Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
File: _a9B0EvGh9D_mK19QHaEdRxGyj4.mft (raw, json)
Hash identifier: H3NM6TD36aCUnJfdJKIbn3cTp7DG3Lpiiu8V1bgKEB4=
Subject key identifier: 2B:DC:2B:17:41:26:3F:53:FE:50:62:03:53:57:08:53:59:8F:06:6C
Authority key identifier: FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E
Certificate issuer: /CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
Certificate serial: 019749D57F4B64B8D3B01D18F4BD0415480B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
Manifest number: 11
Signing time: Sat 07 Jun 2025 10:00:17 +0000
Manifest this update: Sat 07 Jun 2025 10:00:17 +0000
Manifest next update: Sun 08 Jun 2025 10:00:17 +0000
Files and hashes: 1: KAVL6kTny8TDOYbmZPaPDwl2wXM.roa (hash: aJfitKEgdn0yPAeBVox/YEVRIDod3KCN4Iqb7ST2CSs=)
2: _a9B0EvGh9D_mK19QHaEdRxGyj4.crl (hash: I2OslLuPRTckelKHza/ubhsyL1CC12A3MJmZXEbvap0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:7f:4b:64:b8:d3:b0:1d:18:f4:bd:04:15:48:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
Validity
Not Before: Jun 7 10:00:17 2025 GMT
Not After : Jun 8 10:00:17 2025 GMT
Subject: CN=2bdc2b1741263f53fe50620353570853598f066c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4e:ef:7a:46:30:28:db:de:58:64:dc:cc:ee:
d7:df:6b:bc:b7:b7:20:12:62:82:95:5c:24:91:63:
a0:6e:4d:9a:89:4c:82:c1:ea:f4:c5:89:00:82:65:
2a:2f:83:27:0b:fc:11:ce:b0:4a:9f:de:50:5c:04:
f7:a5:a1:5f:25:90:f9:44:05:2d:fc:f5:92:3a:6c:
da:54:b6:9c:14:db:95:e9:d2:b7:07:63:7f:92:af:
27:90:9f:92:c4:da:41:11:f7:d8:16:f8:8c:61:94:
03:bf:f1:07:fc:68:68:76:a3:21:03:7a:8d:11:b8:
d4:31:7e:5d:c2:6e:ba:70:67:b8:2b:f9:19:b5:01:
cc:58:7e:40:0a:57:13:53:a1:51:5c:91:d0:a5:35:
4e:36:01:a2:8a:fb:fa:ca:11:d6:11:31:9a:46:a1:
d3:30:7e:ae:b8:d5:73:62:db:06:74:ad:8d:9a:04:
84:3d:e2:62:46:d7:ba:a0:2b:4b:0d:ce:28:cf:87:
63:85:0f:85:36:9e:dd:73:9b:f2:41:2a:82:a4:20:
97:7d:68:1b:96:9f:cc:79:53:84:81:0a:d0:7b:10:
a7:f9:75:61:c0:2e:2c:00:bd:9c:db:7a:ca:84:18:
84:f5:60:51:d8:87:c3:fc:b9:3f:e0:65:ac:60:00:
5c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DC:2B:17:41:26:3F:53:FE:50:62:03:53:57:08:53:59:8F:06:6C
X509v3 Authority Key Identifier:
keyid:FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:af:a8:e9:2c:17:8d:d8:ea:8b:d9:10:2a:ce:82:86:af:2d:
90:71:72:2e:53:42:07:6b:3c:30:97:90:c0:2c:83:fa:05:6d:
86:db:2a:90:06:f1:de:6d:02:84:4d:57:83:5a:94:36:06:7d:
09:cb:d9:86:08:4b:02:ef:c8:69:8a:7b:af:7a:aa:08:69:16:
1d:ba:01:f2:12:5b:b7:8b:5e:7d:a1:12:fb:b1:42:17:ff:b0:
b0:5f:37:bc:8b:61:2e:c2:f9:75:de:5d:36:27:87:c7:ac:86:
cf:5a:f9:51:16:99:87:ae:89:03:2d:1b:98:77:b4:95:d7:7e:
eb:63:04:b0:4c:36:ed:3c:00:a3:54:6a:fe:b8:18:07:89:cd:
f4:bf:d7:f7:91:5e:8e:d1:c3:47:03:af:75:7a:40:44:66:59:
51:ac:cc:0b:c5:92:b5:38:65:ed:81:c0:b2:2d:01:cd:2c:20:
21:c2:2d:1a:8a:1d:c4:3d:1d:4e:dd:ff:b3:e5:a2:87:ac:2f:
c3:5b:8e:c9:90:d8:5f:1b:7c:2f:21:5e:09:38:fa:9e:1b:fb:
3b:91:08:70:30:9f:8f:97:39:c7:24:df:72:0b:1e:18:7e:2e:
6f:f6:eb:53:d0:bc:53:ad:64:0f:d9:36:58:76:85:b9:69:81:
19:52:03:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:09:55 2025 by rpki-client