Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
File: c_9LHL6vndddO17z7pp11XmfcoA.mft (raw, json)
Hash identifier: sehP3+XaEPYRPCRIzT7gfNlvRC0kvM9R+G/m3S6tsPQ=
Subject key identifier: 2E:9D:7C:4E:D5:FF:CF:0B:C6:C8:80:6B:33:B8:6A:CC:2C:93:EA:02
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Certificate issuer: /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial: 01975F81C093FCB56C8D18FD8AF10551F1F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
Manifest number: 09CA
Signing time: Wed 11 Jun 2025 15:00:28 +0000
Manifest this update: Wed 11 Jun 2025 15:00:28 +0000
Manifest next update: Thu 12 Jun 2025 15:00:28 +0000
Files and hashes: 1: ag-XVm500Ink_y9Z543W0cYT2e4.roa (hash: LTklb1ptuKPn0530SuHC20oeHYTlb0YVhREmYDi0qn8=)
2: c_9LHL6vndddO17z7pp11XmfcoA.crl (hash: bB79ttROVm46eURiLcEOj+MV067PtBpR0j5VQRxOfNg=)
3: xqtuxbgfgKOQAXDLHhW5kYSASLM.roa (hash: Akx0xbIbgUFrWIKc+N3GbCju1aCG4ckavEzXznoEvO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:81:c0:93:fc:b5:6c:8d:18:fd:8a:f1:05:51:f1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Validity
Not Before: Jun 11 15:00:28 2025 GMT
Not After : Jun 12 15:00:28 2025 GMT
Subject: CN=2e9d7c4ed5ffcf0bc6c8806b33b86acc2c93ea02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:40:fe:53:9f:bd:12:8b:7d:1d:0b:60:87:
a0:71:e4:23:c5:17:c4:96:56:2e:26:4f:39:44:0f:
f4:8e:13:91:ec:51:ab:6d:8d:40:92:69:e8:f8:bf:
65:0d:cd:95:dd:8e:81:65:3d:7a:7e:8c:13:8e:40:
0f:35:50:61:d6:4a:d3:bd:40:9d:8e:77:90:62:90:
b1:1b:c6:7c:df:c9:16:c5:78:bd:09:1c:cf:fd:c6:
e2:6a:97:8e:e1:a7:44:29:91:88:10:c2:f7:63:44:
6b:86:86:ae:91:30:70:10:d0:44:39:b8:22:01:23:
ea:6e:84:f2:51:54:a8:47:10:bc:15:99:2e:49:e8:
6d:fb:38:cf:6e:ce:db:83:5f:f0:f9:0a:39:e3:c5:
2e:b7:69:97:26:4c:ce:52:df:c6:e4:72:56:d8:b7:
6c:b0:6b:bf:44:aa:9c:86:31:82:31:47:d9:fe:00:
25:fb:df:ba:06:11:08:2b:0b:bc:58:d8:ae:c7:3a:
9d:be:8a:07:77:da:ec:71:13:54:72:f4:64:9e:76:
9f:6c:e5:78:89:c5:b2:a2:78:96:e9:e5:ba:bf:a6:
66:60:f7:d9:b6:f1:43:20:3d:30:62:1a:05:85:06:
d0:bc:92:26:f0:42:19:43:12:e9:c3:64:5d:eb:ba:
03:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9D:7C:4E:D5:FF:CF:0B:C6:C8:80:6B:33:B8:6A:CC:2C:93:EA:02
X509v3 Authority Key Identifier:
keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:67:26:ba:ff:61:50:72:bf:f3:1e:83:d2:16:fa:eb:c9:b7:
f4:16:27:f9:e7:6f:8c:b2:d7:68:46:01:6a:a4:0d:c5:cf:4d:
94:7a:04:dc:47:52:94:6d:b0:82:b3:56:c4:9f:38:9b:69:0d:
58:cd:44:90:6a:c7:e4:85:14:2a:56:75:cf:bc:7d:0a:a0:ee:
ee:67:b1:41:4e:fb:df:b2:9a:7f:f9:f6:50:43:2c:54:b7:8b:
9d:d5:14:3f:49:3c:d3:ea:64:45:b1:6f:de:b8:47:05:e7:bc:
e6:cd:2c:56:26:f4:c2:62:63:09:3f:dc:36:77:1d:fb:10:94:
26:b5:b4:85:74:92:46:a2:c3:56:99:71:8f:93:d2:18:d3:9e:
56:47:d5:86:13:a4:28:b1:86:80:09:22:28:25:a0:42:10:0f:
54:ac:24:2c:ca:db:85:ec:8c:41:88:62:86:df:3f:3c:f8:4b:
98:b1:58:94:3a:3e:07:46:a0:ff:6e:c6:ad:c6:29:c1:ee:68:
9c:32:46:b7:51:32:25:79:4f:38:31:00:e9:aa:c1:91:dc:93:
bc:14:c3:cf:fb:a4:e6:04:55:e8:10:c0:8c:01:40:25:b8:ab:
cc:a0:79:3a:33:d9:4a:f1:24:06:ba:b9:e3:f0:a2:c1:46:83:
4d:44:9a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:54:06 2025 by rpki-client