Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
File: 9Fe8GTpZWUint6CWtxC7UmKDD0E.mft (raw, json)
Hash identifier: xwq+T2PaR132RG0wtWzEjLdF4YuZRuwJYGt/yobGon4=
Subject key identifier: D1:1D:31:D9:9F:CC:82:B1:46:B7:91:92:1A:31:9B:8B:29:9E:CE:1D
Authority key identifier: F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
Certificate issuer: /CN=f457bc193a595948a7b7a096b710bb5262830f41
Certificate serial: 01974D7BA912808F9E44EC64AF114BD18727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
Manifest number: 044D
Signing time: Sun 08 Jun 2025 03:00:39 +0000
Manifest this update: Sun 08 Jun 2025 03:00:39 +0000
Manifest next update: Mon 09 Jun 2025 03:00:39 +0000
Files and hashes: 1: 9Fe8GTpZWUint6CWtxC7UmKDD0E.crl (hash: 1SM2HqQKa5A4YtjukgTpSvyL3Ol17GKGp8K7ramCXcw=)
2: xnHt0Sid4zmp1F0aRhNqu7-Fkzo.roa (hash: YOstIt3g/6bqPmSn4Km52QkT6mGNeFzORgGZTgeX8Ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:a9:12:80:8f:9e:44:ec:64:af:11:4b:d1:87:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457bc193a595948a7b7a096b710bb5262830f41
Validity
Not Before: Jun 8 03:00:39 2025 GMT
Not After : Jun 9 03:00:39 2025 GMT
Subject: CN=d11d31d99fcc82b146b791921a319b8b299ece1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:24:7a:3a:70:db:c0:68:b2:9d:e7:a3:e6:
a7:97:df:0b:22:91:84:14:02:6c:eb:12:66:d0:0d:
28:1f:70:04:f9:b0:3c:25:43:e1:70:a7:f3:eb:95:
62:78:3b:9e:59:66:15:18:02:8c:00:84:70:1f:13:
c1:c9:6a:f8:8e:9a:66:4e:15:b3:6f:36:17:d1:b1:
25:a1:41:6e:48:dc:40:a8:65:98:4b:80:26:59:7c:
57:d2:3c:76:b0:42:7a:18:ce:79:f3:74:fe:53:e7:
f2:49:a4:73:78:87:a9:6e:82:87:e7:65:ce:42:9f:
ad:5a:f5:ed:25:2c:bf:6d:e8:bd:d6:d5:8a:83:fd:
43:25:f3:ee:9e:36:52:72:08:67:9a:36:fa:3b:fc:
42:e6:aa:47:48:15:26:0f:4f:fb:2a:18:89:14:b8:
84:0d:54:96:2b:36:a1:7b:be:cf:45:e5:ef:aa:51:
cc:21:c9:13:e5:fe:ff:a8:ea:69:6b:a0:b4:46:c4:
c8:9c:84:2f:36:35:0c:7b:a6:dc:9d:07:68:06:3c:
77:f3:3d:94:0b:79:51:eb:49:3f:ee:84:5c:17:db:
65:32:c1:de:02:e1:cb:04:a4:28:9a:02:f4:02:cd:
93:e5:48:c2:d8:c3:fe:25:9a:95:6a:61:79:e9:9b:
f4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1D:31:D9:9F:CC:82:B1:46:B7:91:92:1A:31:9B:8B:29:9E:CE:1D
X509v3 Authority Key Identifier:
keyid:F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:81:0d:0e:1d:43:ba:3b:46:0c:d1:b4:ec:9b:13:e3:04:93:
3a:55:c6:cc:5d:74:23:1e:f9:4a:c2:15:c9:20:9c:e9:4c:1a:
10:6f:07:5f:18:ef:ae:93:6d:53:cb:1d:8d:f8:35:09:1b:98:
48:1f:c2:4a:85:31:83:9e:71:d9:bb:a3:5e:b4:e1:75:b9:b0:
26:34:63:3e:97:13:c3:73:7c:32:e3:ee:98:bf:26:b9:fc:e4:
33:b4:93:17:47:ac:5c:7b:0e:4d:a2:08:40:4a:d3:99:ea:e4:
df:07:60:a8:61:28:a5:4f:e6:f5:be:14:da:a6:9d:04:a9:6a:
c6:9d:b0:2a:88:b1:df:65:04:fa:32:1a:9d:b8:97:10:3a:f5:
30:0c:f7:c0:c3:84:fd:a0:0c:17:36:f8:9a:75:1c:32:ec:21:
4e:68:5d:bb:7f:6c:46:65:ef:ef:f5:8d:7b:b5:94:2d:ef:da:
3d:44:b4:ee:fb:53:b1:ea:98:3e:8e:89:f4:91:9c:77:60:69:
9c:5b:b6:48:d6:05:57:a5:63:31:ac:fe:ab:08:c8:33:3d:c7:
1c:e9:4e:12:1a:80:b1:cd:65:45:08:50:b6:b5:9d:32:ba:6f:
5a:8b:07:52:a3:7b:5c:96:38:39:d6:15:05:fe:58:59:f3:99:
17:76:0e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:28:34 2025 by rpki-client