Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
File: 9naIfyLs2o0HSBWgvPkfr4GUKr0.mft (raw, json)
Hash identifier: lgszj7dslT4ovXwS+a2bokJFvYeDVECyjT/WZJUigfU=
Subject key identifier: 16:29:0E:11:8C:C5:E7:3D:E9:7D:04:B0:F0:12:E4:71:5B:CC:5C:A1
Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
Certificate issuer: /CN=f676887f22ecda8d074815a0bcf91faf81942abd
Certificate serial: 0197703EDDA43D3AB0E0E06F473939B0A10C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
Manifest number: 085B
Signing time: Sat 14 Jun 2025 21:00:57 +0000
Manifest this update: Sat 14 Jun 2025 21:00:57 +0000
Manifest next update: Sun 15 Jun 2025 21:00:57 +0000
Files and hashes: 1: 1--aJOHbG2HarYQRIFHME9kGdrI8.roa (hash: e0PFqEIF1I8KQrFh+AG+JLWzJuU3cKKiEgrK5TdCBkw=)
2: 9naIfyLs2o0HSBWgvPkfr4GUKr0.crl (hash: 14C1dc/Uyq1oSPbYiN1KsBuv0qwVH87yZT7fYUf5im4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:dd:a4:3d:3a:b0:e0:e0:6f:47:39:39:b0:a1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd
Validity
Not Before: Jun 14 21:00:57 2025 GMT
Not After : Jun 15 21:00:57 2025 GMT
Subject: CN=16290e118cc5e73de97d04b0f012e4715bcc5ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:d7:98:d1:87:af:1e:fc:93:1e:db:3c:be:
86:40:e5:4a:d7:45:5f:16:1b:4c:b0:78:e2:d3:4a:
e3:f2:a4:e1:79:0b:9f:5b:76:c5:62:f0:65:e0:e6:
0e:21:c7:f7:62:31:91:a0:67:a0:fa:65:10:65:86:
d9:33:66:09:f1:ab:02:d4:2d:42:1a:c5:19:7f:38:
e8:90:d3:42:c1:7a:77:41:3e:fb:a2:b8:cb:87:d7:
5c:ae:ce:4c:0c:7e:c6:57:83:86:b2:ad:f5:38:b6:
31:fd:6d:cd:db:98:9e:b6:4d:f3:f0:5d:d0:c2:3b:
7a:8d:b7:bc:a9:ae:f7:6d:58:40:e6:e5:57:9c:fc:
19:e2:74:36:57:82:c6:c4:63:9a:00:a4:30:df:ff:
a5:ef:e0:ae:18:fe:97:6e:17:86:1f:5f:96:8b:b6:
5b:42:a2:c5:d5:a2:f8:01:e0:94:2f:68:08:b0:d7:
18:7a:17:77:a3:69:9d:f4:2c:93:77:23:eb:c6:1b:
44:4b:63:a8:10:a2:fb:01:19:55:3c:e0:5c:cc:8a:
01:5c:33:56:a0:63:c0:08:c3:62:e7:6a:5b:f3:89:
13:a1:e1:68:b5:62:0a:ce:25:0f:38:60:08:f9:c7:
20:5f:bf:0c:fa:26:7c:d5:82:92:c5:ad:c0:f0:ff:
c3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:29:0E:11:8C:C5:E7:3D:E9:7D:04:B0:F0:12:E4:71:5B:CC:5C:A1
X509v3 Authority Key Identifier:
keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:db:8c:e9:6d:c0:7f:ac:ca:44:de:19:3d:10:c0:70:cf:43:
2f:95:d5:bf:b3:e6:8f:69:8e:e2:a4:41:73:21:0b:36:0c:aa:
76:fa:c1:be:28:8d:ed:48:36:b4:84:34:64:91:3e:ec:c9:db:
ab:d0:02:9b:f0:b1:a9:89:42:c8:e6:75:4a:55:7a:d7:79:7f:
e6:b4:54:b1:be:c5:8d:91:be:1a:81:dd:f6:41:9f:a4:14:70:
72:0c:e2:1f:85:ed:a2:99:6b:b7:3e:f6:f5:b6:a4:a6:5c:81:
1b:7c:da:dc:3f:9d:d1:18:ba:98:78:1d:84:b4:81:a8:cf:8e:
0d:4b:63:4a:e5:96:06:aa:88:fb:d6:be:32:07:ce:e5:97:40:
bf:f9:7e:6a:4e:38:58:a1:62:2a:bd:4b:52:6b:68:69:1d:43:
d3:7f:2e:4e:f3:52:0e:d6:49:db:15:19:ee:4a:e4:b1:61:9f:
51:c4:4f:82:70:e7:6d:0b:8e:9c:51:06:b3:39:4e:3b:78:71:
4b:aa:73:0c:1d:17:a9:66:4f:3b:9f:f9:a8:92:17:8a:63:b2:
bb:2d:a1:10:db:ba:a8:d7:89:3a:dc:38:1c:24:61:d3:c9:df:
3d:e6:19:f5:e1:32:a9:e0:ba:d8:5f:47:7c:59:f8:5d:14:b2:
ed:92:44:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:37:44 2025 by rpki-client