c:7b:c7:b9:cf:ff:1e:48:56:f1:07:01:84:df:eb:72:82:
79:01:b1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:16:15 2025 by rpki-client