Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
File: 9Is_DGqHwEW9z_q9kA24iSvnAuE.mft (raw, json)
Hash identifier: QahdF2zEEt0rZH1lJs2I1NuUTQaRADeDfFfQk4+z+qA=
Subject key identifier: 6A:42:F0:65:E6:04:64:E0:CD:79:4E:BC:1E:AA:5D:79:63:8F:B7:7C
Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
Certificate issuer: /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Certificate serial: 019750B3DBF3445EE9DD8ADDF2DAFDCC2D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
Manifest number: 1585
Signing time: Sun 08 Jun 2025 18:00:53 +0000
Manifest this update: Sun 08 Jun 2025 18:00:53 +0000
Manifest next update: Mon 09 Jun 2025 18:00:53 +0000
Files and hashes: 1: 9Is_DGqHwEW9z_q9kA24iSvnAuE.crl (hash: Dpcr0ewgf1b8n/HMSE3aMBmL5zifDwOlJq5xUOSpF/0=)
2: AMZNY2ioL1FdTxYpQ_5_vn5xae4.roa (hash: FA95yICxP5LnzLz5ZPaXdyIPM3T30+TR7VWXzTyf+X0=)
3: Hg9ZafaXQ8rLTSt-HMnDH0lT2yU.roa (hash: 0HTHXkqvlWJxm74CgwKZLUkDjsOUoGNMgHyD7nKaILk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:db:f3:44:5e:e9:dd:8a:dd:f2:da:fd:cc:2d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Validity
Not Before: Jun 8 18:00:53 2025 GMT
Not After : Jun 9 18:00:53 2025 GMT
Subject: CN=6a42f065e60464e0cd794ebc1eaa5d79638fb77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:df:ae:73:91:77:9a:df:f1:15:f1:76:8a:
8c:28:d1:37:57:6f:ce:17:61:35:74:4e:3d:c4:2a:
86:ff:c7:38:49:86:48:81:60:db:66:b0:6c:97:3e:
62:25:cb:b9:cc:a2:99:f7:51:7c:7e:38:8f:0e:5e:
f6:7f:5b:ab:e1:9b:1f:c3:ee:28:39:62:f0:5b:c5:
2d:51:7b:08:bc:72:4d:5b:f5:00:9f:5d:91:16:ff:
35:63:85:a4:25:6b:8e:c3:78:f6:1f:9c:ff:3c:54:
eb:2d:ff:61:62:52:38:18:fa:ff:27:dc:26:6e:79:
68:6b:97:fd:06:00:db:21:f3:4f:d8:1f:09:26:af:
f1:3e:4f:a7:8b:ca:d2:2c:84:45:ec:4b:75:3e:93:
b8:c3:9e:a0:02:ba:15:00:e8:45:80:ba:e8:ee:34:
47:f1:f9:7e:91:50:3f:76:e5:af:fd:b2:84:98:38:
fb:6c:b6:e5:04:05:18:c7:18:a4:27:f3:93:26:ca:
76:bd:a6:eb:bf:b5:99:4e:07:c1:fc:69:3b:12:b1:
02:17:81:c9:a6:b2:c1:ae:8f:87:20:3b:a3:ad:e0:
b5:64:63:6e:20:80:76:6c:bb:63:55:42:51:ed:1c:
0c:f2:95:46:05:c5:e6:3d:48:44:f1:5d:9a:2e:10:
c9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:42:F0:65:E6:04:64:E0:CD:79:4E:BC:1E:AA:5D:79:63:8F:B7:7C
X509v3 Authority Key Identifier:
keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:15:3e:8f:f3:ef:9a:1f:6d:73:09:2e:b8:5f:70:68:b8:2e:
60:fe:a4:b1:fd:ad:06:4e:63:b0:2b:ac:33:66:c3:87:61:64:
e1:63:5f:2a:86:69:b4:7c:54:38:3b:83:42:87:ac:d4:bb:73:
1a:43:97:34:65:4d:e4:43:89:03:1f:8d:5c:ea:a6:00:0a:3f:
6e:01:5d:3e:3b:c0:93:4a:32:4b:d1:03:7c:1b:d8:eb:27:76:
f7:6d:a4:21:26:c6:a3:72:c2:19:1d:9d:7b:84:d2:c7:2c:bd:
65:0c:e4:c5:b4:39:74:20:91:fc:a2:89:e0:5b:7f:2c:91:13:
81:c6:a8:a2:41:18:06:29:7b:36:0a:ea:02:df:1d:c1:c2:ad:
5f:a3:64:44:83:55:df:93:ed:af:d4:65:77:e6:fb:88:1f:cd:
d7:c6:f4:39:cc:c3:40:da:14:56:a0:9e:3a:ad:f9:99:40:d4:
f1:94:34:81:07:5c:e3:c8:b9:de:5d:d2:4d:04:92:9c:ba:fc:
12:81:43:02:4c:ce:2a:bc:b4:b3:63:76:b8:10:f3:2b:0e:ca:
c1:b7:93:18:83:5b:6e:44:f0:8d:4c:2c:0c:b9:5c:45:11:0c:
b5:40:39:08:fe:41:fa:25:b3:d7:b3:57:5c:59:26:09:8e:f8:
51:7f:6b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:40:27 2025 by rpki-client