
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json)
Hash identifier: WQkILjvJi1K9G5IXE5zE7sU0apH+VShxxPYDipeDYEo=
Subject key identifier: 15:F0:B3:69:53:D0:1B:33:2C:B9:DF:D4:52:2C:17:EE:8F:B1:01:BB
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 019730BB47E2FBE3ED3F83639CA2AF1F3E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
Manifest number: 1584
Signing time: Mon 02 Jun 2025 13:01:09 +0000
Manifest this update: Mon 02 Jun 2025 13:01:09 +0000
Manifest next update: Tue 03 Jun 2025 13:01:09 +0000
Files and hashes: 1: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: Kq2QSgIKOtvmgSgC2qmBVQxe87X1tfd5oaZ/wSJoe5c=)
2: DY7axdNUahmM11yaDw51VfAp67s.roa (hash: bUYyC3SF16Sa424fYOC0qhaN4vyFKANSqCH+D1gEZQg=)
3: HEoZmTdVM-DeFe9X3PrPHHx8iEk.roa (hash: 9udpTWaNqTHQ+GFwYOitrLQw23wqjYK6MW1sHvnpqd4=)
4: PrNUxz0yba76t8wY55c1zKXm_Oo.roa (hash: m1KBoMWL6Rj5bP0aLVgjFWVkvzcAuAcBVIFoqutIMt8=)
5: iO7A1owMbqCMA0Lg3ovjgVWh5Dg.roa (hash: nx9vqvzmG0weAt/3Wd6gNUhHUSRbH2clt0yaQ7fWpF4=)
6: oAbqR3kG7LoiZXxF1UQ_LftT7BQ.roa (hash: 5h2TCAddmyCEmv2EclM4C4a677ny0YxlmBdSG7ml6N4=)
7: vmadOBoOk6niwocbLQBsll2qRrw.roa (hash: zQDs58AuBVhnIjhnpftladMye3nflU9pDFBdocMEldo=)
8: z2wQNkzDkZfaAKh_ssLZfxbhYgc.roa (hash: ccA776YRey2wE5rLtAhOmx43QdG5Twqc3fRZfQPAbDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:30:bb:47:e2:fb:e3:ed:3f:83:63:9c:a2:af:1f:3e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Jun 2 13:01:09 2025 GMT
Not After : Jun 3 13:01:09 2025 GMT
Subject: CN=15f0b36953d01b332cb9dfd4522c17ee8fb101bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fc:0b:66:73:10:b4:62:70:54:3a:20:a0:0b:
e6:94:c7:9c:1b:fe:a8:ab:b3:4e:a4:8c:e0:82:0b:
83:08:a2:26:8e:2a:24:04:ec:90:77:d2:58:1d:98:
c3:7d:ed:f2:a6:1b:f1:40:1f:29:54:d6:e2:81:b1:
cd:6c:05:75:78:d7:92:72:3f:79:f0:aa:b4:6f:61:
b8:8f:7d:92:62:29:5c:5c:d4:0b:4c:71:65:bb:97:
05:c4:ed:c1:09:bc:e8:51:97:ff:42:c8:15:fd:36:
fc:5b:7e:3a:31:fa:13:e3:d0:a4:be:81:6d:c5:24:
a1:c5:32:9e:5a:aa:d6:f3:93:e2:39:1b:7f:83:a9:
c3:bd:d6:57:3a:45:19:98:30:11:d7:2f:59:08:36:
33:f6:05:c2:3a:2b:f2:d0:3c:9d:0c:a8:77:78:6c:
e1:a1:77:76:2c:79:06:f0:8e:26:78:1e:2d:5a:b3:
4f:b8:de:d6:34:a0:00:f9:41:59:d6:bc:ea:95:07:
d7:cc:b1:65:66:fd:b2:f6:54:e9:46:a2:df:fd:5f:
10:5a:61:77:c8:80:44:89:e7:85:6c:38:d8:c1:eb:
16:73:7a:a4:46:1e:b5:6b:b1:7f:7d:97:4a:51:f9:
7b:8a:58:82:e3:87:0c:8b:5e:0f:dd:0b:91:7c:c6:
e9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F0:B3:69:53:D0:1B:33:2C:B9:DF:D4:52:2C:17:EE:8F:B1:01:BB
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d7:28:82:19:e4:b8:b9:c5:19:67:6a:16:b3:bc:08:af:84:
5d:47:9b:63:d5:29:0e:b0:b6:fb:7b:cb:0f:1b:05:0e:15:94:
60:aa:29:d2:1a:a0:89:59:9b:2c:19:b6:60:cf:ab:62:a8:85:
87:be:89:1b:25:0a:4d:15:77:4e:c5:30:a8:3c:6f:6e:13:bf:
d3:7b:82:11:9d:1b:f8:bd:29:75:fa:57:fb:a2:d1:d4:46:24:
a2:0c:9d:7f:6f:53:42:a9:01:07:83:e4:ec:8e:ca:e8:cb:41:
f8:d2:ff:54:af:78:63:f7:33:31:a9:da:47:c9:d7:2f:fa:7a:
27:f1:d9:bb:9c:eb:6d:33:77:b3:3d:6b:3b:cd:2d:b1:53:ad:
cd:a9:db:72:0c:b0:d2:a9:ae:8e:17:61:c1:fe:be:1d:58:23:
07:4f:c9:16:ff:9c:11:b1:6f:f3:5b:c1:55:d9:0f:f5:0f:26:
1e:c3:c5:d9:e6:28:4d:9f:02:08:53:3c:50:8d:5c:5f:43:49:
dd:af:47:3b:7b:b5:8d:ea:73:49:06:a0:96:05:15:06:a2:99:
d5:31:ba:cd:65:f3:79:01:70:b3:51:ae:c5:2c:3d:05:6e:38:
bb:2f:8b:72:63:9a:f9:29:cb:13:09:a0:50:e7:62:7d:d3:7c:
8d:d3:60:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:58:12 2025 by rpki-client