Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
File: m9upUpCphaaXdj0wq0L5w3hAeLI.mft (raw, json)
Hash identifier: a5aahraG4niIZ2sHaV02REKOyVFsu3M9Uu3IeZ2nRnc=
Subject key identifier: A3:FB:57:3E:75:4D:03:05:A3:6F:D6:B8:5E:02:A0:DD:BE:CA:5F:1B
Authority key identifier: 9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
Certificate issuer: /CN=9bdba95290a985a697763d30ab42f9c3784078b2
Certificate serial: 019748FA713E5878A3B6BC32BA6D53512F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
Manifest number: 0BF7
Signing time: Sat 07 Jun 2025 06:01:01 +0000
Manifest this update: Sat 07 Jun 2025 06:01:01 +0000
Manifest next update: Sun 08 Jun 2025 06:01:01 +0000
Files and hashes: 1: CYD_Z2qF6mHZ92tY0ftxYfveSAQ.roa (hash: IVgjWp28wTnlbtVuEQ1FT4HkeEGAz5yGW6fM8IpM3RI=)
2: m9upUpCphaaXdj0wq0L5w3hAeLI.crl (hash: nyx4wKDBcsGUS8nhVIQTqAku11owrywLeSptQpgeRP4=)
3: tLilW5BDEJTEzIEDh8KmIyaiPZU.roa (hash: vFC4JGd2bQPNjS7TqFQa5G/kgv43UH1kGodWdHda2yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:71:3e:58:78:a3:b6:bc:32:ba:6d:53:51:2f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdba95290a985a697763d30ab42f9c3784078b2
Validity
Not Before: Jun 7 06:01:01 2025 GMT
Not After : Jun 8 06:01:01 2025 GMT
Subject: CN=a3fb573e754d0305a36fd6b85e02a0ddbeca5f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:23:e3:26:f3:50:93:04:c7:8b:6a:82:1c:
8a:f0:9f:67:ab:4d:de:c0:78:f9:7f:eb:eb:93:c9:
1a:3f:32:6d:92:46:40:94:7d:db:e3:77:8d:c8:ba:
1c:6c:d3:0c:6c:f3:48:15:f0:11:ea:55:9c:db:1c:
14:56:46:d3:f6:26:8f:53:a1:22:8f:3a:5a:6c:f7:
4b:03:8c:77:0a:4a:98:4b:1f:b0:d6:15:17:03:2a:
a7:2f:02:10:a8:7d:1b:7c:d4:54:42:23:05:10:c8:
90:52:7e:b4:f1:df:52:10:c9:69:28:55:45:49:a8:
fc:3f:07:44:1c:89:60:75:70:41:ff:5c:96:70:b8:
3f:ff:1a:72:4f:07:e9:24:70:8b:2e:cd:66:7c:b9:
67:3d:33:7d:a2:fc:ae:e8:ad:c1:4c:24:c7:0b:c8:
66:bf:fb:4a:5b:19:7f:63:9d:0c:f8:c3:97:fe:0f:
04:e6:a7:eb:8f:32:5b:39:81:23:8c:be:5f:5a:2c:
c6:40:1a:1c:0f:1e:63:ab:cd:c9:ee:da:50:c3:43:
7d:8b:30:fe:46:ea:c2:96:09:f3:eb:d8:b6:6c:7e:
a2:f6:0f:c1:7e:72:6a:ed:94:4d:95:0f:9c:d7:04:
13:e4:ef:99:a1:f1:9d:08:89:48:9c:c1:4e:b7:5c:
b0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FB:57:3E:75:4D:03:05:A3:6F:D6:B8:5E:02:A0:DD:BE:CA:5F:1B
X509v3 Authority Key Identifier:
keyid:9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c0:81:16:0a:50:02:e7:6e:d2:8a:2c:2f:8b:fc:15:03:e2:
ae:03:7d:6c:71:93:88:49:29:d1:2e:21:fe:11:aa:4e:74:6d:
de:50:58:33:ae:36:e8:aa:95:22:22:53:fb:72:7a:51:b0:83:
f1:11:9d:9c:ef:2c:32:db:0e:43:e9:e2:1d:2c:f8:b8:40:b3:
18:58:bb:34:34:2f:6f:50:83:29:66:c0:64:31:55:07:f6:36:
e9:61:2f:e6:97:aa:de:aa:08:21:2b:cd:03:f3:08:26:93:87:
6e:61:77:8b:13:4c:fe:57:7e:37:b4:c0:9d:1d:ad:c1:7c:75:
79:58:9b:6b:fa:ea:48:37:30:27:1b:0e:74:7d:86:a7:9f:96:
96:15:ab:89:05:9b:fc:f6:5b:08:1f:ff:8d:31:fc:42:a0:aa:
a8:17:45:f2:8a:80:e3:2d:41:40:66:d9:08:ff:88:00:50:35:
56:58:26:14:ab:03:15:42:d7:2f:bf:b2:83:87:4f:91:66:b0:
2b:46:84:31:46:42:3c:b6:4f:1a:77:a6:9b:43:40:cc:f9:ec:
cd:2b:1b:30:22:9c:82:dd:e2:40:42:7f:88:87:16:fe:54:4d:
54:52:a8:3b:28:9c:ca:3a:dd:b5:6f:7b:5b:16:ae:e9:10:23:
e9:ac:c9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:18:26 2025 by rpki-client