Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
File: c_9LHL6vndddO17z7pp11XmfcoA.mft (raw, json)
Hash identifier: EescNi+XcEInUh2fWf+TSEexEfcEPagum0yRRTrphGc=
Subject key identifier: 4D:F2:2E:FD:F7:A8:46:DE:3E:B4:63:FA:5A:3A:8E:5A:05:88:F7:CC
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Certificate issuer: /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial: 019755D9D51FFE78011EBD34066176C109CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
Manifest number: 09C5
Signing time: Mon 09 Jun 2025 18:00:28 +0000
Manifest this update: Mon 09 Jun 2025 18:00:28 +0000
Manifest next update: Tue 10 Jun 2025 18:00:28 +0000
Files and hashes: 1: ag-XVm500Ink_y9Z543W0cYT2e4.roa (hash: LTklb1ptuKPn0530SuHC20oeHYTlb0YVhREmYDi0qn8=)
2: c_9LHL6vndddO17z7pp11XmfcoA.crl (hash: AKqykhqHJM3qm44k6pIhPLSYYS1KmcuGFfI6jD/9YO8=)
3: xqtuxbgfgKOQAXDLHhW5kYSASLM.roa (hash: Akx0xbIbgUFrWIKc+N3GbCju1aCG4ckavEzXznoEvO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:d9:d5:1f:fe:78:01:1e:bd:34:06:61:76:c1:09:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Validity
Not Before: Jun 9 18:00:28 2025 GMT
Not After : Jun 10 18:00:28 2025 GMT
Subject: CN=4df22efdf7a846de3eb463fa5a3a8e5a0588f7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:31:b4:27:90:48:34:12:22:da:07:26:48:cc:
7e:a4:4f:83:7e:0b:a7:d1:53:27:06:af:3e:1d:8a:
d8:70:87:3b:1a:dc:0c:71:e2:89:d5:11:88:1d:cd:
c0:aa:24:c8:8d:39:c8:49:21:be:7a:92:10:9c:10:
18:da:1c:d4:43:0e:f1:36:7e:3c:0d:ad:ba:c9:e0:
14:10:35:e4:0c:96:60:1c:59:b0:3b:a2:b2:3a:7f:
d5:df:74:57:bd:06:81:16:88:37:54:f0:c5:5c:99:
fd:48:47:c1:4d:ab:58:c8:f0:b7:b3:37:4b:3b:15:
82:b9:2a:42:d0:4f:ce:61:2b:bb:c0:1e:39:38:7c:
77:47:1b:e6:ad:8f:ae:1e:8f:57:3b:4d:f4:83:0f:
e0:27:4d:0e:1c:ba:f0:51:42:22:65:34:ee:8b:f5:
38:53:68:01:2f:27:01:aa:ad:0c:85:fd:39:06:1d:
34:b8:f2:9e:53:d9:4a:a0:8f:ff:96:1a:82:84:21:
f3:a9:0d:e6:c7:06:28:59:72:bd:9a:9a:08:0a:4c:
6e:74:6d:5f:16:14:da:84:85:e8:95:1e:12:63:4d:
55:f1:cc:21:26:82:9b:a7:d5:64:4c:24:39:0b:a8:
6c:6e:0d:b8:c8:53:3a:62:49:42:ad:76:44:d9:95:
d6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F2:2E:FD:F7:A8:46:DE:3E:B4:63:FA:5A:3A:8E:5A:05:88:F7:CC
X509v3 Authority Key Identifier:
keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c0:d5:23:91:fe:be:84:de:71:09:a3:a7:6b:d1:fd:a6:33:
4e:50:ab:1f:61:8e:d2:15:0d:ca:74:65:ec:89:c9:49:3a:58:
f0:44:dd:e5:af:f2:13:c1:7b:cf:fb:bc:fd:9d:7f:07:01:9d:
33:3c:12:7a:47:37:5b:f8:a9:ed:ec:95:b0:c4:14:72:7a:5d:
8f:97:24:f1:09:ef:2d:57:19:94:65:e3:54:d0:0a:a2:37:d8:
2c:7f:79:07:61:3e:52:7b:e6:37:03:1f:23:e0:9a:bc:6e:46:
2e:fd:f3:b1:fe:17:39:59:13:58:49:ab:c1:d6:00:35:cd:66:
8a:01:3e:9b:e7:be:23:cf:c6:21:70:fb:69:73:7f:34:25:d7:
0c:71:8c:20:f9:6f:02:0d:c9:5b:9a:73:45:79:4e:d3:fc:62:
a2:28:bd:50:03:00:39:9f:fb:de:b6:d6:f3:f3:0f:70:de:14:
25:47:6d:57:ba:ad:3d:22:ae:7a:b3:71:a8:b1:1d:39:2e:33:
1e:ab:f5:1e:0a:e8:92:8a:18:7f:a6:52:ba:4b:47:39:6a:4d:
e4:95:c8:4b:55:37:ff:97:ed:af:dd:00:b0:35:08:d6:fa:14:
2d:4c:bf:81:0a:3e:28:31:9d:79:81:1c:39:59:9f:fd:75:84:
59:fa:78:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:11:01 2025 by rpki-client