Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier: BYjkHO5ZN9Rjce062J9w0FkBQA3M3iPwyMGgBAMWd8g=
Subject key identifier: 17:B9:BA:32:C7:F8:7C:19:83:CD:95:22:D8:28:0E:F9:A5:B2:2C:01
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 019748C356C9AC624ED046D8DD827E71E0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number: 150C
Signing time: Sat 07 Jun 2025 05:00:50 +0000
Manifest this update: Sat 07 Jun 2025 05:00:50 +0000
Manifest next update: Sun 08 Jun 2025 05:00:50 +0000
Files and hashes: 1: 7Q18JYmAuxaMa6IHufbofG2Nif4.roa (hash: SgEEylWwu8UHfA3f6YmbRxIxeIe/WWwb7mO+pnXONBI=)
2: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: r+j5J2ho2KoXtPSgrEdm1NQv4EyaFhX/+3/YeKMDZec=)
3: zzW0oiISqz8GtZ1LDC69YbNiON4.roa (hash: qDXsu9oGWoasH8gnG9BaDFXmdIAxeKxrhPwrD6gYHG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:56:c9:ac:62:4e:d0:46:d8:dd:82:7e:71:e0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Jun 7 05:00:50 2025 GMT
Not After : Jun 8 05:00:50 2025 GMT
Subject: CN=17b9ba32c7f87c1983cd9522d8280ef9a5b22c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3c:b2:04:c8:21:bf:c9:45:63:f5:0d:62:63:
18:a9:20:fe:86:f7:69:dd:b2:44:68:52:a7:6b:c1:
84:72:f2:82:bd:8f:d6:b3:9a:e4:6c:56:e1:04:81:
a0:7d:cf:9b:f9:74:51:07:32:ab:d6:79:c3:91:68:
93:f5:52:d1:43:6c:8f:9e:54:c5:c6:b5:ef:cf:e4:
be:48:1e:f6:2f:df:fc:68:6e:37:8e:e8:4e:89:4f:
e4:2f:a4:73:43:57:2d:cf:fd:09:63:65:e3:a1:60:
72:dd:a3:d4:56:9c:a3:7b:3f:af:e9:1e:56:3b:6e:
c0:3d:6a:fa:3e:a4:69:67:76:1f:c4:9b:33:dc:88:
fb:a9:1b:57:18:48:7e:9f:18:a8:0b:54:d5:13:b0:
70:4c:53:07:d0:06:c7:6b:b2:90:47:ff:25:25:56:
a4:48:42:78:aa:76:35:8d:88:cc:43:d9:80:42:39:
e7:bb:f6:c5:e2:ac:e5:6f:7e:5a:09:82:d4:12:18:
82:c8:aa:91:6b:8f:ac:5b:21:5e:ca:b8:92:39:38:
70:f8:29:9b:8a:15:39:b2:a5:a1:48:fe:46:3f:23:
89:70:72:06:0f:70:34:fa:9c:da:00:36:cc:95:03:
a2:8b:f3:4a:13:2d:dc:10:0a:71:a7:16:6f:1d:ab:
5a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B9:BA:32:C7:F8:7C:19:83:CD:95:22:D8:28:0E:F9:A5:B2:2C:01
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ab:62:eb:ba:7e:a5:ea:39:1d:bc:2a:8c:ea:f4:55:4f:a0:
49:1e:f5:f7:45:66:76:f2:d8:c9:47:8f:4f:4f:51:9c:95:1f:
ab:5d:f5:d1:98:29:27:d1:86:25:c0:cf:1a:ff:b3:dd:12:44:
fc:99:2d:07:33:8e:f4:39:32:0f:90:29:d8:4f:39:50:f3:7e:
f7:e7:c0:c0:bb:c2:72:1d:e1:48:ca:c4:e6:e0:05:fd:54:76:
35:b0:2d:bf:40:f7:e7:87:b8:cc:57:bf:21:6c:43:9b:f5:10:
93:9a:b9:e4:79:d3:a2:34:e5:04:0a:ac:b2:51:cd:94:35:7b:
39:3e:9e:ce:c7:7d:d5:7d:86:ac:34:94:60:aa:34:36:04:4d:
f2:83:fe:d3:7d:c0:55:7f:f2:96:a3:ef:57:e1:1b:8a:f0:fa:
14:a5:f4:c1:14:4c:ab:47:e9:b8:f3:73:9a:1e:de:03:36:a8:
99:3c:7b:8e:58:cc:9c:49:91:f7:57:31:d7:a2:bd:57:fa:00:
7c:6e:09:e1:94:bf:c8:6f:16:2e:cc:e3:a4:3c:27:9c:61:b3:
33:cc:ac:fc:5a:19:e6:1b:2a:4d:d3:8c:19:97:80:7e:69:11:
1c:39:fb:57:c4:ad:d4:f9:2d:bc:6d:1c:82:ec:1d:62:5e:9c:
97:56:76:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:27:56 2025 by rpki-client