Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
File: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft (raw, json)
Hash identifier: nCsYQ1Sdv9aCdHQpsFOfGeSP5V6QbsVv6accmYYRkbg=
Subject key identifier: 2B:BF:DD:CE:37:91:20:ED:04:CA:1D:B7:78:26:D5:45:51:3C:9F:6D
Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
Certificate issuer: /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Certificate serial: 01974C3244F137871290D43B0A7AE178BB1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
Manifest number: 0487
Signing time: Sat 07 Jun 2025 21:00:52 +0000
Manifest this update: Sat 07 Jun 2025 21:00:52 +0000
Manifest next update: Sun 08 Jun 2025 21:00:52 +0000
Files and hashes: 1: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl (hash: kVuwo9wpfJjzw/8ch2N97UEZPsuH15Mj7KUa4ziIlbU=)
2: hmRzovRV4UHybR1HxVtSJMOLDCw.roa (hash: OsQ6iHBOvn0+b51MYRo/b13uIhsZ7r4gypQoB9TbMVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:44:f1:37:87:12:90:d4:3b:0a:7a:e1:78:bb:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Validity
Not Before: Jun 7 21:00:52 2025 GMT
Not After : Jun 8 21:00:52 2025 GMT
Subject: CN=2bbfddce379120ed04ca1db77826d545513c9f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:3b:d7:e3:83:8f:ce:af:42:b7:78:1d:50:
c6:af:a5:af:a8:15:f1:da:d5:32:03:ee:3c:f3:6f:
70:38:69:2e:80:a9:f3:72:b0:d0:95:da:66:ab:d4:
92:64:3c:49:0f:ce:0f:1f:13:2a:3f:21:39:83:a0:
4b:fb:89:32:ca:68:a5:0b:a8:69:fb:d9:5f:73:0c:
34:54:e0:0a:30:dc:7d:40:58:87:b9:62:57:d7:04:
af:3d:57:29:49:70:2a:5a:37:65:c4:18:e9:08:cd:
80:5c:d4:2b:14:7c:24:ed:bb:ac:1f:cb:36:bd:be:
35:c2:fb:03:10:4e:65:65:61:e6:60:0b:56:60:8e:
d3:c9:7e:a0:6e:50:67:eb:ae:0d:3b:4e:58:12:7b:
2b:b7:ba:39:9d:ba:65:d9:ca:95:60:45:d8:3e:6e:
54:cf:d3:64:7a:be:f8:bf:8c:dd:da:b2:78:4e:b8:
af:d5:1a:e2:ee:57:fa:5f:a7:2c:50:87:73:73:e6:
f4:85:cd:e9:03:80:ef:d7:3d:9c:0e:df:40:f2:39:
0a:2f:0b:46:5d:79:b4:bc:28:9f:eb:bd:c1:fe:3a:
3d:91:cd:75:68:78:18:97:64:6f:8d:5d:ef:a4:32:
c0:cd:1d:37:b2:51:0f:8e:1a:99:2d:d1:ea:ea:09:
05:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BF:DD:CE:37:91:20:ED:04:CA:1D:B7:78:26:D5:45:51:3C:9F:6D
X509v3 Authority Key Identifier:
keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a2:80:82:c8:45:90:30:6f:99:fa:f3:80:44:86:64:10:41:
a8:3e:53:14:54:f3:bb:ff:c0:6f:aa:21:45:99:fd:2d:b5:1b:
7e:7f:80:71:65:9c:82:23:60:7c:cf:45:95:ab:5e:99:18:16:
81:98:6f:31:44:c2:0c:ca:2a:b3:16:9e:66:2a:fe:51:51:8e:
62:91:eb:03:ad:ad:47:7c:14:ff:7f:6c:1e:0c:04:e9:8b:c8:
b0:03:34:c7:24:dc:40:c9:b8:24:65:45:b1:9a:39:ef:5e:f5:
b8:23:94:77:e1:20:6c:2e:cd:2a:ff:fb:62:00:cd:4f:72:7d:
91:5d:52:f7:93:39:38:38:33:d7:b7:5c:e8:98:28:51:a3:33:
52:77:1f:e6:1e:3a:98:32:cc:22:39:63:fe:81:54:93:c7:79:
37:b4:55:c0:b2:c2:fa:52:1c:3c:bb:17:87:7f:c7:e9:f6:c9:
77:46:80:dd:15:44:d4:82:c2:72:79:df:1f:ab:d0:94:18:26:
2b:23:94:f4:bc:db:ac:61:45:be:e3:30:88:32:bd:f8:63:73:
82:ae:3d:5e:88:f0:bd:92:cd:87:40:56:2a:b5:d9:a1:68:e1:
3f:f1:53:3d:d2:1c:ee:41:c9:0a:65:2d:ae:db:15:6c:0e:28:
a8:d1:aa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:35:59 2025 by rpki-client