Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
File: 9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft (raw, json)
Hash identifier: HrpJBAe4Um904jAMdBcHskF4/cU7t3bWApGswt51j6s=
Subject key identifier: FE:05:70:3C:C8:9F:4B:24:07:63:8D:B8:76:69:D9:C7:A3:DF:05:FD
Authority key identifier: F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1
Certificate issuer: /CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
Certificate serial: 01974A43B31B1D3BADACD6150BAEA4F652C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
Manifest number: 1291
Signing time: Sat 07 Jun 2025 12:00:40 +0000
Manifest this update: Sat 07 Jun 2025 12:00:40 +0000
Manifest next update: Sun 08 Jun 2025 12:00:40 +0000
Files and hashes: 1: 9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl (hash: Sc2XNQeVaEojP9NFtAvA+lJbYZQ020lvCjpzxgxeJkg=)
2: aDwAS1LQt-dxkqhRRrd8pQDVwd4.roa (hash: duXpBH3mnr8j/KJuHRzuQfhllP9IGUW8jdVpYb4QHpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:b3:1b:1d:3b:ad:ac:d6:15:0b:ae:a4:f6:52:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
Validity
Not Before: Jun 7 12:00:40 2025 GMT
Not After : Jun 8 12:00:40 2025 GMT
Subject: CN=fe05703cc89f4b2407638db87669d9c7a3df05fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:19:95:02:66:e8:7e:0e:6f:27:66:3b:8a:29:
d4:4f:58:22:5a:c0:23:81:16:d8:92:a9:f2:0d:79:
76:26:ad:b8:07:db:4a:f3:23:da:82:c0:33:dd:de:
f2:7f:b9:a8:5d:0c:16:99:3a:58:91:bb:1d:83:d1:
77:4c:55:e9:19:fd:9c:4e:18:f6:a0:57:12:f6:ba:
2d:a5:ba:62:81:62:1d:66:37:8b:8a:27:fb:58:a2:
ef:75:00:3e:3f:e0:a7:b2:84:ac:2d:9e:42:7a:05:
ed:0c:db:77:38:f8:56:57:d8:34:dd:80:1b:44:5d:
05:9c:05:66:89:fa:3a:2b:10:03:24:1a:fa:db:67:
9d:69:49:eb:03:6b:76:cf:4b:0f:0c:e6:87:be:48:
ac:a6:49:32:9d:3e:b2:5a:b5:da:a0:bc:e2:34:db:
a0:6f:af:66:bd:c5:31:9d:85:7d:72:af:9c:9e:09:
61:3c:f0:61:12:a3:c1:c0:b7:d5:d6:ea:16:00:94:
db:7e:32:2f:bc:91:9c:55:eb:af:a3:9a:ec:1c:66:
6e:0b:87:c1:52:d3:6e:b5:ff:e9:b9:dc:06:58:a5:
c9:d0:d8:78:e9:0b:33:ae:d6:69:ba:31:a2:76:c3:
9c:07:6c:ea:16:6c:9a:d5:b7:eb:a4:de:42:5a:ce:
34:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:05:70:3C:C8:9F:4B:24:07:63:8D:B8:76:69:D9:C7:A3:DF:05:FD
X509v3 Authority Key Identifier:
keyid:F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d3:51:78:c9:0b:3a:2e:4e:2d:57:6c:ed:f8:ca:7f:3f:a7:
1d:47:f8:ac:05:a6:b4:74:c4:80:da:3d:22:2a:bd:1c:81:96:
fa:01:e4:fe:e8:5c:0c:89:9c:ac:55:f7:82:ff:0c:cd:27:0e:
1a:48:4a:1b:d3:40:2a:b6:9b:e8:fc:b0:36:07:97:57:e4:6d:
ee:2f:b1:6f:c0:c5:54:c4:a8:b8:84:b3:4f:ef:1c:ce:db:da:
0b:a0:e9:a8:4c:30:1e:21:f3:45:78:de:48:78:d3:df:b1:96:
92:94:a2:f8:ad:13:ea:0a:f9:c7:3d:16:ad:0e:10:f3:0d:d1:
00:7b:ac:96:8b:3c:1d:24:8b:12:db:c2:33:b7:21:d4:25:0b:
ab:36:73:98:92:9a:b5:77:7f:57:8f:c1:2e:67:c0:bb:e1:82:
0b:09:f7:89:05:0b:d9:00:65:5d:f1:28:12:3a:a0:66:1d:f8:
c7:41:62:29:84:bf:bc:74:71:8f:d0:1b:ef:10:58:5c:29:b0:
55:54:dd:25:d4:8a:54:b7:12:d8:5c:bc:72:32:d3:f7:ca:59:
69:de:a2:a6:1a:d5:bf:3f:65:fa:7a:38:85:34:2f:7b:a9:3f:
08:89:62:da:29:00:c3:d0:34:be:c4:b6:c8:2a:18:7d:a6:d8:
a4:f8:be:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:25:03 2025 by rpki-client