Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.mft
File: m7wD9sWihPoA27WqYJxRW3xYmWk.mft (raw, json)
Hash identifier: i/sVOnYqJKjQ1JTBMaf52DFkp+QsY4Wb0Qrlcs2gxG0=
Subject key identifier: D9:1A:41:AF:C2:88:16:31:69:0E:32:E4:C1:1B:DB:AC:B3:97:E7:FD
Authority key identifier: 9B:BC:03:F6:C5:A2:84:FA:00:DB:B5:AA:60:9C:51:5B:7C:58:99:69
Certificate issuer: /CN=9bbc03f6c5a284fa00dbb5aa609c515b7c589969
Certificate serial: 0197469D9E7D6E7476887483A04AF52016E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.mft
Manifest number: 0D8D
Signing time: Fri 06 Jun 2025 19:00:24 +0000
Manifest this update: Fri 06 Jun 2025 19:00:24 +0000
Manifest next update: Sat 07 Jun 2025 19:00:24 +0000
Files and hashes: 1: 3sPU2X2zzDRvsMfK94CkKzBQsU4.roa (hash: R00sfB2denxS/OHNxg4q8pRCPm0SOYbizoeUhKRjq4k=)
2: m7wD9sWihPoA27WqYJxRW3xYmWk.crl (hash: Cuhg9jAsB0EZzWiJRRFapkF2FDaoLtKvgV4Kry8K2uY=)
3: opItG7iycfoqyIbeJkA-iBhJGY4.roa (hash: 3K1U6liu+Oy3aeOJx85XxOBGN8iAYZ7rHauSs3gu8HQ=)
4: p85mwjNpw2DPiEwmt3DneLuJKMU.roa (hash: 9txQiYeTXR7ltBlHFbZo2A2VUj0ra3QUmGnLHYSLM/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:9e:7d:6e:74:76:88:74:83:a0:4a:f5:20:16:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc03f6c5a284fa00dbb5aa609c515b7c589969
Validity
Not Before: Jun 6 19:00:24 2025 GMT
Not After : Jun 7 19:00:24 2025 GMT
Subject: CN=d91a41afc2881631690e32e4c11bdbacb397e7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b7:ce:4f:92:70:0b:b4:65:28:e9:39:80:aa:
10:4b:b0:23:d8:26:45:fd:e3:ca:f3:18:8a:db:1a:
8a:8d:a6:cc:83:c0:2a:8d:66:70:67:8a:7c:23:54:
7d:3c:16:d7:57:68:83:53:a7:dd:31:4e:fc:a4:79:
5f:7e:3d:97:c7:08:0b:06:1f:4d:f5:a6:f2:ec:e1:
de:b2:7a:80:ea:2e:8b:d3:11:f8:a6:71:44:e5:20:
4a:ff:db:9b:40:5b:d5:cf:4c:8f:0a:03:1e:a7:d4:
7f:45:ce:1a:4d:9e:56:8b:60:79:f6:3a:84:81:a9:
1a:67:32:07:9a:eb:9b:08:00:a5:56:39:02:f5:e9:
9d:c8:ea:9c:92:6c:f3:9b:39:74:e7:cf:ad:0f:7d:
14:1f:36:87:ac:94:58:83:ce:28:ed:da:a1:57:e4:
a7:5f:89:b3:f5:b2:35:8f:09:14:39:c0:31:28:02:
40:ec:0d:27:40:8b:b7:d6:9f:57:4f:6e:3e:d7:cd:
28:5e:28:f6:fa:a9:64:66:01:b8:12:d8:79:f9:82:
35:66:b1:6f:d7:ba:a6:a1:ff:d4:d0:7e:1b:22:be:
c6:b8:ed:7c:53:39:a8:fb:f5:d7:52:54:a9:7c:02:
da:2f:73:60:0c:d3:b9:b2:13:f7:70:23:23:c1:fe:
a8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1A:41:AF:C2:88:16:31:69:0E:32:E4:C1:1B:DB:AC:B3:97:E7:FD
X509v3 Authority Key Identifier:
keyid:9B:BC:03:F6:C5:A2:84:FA:00:DB:B5:AA:60:9C:51:5B:7C:58:99:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:68:3c:3e:72:7f:8c:9c:f6:2c:57:18:16:b8:ce:30:0e:27:
b9:75:02:49:81:03:73:aa:f9:4d:78:99:5f:29:77:57:60:a3:
b5:49:5b:60:b4:3b:fb:61:1c:87:12:da:20:31:54:05:f2:ff:
a3:a5:40:a5:cd:52:e4:ff:6e:fe:9b:0c:8c:da:16:35:b0:6d:
09:58:b9:23:f3:2e:5c:57:24:c3:34:1e:2e:e6:e5:9b:80:4c:
5d:5c:20:3f:e8:7a:56:1b:9b:e7:74:c9:5f:a7:40:99:92:4f:
bb:84:a1:47:8b:ef:19:14:3d:80:53:88:b6:9c:3e:f7:b4:77:
5a:1d:ef:33:b2:53:bf:24:43:88:ad:a6:1a:35:c7:54:29:0a:
f6:62:b4:e1:32:bf:21:4b:b2:d1:c8:ac:08:fd:77:27:67:24:
34:4d:03:9b:d7:62:6f:fd:b9:59:a8:79:59:8b:70:b0:bb:9a:
a9:f7:1e:4e:e8:21:2b:94:bd:6c:87:75:7f:e1:4c:1d:96:1b:
81:8e:8c:70:7b:47:55:e2:02:cb:86:e9:dc:b3:a4:7c:19:ab:
b3:4e:ec:e0:78:7b:ee:88:ff:17:83:7b:87:a7:6a:3a:ef:e5:
ad:ca:d9:78:3c:c7:96:12:b9:6b:6e:83:99:89:d6:5e:13:9d:
89:c3:01:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:24:30 2025 by rpki-client