Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json)
Hash identifier: yv8jK+H5634HNm2XIpFGwwrXdia9t+RSl0+ypyisecI=
Subject key identifier: D2:95:AA:FE:0C:4E:1C:5F:BF:CD:0B:5A:94:D6:59:F0:0C:31:92:6D
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 019749D5CA0BB7638D46075F70A508C394D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
Manifest number: 1324
Signing time: Sat 07 Jun 2025 10:00:36 +0000
Manifest this update: Sat 07 Jun 2025 10:00:36 +0000
Manifest next update: Sun 08 Jun 2025 10:00:36 +0000
Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: qC1QTyL6foCe+FQjLp37l9kMYTcTUurqVTtl/6wkEMk=)
2: JYVK5YIo9oFduSfdge32BhR1llk.roa (hash: MLgxgkj7xVD4j08JzP+4k7sw1diRLF6XHz+tW1zn9ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:ca:0b:b7:63:8d:46:07:5f:70:a5:08:c3:94:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: Jun 7 10:00:36 2025 GMT
Not After : Jun 8 10:00:36 2025 GMT
Subject: CN=d295aafe0c4e1c5fbfcd0b5a94d659f00c31926d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:94:e7:36:c4:68:c6:55:13:0b:67:9d:0b:a2:
94:58:bb:84:ab:ab:d9:16:ac:86:a6:a1:bc:e4:15:
8f:c8:35:bb:ed:89:59:3d:d5:40:16:7a:1c:5f:ab:
5a:ec:1f:c8:69:c7:d9:04:f4:b9:c6:d2:8b:c3:6d:
74:1a:1e:1a:b6:fe:64:6b:ee:e4:35:89:86:9e:a1:
49:13:19:1c:05:d5:ca:d0:8d:32:c1:48:00:e9:e0:
d6:e0:71:3e:e1:82:bb:67:a1:d0:78:96:c1:92:74:
b9:d6:08:80:f2:0e:0e:b5:a5:a7:18:a3:c9:6b:87:
48:6f:46:ae:06:a3:a7:15:4f:c9:50:05:5f:ff:fa:
1c:64:46:b3:dc:b0:8e:1a:fe:80:0a:ec:04:12:c7:
f1:c6:40:be:33:70:66:03:31:5e:2f:05:78:8a:53:
19:ca:1c:f0:cb:18:ab:db:cb:7b:44:fd:18:95:1a:
03:95:54:5e:d8:89:b4:96:7b:ff:62:83:71:00:82:
e7:6f:f6:14:03:7b:21:56:65:30:fb:89:2a:6a:05:
c4:3d:f6:e0:86:68:d9:ef:db:c4:a4:c7:f0:56:09:
3d:1b:1c:cc:08:92:08:63:f8:d3:24:b6:39:a9:c1:
38:41:77:30:04:6c:e1:0a:90:56:e1:f5:75:26:2e:
a0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:95:AA:FE:0C:4E:1C:5F:BF:CD:0B:5A:94:D6:59:F0:0C:31:92:6D
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f9:e3:cb:1c:74:9c:eb:57:eb:ba:1b:ee:dc:b3:74:02:cc:
49:7d:37:58:34:d0:89:e5:91:63:03:3d:de:dc:25:af:9e:29:
c9:76:4a:e3:11:f7:f2:c0:03:4d:eb:5b:ae:ad:94:55:3a:2b:
ac:4e:7f:4c:4c:2d:e7:79:7b:fb:57:a2:03:ea:37:6b:80:6b:
50:fb:19:da:f7:1f:5a:b6:fb:0f:c7:54:92:e7:b5:c5:a5:0f:
a7:5b:57:62:5c:eb:ec:f9:9b:0d:02:79:2c:6b:93:84:1e:00:
17:77:ec:e2:25:06:7e:54:06:1f:ea:77:f9:e0:01:ec:eb:5f:
b4:a0:c2:b3:65:63:fb:4a:9e:f4:8d:ae:72:a8:63:81:09:0b:
95:81:8d:6d:37:04:5a:4e:23:7d:f6:a4:e0:9c:f8:d4:f7:27:
15:c3:f1:3b:79:c0:f9:0c:07:a5:4a:ce:c3:74:f0:52:7f:4a:
9f:13:2d:26:07:55:dd:38:f7:43:61:72:b1:e5:50:21:e4:27:
2b:68:27:92:b3:a5:a2:46:99:99:55:fa:eb:16:50:2a:7b:06:
ba:ed:11:9d:a7:66:b1:77:fc:ed:e7:80:34:78:df:30:6d:98:
be:12:c6:36:67:9f:df:d3:d7:b6:c8:54:12:37:1d:ee:0d:29:
cd:43:93:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:05:07 2025 by rpki-client