Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: /ZaZO8/aGvnEqdukEe9+Lbn0Ou8weRuWo+jJ1GgJOV8=
Subject key identifier: 47:9B:47:EF:CB:ED:C5:58:93:1B:B3:D2:E4:1D:65:17:03:12:FF:4D
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 01974C6908DC902A7235FCD96B3595DF440E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 06F9
Signing time: Sat 07 Jun 2025 22:00:41 +0000
Manifest this update: Sat 07 Jun 2025 22:00:41 +0000
Manifest next update: Sun 08 Jun 2025 22:00:41 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: TdIAVyfRvMkK10UI7Rwe6VJIChhM5cm+UP8nplxD2ZQ=)
2: UDIr7Vq2PCUxH-_0XwBbpbKATWw.roa (hash: UYUs+F/DqN2VeFPscjP3XMb/LrOdKx6NTNq37FV037I=)
3: u0FRx2j9PY9XanBbcgTrVe_Co_s.roa (hash: 1340NaWcsmaESfpzP0gVpyoyLiK505bktgSP6n8xPII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:08:dc:90:2a:72:35:fc:d9:6b:35:95:df:44:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Jun 7 22:00:41 2025 GMT
Not After : Jun 8 22:00:41 2025 GMT
Subject: CN=479b47efcbedc558931bb3d2e41d65170312ff4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:7a:25:0c:6a:e1:30:4c:9a:c3:8a:d2:70:
6a:a6:19:c9:e3:11:85:0a:29:b3:9d:f9:25:79:f2:
0c:81:46:73:19:9a:21:5f:3f:a4:0a:d4:bb:3f:6b:
65:3e:95:75:51:38:cd:fa:ce:0f:10:93:73:79:c4:
8b:ed:68:c2:05:8d:35:62:9d:c3:2e:03:6a:2f:b4:
0e:25:98:5f:8b:2c:66:0f:46:7e:f7:94:74:9e:19:
fe:89:47:58:f5:48:be:36:9d:5b:cd:0e:62:d3:9e:
25:64:b1:18:02:4d:d0:7c:2b:0f:71:b3:36:45:9f:
48:48:c9:f0:b6:87:54:1c:91:0a:52:bf:bc:0b:90:
7c:d1:3d:63:18:9d:02:04:24:cd:cc:b0:4c:62:95:
45:13:90:d7:0d:ba:44:86:9c:4c:54:e3:22:15:67:
da:8f:e6:64:a9:5d:01:8f:36:fe:b9:9b:1d:91:60:
d6:b3:c2:0e:f6:13:10:24:0d:e5:cc:ab:5c:c7:09:
cc:f2:74:89:c8:1f:50:2c:b6:9e:a4:6e:f4:bb:56:
5a:35:6a:61:f3:7e:b0:cd:5a:db:78:14:9e:3a:e0:
7e:da:41:0e:4b:bd:20:0a:33:c1:5d:39:88:9f:52:
ac:73:2f:d8:9e:60:d8:6d:cc:85:f8:48:f0:ef:cd:
e1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9B:47:EF:CB:ED:C5:58:93:1B:B3:D2:E4:1D:65:17:03:12:FF:4D
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:60:bd:c4:74:ea:62:09:d6:31:00:fa:05:d3:ea:01:bc:ac:
f2:04:92:5c:a7:ca:5e:67:47:b0:ee:a9:f1:21:72:fb:55:97:
03:3b:de:02:dc:a2:8a:c7:7b:bf:6f:05:eb:a7:ba:f2:74:dc:
ca:ba:ce:0c:79:31:09:b3:57:14:4f:af:4c:a3:b4:25:24:56:
ee:c4:22:b4:97:d9:f2:7c:df:15:e0:53:1a:c7:59:37:c0:60:
61:f2:71:32:d4:23:27:de:d0:94:9a:a1:b5:b7:0e:af:8a:2e:
2b:cd:8b:55:5f:9d:4b:84:4e:c0:f5:77:4e:2c:a2:5a:15:bf:
64:88:f3:07:04:af:92:46:6f:d3:c4:07:f5:d8:05:63:c1:44:
fe:a7:0c:fa:68:df:ea:06:cd:04:58:64:e5:42:7b:a2:d6:5d:
22:dc:26:ee:f9:f9:cc:0f:2a:9d:42:b1:80:52:d9:ad:db:2f:
59:40:91:5e:50:ab:b0:91:66:8b:37:07:a7:b8:a8:a4:7b:fd:
bd:23:db:36:0f:57:c9:a4:a2:e8:6d:e9:55:50:2c:26:cd:fe:
4f:40:3f:d3:bc:e7:26:fe:74:ad:7c:16:a5:7b:46:59:cb:76:
2f:87:31:e1:1f:b5:ef:e1:ee:e9:5d:66:8a:fe:d2:72:ae:e9:
3f:ba:29:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:24:52 2025 by rpki-client