Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
File: 9ghG8hxWqFE9McFV3RmRl6P_x8A.mft (raw, json)
Hash identifier: sBEU8vdgglcJqJWixINd4hzayUJ54SVz/pf7FGCjvdY=
Subject key identifier: 11:35:74:E6:8A:A3:D8:C8:16:70:B5:78:29:FE:85:03:73:3E:A5:D4
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 0197432F5F713B28AC5E2DF9FBCF76500353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
Manifest number: 1586
Signing time: Fri 06 Jun 2025 03:01:07 +0000
Manifest this update: Fri 06 Jun 2025 03:01:07 +0000
Manifest next update: Sat 07 Jun 2025 03:01:07 +0000
Files and hashes: 1: 094z1xKhD-fPImqcpq7FnS51L8I.roa (hash: QqZNaYuOPYVYXA7nnxP+E5LxcHL1hX5seeAAPJtn8rE=)
2: 5yZgLWjoqGWoHcvTB_31BRphqMg.roa (hash: mnmZiTADtsjplvnjg1DlrvtKGrz4jtZ2ePTtEqRNIiA=)
3: 98--VYzYQvmDhok_sN0s894_jjs.roa (hash: JLE5UUw9XB1alxl+jXRMMgX9sI3zDXH5yt96C0J6SNk=)
4: 9ghG8hxWqFE9McFV3RmRl6P_x8A.crl (hash: KX1LS5kdQmvYaOwu8/esD//0vPXDclI+rHGoWGJSA1U=)
5: S1r5hqr0H_eG0pYFEYET1oPJyrU.roa (hash: AL2mRYe3QSk0eHBtZxwwGn0QyvUm0r2qBAzoPe+jc5Y=)
6: tDQppW28D00yJpPN76o5br9V4uc.roa (hash: QeZm1TlTQEFmZaDRdvYJJMWOrlvPWUXQvrMdVOrCdWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:2f:5f:71:3b:28:ac:5e:2d:f9:fb:cf:76:50:03:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Jun 6 03:01:07 2025 GMT
Not After : Jun 7 03:01:07 2025 GMT
Subject: CN=113574e68aa3d8c81670b57829fe8503733ea5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2d:22:bc:94:c9:e9:43:65:f5:88:99:3f:15:
9f:d6:c9:d6:0a:f0:0f:41:ff:cc:f4:85:54:05:ed:
ba:ee:af:83:f2:20:09:02:c6:4e:18:29:9d:f2:75:
08:98:05:22:53:59:70:e0:fa:4a:3a:3c:2e:62:f9:
35:8d:29:fa:cb:24:b2:aa:57:45:23:57:b1:17:9f:
e6:b2:cf:3a:72:53:3e:84:71:c6:48:72:0f:ba:e2:
d3:37:32:e3:a1:db:6e:4a:ef:1c:ca:ba:c4:55:ee:
2d:fc:de:a2:04:0d:a8:af:19:a1:8c:2f:06:cc:85:
ce:74:01:e8:ad:a1:a0:8e:3d:e7:e6:6a:58:83:d7:
61:55:73:6a:01:f3:fe:41:33:f1:09:12:ee:3a:9d:
89:5a:92:46:48:97:ba:72:eb:48:e4:42:90:fe:19:
03:62:cb:a3:32:b5:4f:e9:cc:65:16:26:2a:49:2a:
48:08:ca:7f:15:f5:14:64:68:fc:8e:01:2c:45:e3:
01:04:0a:01:54:8c:a2:ee:9e:af:36:3e:c1:6f:c3:
c7:71:5a:f0:a1:1e:dd:44:f9:11:76:66:3d:e2:31:
f7:d3:1c:29:bd:c6:7d:0a:59:78:c0:92:83:a9:a6:
f6:e5:83:2a:6c:aa:7c:a8:89:5e:92:ec:a4:34:46:
af:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:35:74:E6:8A:A3:D8:C8:16:70:B5:78:29:FE:85:03:73:3E:A5:D4
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:bb:77:47:07:c0:17:6d:9e:0e:35:d1:72:e3:12:c2:02:5f:
64:62:95:b9:8a:95:4d:70:53:95:68:2d:43:39:2d:28:bc:9f:
ce:d4:18:33:c2:fc:fe:d3:0c:a0:c8:08:a4:bb:49:6c:18:9c:
da:75:2e:c9:e2:92:68:0d:3c:82:3e:f7:e9:4a:7d:fa:7f:b8:
58:06:de:79:5c:e0:2e:1a:bd:2a:c5:5f:47:5a:f0:12:66:e8:
7e:f8:40:da:d9:bd:4c:e3:7b:89:45:26:de:f9:d2:de:3e:2f:
aa:87:44:06:34:9e:d8:77:7c:9c:d3:4e:fd:6f:a2:7d:3d:8e:
e3:8d:ca:a1:9b:6d:6f:4e:39:d8:7b:f4:b4:34:bd:a9:ea:b6:
12:3d:7e:74:3b:8e:62:fc:4c:eb:4f:97:93:60:bf:a0:7e:32:
7b:8b:04:71:bc:c2:8a:3e:04:87:13:f0:00:51:b7:48:64:d0:
52:50:8f:94:cb:c2:c3:e2:f6:07:38:b0:1e:16:fa:a6:69:2b:
e8:50:1e:c5:c0:c3:59:85:ed:02:b2:b5:35:44:49:b7:33:25:
b1:15:a8:ad:24:1f:7c:95:2e:c4:06:ce:8f:c3:6d:76:5b:f9:
c3:39:57:ab:0e:45:52:e0:2e:c9:32:68:b5:04:91:16:dd:41:
f3:72:ac:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 10:58:29 2025 by rpki-client