Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
File: 9q7W1c5BV5fBKF9-9v0EPGRm594.mft (raw, json)
Hash identifier: I80T1nqU1ZKJZnxCCMVd5XpoeBFuZUy+ySPL24I9ACA=
Subject key identifier: 56:DE:96:78:E1:89:8B:69:5A:18:63:41:26:70:22:1C:71:32:BA:B0
Authority key identifier: F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
Certificate issuer: /CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Certificate serial: 01974A7AE5713D81B8C3C93CA2D471550F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
Manifest number: 0A71
Signing time: Sat 07 Jun 2025 13:00:57 +0000
Manifest this update: Sat 07 Jun 2025 13:00:57 +0000
Manifest next update: Sun 08 Jun 2025 13:00:57 +0000
Files and hashes: 1: 9q7W1c5BV5fBKF9-9v0EPGRm594.crl (hash: aFkl78Q+kzeoBNMucEz9hH48N+0V7ENv7lGvGKU4gTY=)
2: ziQt4Au1b87EcX3IQE4F3MWkDm8.roa (hash: KUoOZI3FZormf07wPCHQ5jctubRO3hNmnfHFtLKB4fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:e5:71:3d:81:b8:c3:c9:3c:a2:d4:71:55:0f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Validity
Not Before: Jun 7 13:00:57 2025 GMT
Not After : Jun 8 13:00:57 2025 GMT
Subject: CN=56de9678e1898b695a1863412670221c7132bab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:aa:bf:02:18:08:38:c4:17:5a:a2:2d:06:
11:b6:74:04:b9:32:6c:fa:de:9e:bf:d9:ff:f0:6c:
ce:0b:3a:c5:06:86:bd:38:b2:92:76:4a:41:cd:52:
07:ec:d5:5e:fc:43:1e:6b:3a:41:69:f2:c7:b8:69:
d0:ba:3d:ce:18:4b:64:e9:f7:a2:f2:f8:d4:a9:4d:
36:39:0a:0d:60:af:dc:68:b7:68:f1:ce:35:1a:0f:
31:ba:a6:aa:24:7e:47:64:29:71:06:6d:75:55:ba:
59:a3:9e:fb:9d:f2:c8:6b:4c:d3:71:78:de:04:c5:
a3:5b:61:66:e4:89:81:8f:92:52:ee:33:58:b7:4c:
3b:cc:4d:8e:f9:e3:b6:f1:51:10:6c:04:d4:46:32:
0b:ef:5b:43:d6:a0:af:9b:7f:d8:86:21:c6:5b:36:
d7:18:bf:85:27:cf:5e:7c:50:02:31:61:38:6e:e3:
ed:0c:26:ce:1e:e3:48:8f:67:4b:a5:dd:98:dc:de:
9c:68:a2:b6:38:3a:b5:be:a3:f1:34:95:9e:16:ec:
49:ce:72:6f:9f:c8:d4:77:95:68:b6:2a:81:f2:23:
df:a4:72:67:ae:67:15:81:bb:b9:03:a8:0f:41:a9:
03:26:1a:7d:66:14:f5:ae:4e:c0:e1:9d:f2:29:f8:
fb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DE:96:78:E1:89:8B:69:5A:18:63:41:26:70:22:1C:71:32:BA:B0
X509v3 Authority Key Identifier:
keyid:F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3e:13:de:03:0b:3e:99:63:6b:b1:d5:a8:52:58:82:f7:d5:
6b:09:a0:08:6a:95:73:19:03:4a:b8:2e:09:c3:cc:c0:2c:6d:
e2:3b:23:cc:e3:9e:3c:d7:3d:27:cb:0f:aa:4f:f8:c7:87:9c:
b5:ed:dc:ae:42:14:51:89:b6:b6:68:c7:b9:6f:7e:8d:0c:7a:
e3:89:92:b6:bf:e4:6e:0b:52:f0:2f:49:db:ad:af:b1:7b:41:
46:18:5d:89:b6:b8:a1:f3:74:2f:4c:cb:32:59:8b:0a:ce:6b:
08:3f:39:4d:5b:ac:50:c9:0c:58:a1:45:d8:01:34:d8:2f:10:
4c:4e:9e:9e:62:3e:70:ea:04:40:0f:c9:f7:aa:1c:6b:01:b7:
dd:bc:b2:fc:db:cb:88:5f:f8:fd:db:d3:69:53:fc:de:8f:21:
f2:b8:ab:a4:0c:fa:3b:e2:f9:b0:71:fc:22:31:71:13:5b:fe:
f1:62:fe:bb:0c:62:4a:3b:51:3b:2d:7d:99:36:00:05:c3:d5:
54:36:e9:12:5a:4c:fb:46:13:ba:c5:ac:45:ef:2b:06:4b:34:
d6:86:b0:e6:c7:b5:80:96:30:bd:ea:a5:4c:30:cd:7e:70:06:
25:5d:59:5a:fb:8c:c2:dc:97:c7:f1:05:b5:e2:0a:17:09:e8:
cc:cc:be:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:17:28 2025 by rpki-client