Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
File: 9qD_yrRKardihf2LFfuprgRywAo.mft (raw, json)
Hash identifier: 2Oif36BxIMYSGz+9iTBzRQ+MnBO5yOHJD1LG9teYG5A=
Subject key identifier: 30:AB:88:43:B0:B7:28:DC:B6:1A:DB:80:9E:1B:5F:83:32:EE:22:78
Authority key identifier: F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
Certificate issuer: /CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Certificate serial: 0197610235FC0E2FB24F43003B2EED4760DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
Manifest number: 158A
Signing time: Wed 11 Jun 2025 22:00:24 +0000
Manifest this update: Wed 11 Jun 2025 22:00:24 +0000
Manifest next update: Thu 12 Jun 2025 22:00:24 +0000
Files and hashes: 1: 9qD_yrRKardihf2LFfuprgRywAo.crl (hash: rc3UhdqM09wza4516XO2nq27DDPp6so/J6uMn5jYz3A=)
2: XPkwDLJHT478MATdbgeUa5gcEiA.roa (hash: DoMDYSGNMC9OU+9UBRPPXJnhTtSu9q09Id+HJ989GvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:02:35:fc:0e:2f:b2:4f:43:00:3b:2e:ed:47:60:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Validity
Not Before: Jun 11 22:00:24 2025 GMT
Not After : Jun 12 22:00:24 2025 GMT
Subject: CN=30ab8843b0b728dcb61adb809e1b5f8332ee2278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:79:ca:f2:b0:ab:68:c9:3e:80:07:ac:5d:bd:
bf:fe:22:e6:32:23:85:af:af:0a:5c:95:51:72:6e:
b2:1c:08:13:1d:ff:f6:83:3b:ef:b9:72:13:5a:80:
1e:3c:cf:92:68:f6:f2:d8:6e:f6:8d:a5:ed:44:0c:
d7:a1:ac:b2:47:49:65:8b:45:fd:94:7b:aa:00:0f:
29:59:0d:96:19:ff:aa:29:84:88:e4:f4:c7:72:ea:
71:9a:08:1b:a3:a0:af:80:6c:e8:8d:db:7e:8b:35:
6a:96:52:22:11:35:fc:84:95:10:9e:a8:6c:c3:da:
23:c2:d2:05:a1:85:7e:ae:82:73:8a:96:09:8a:34:
34:60:93:ae:aa:24:60:26:4b:55:39:4d:b7:06:c7:
0d:ea:6a:1a:51:8c:c7:34:68:35:04:ca:98:2c:36:
a6:e1:37:cd:fb:64:91:f5:39:25:c4:d8:08:0f:60:
90:22:f1:4d:84:bb:6b:6e:af:b8:07:25:33:a9:99:
b8:98:55:0e:2a:c0:7b:12:3b:a5:31:b7:ca:c5:86:
b6:b0:66:57:63:e7:da:43:e9:d5:a0:fb:84:af:d1:
ec:69:7f:bf:e0:49:8f:9e:b7:7a:18:38:7a:f5:75:
c1:c4:b4:d3:5c:5f:3c:b5:63:28:c9:ed:c0:5a:f3:
10:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AB:88:43:B0:B7:28:DC:B6:1A:DB:80:9E:1B:5F:83:32:EE:22:78
X509v3 Authority Key Identifier:
keyid:F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:91:8c:52:12:97:32:96:13:3b:25:9b:5a:a9:aa:a7:b5:ea:
b5:c7:bb:f1:62:f4:6b:06:df:e7:5c:90:c5:e5:3d:e5:60:6d:
6b:f5:65:2f:eb:d7:0b:5a:8d:a2:ef:bc:7c:62:a3:ca:a3:ac:
86:20:1a:65:72:c6:9b:be:01:00:52:c7:98:a7:4b:11:2d:2c:
86:e8:9f:2c:e0:03:0c:e2:f7:3b:ce:ac:e3:6b:0a:ed:dc:9b:
74:e6:d5:3a:a8:63:aa:e5:b3:c8:d8:f8:d2:b0:56:73:1d:52:
eb:7d:47:2a:b3:44:b6:e9:d1:07:79:b4:a8:50:5b:15:b1:0e:
2f:47:13:e9:31:da:2f:43:34:15:06:07:d3:9a:09:91:e4:63:
1c:d2:91:4b:38:e5:0b:6e:66:bd:f3:a3:f2:36:63:93:42:18:
fe:87:0f:77:5f:93:95:bb:88:00:74:8f:bf:24:07:a3:64:17:
be:94:74:f1:14:00:21:ce:6e:a3:c2:e2:fa:4b:e2:d1:f0:39:
24:9f:1b:4e:63:01:b8:20:45:a9:0a:3b:7b:39:db:03:90:e4:
d0:65:05:83:aa:97:d2:ba:a0:92:99:b4:5b:94:39:17:45:66:
5c:06:14:2d:24:d2:b7:33:77:8b:ab:20:8e:81:71:1c:11:d0:
77:f6:aa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:32:51 2025 by rpki-client