Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
File: d9LZKEIxBOXDSA4htKPtFJiyon4.mft (raw, json)
Hash identifier: rUmRq1H1Y6ZuIY5ulD358+PIhrstD9Mr64sZ3sMrP4U=
Subject key identifier: A9:11:A4:37:49:6A:53:8D:C7:BA:F3:5B:9E:C4:1C:1F:AC:33:6F:DA
Authority key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
Certificate issuer: /CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Certificate serial: 0197523404CD956CBC3D589F03EF77F03858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
Manifest number: 0AF9
Signing time: Mon 09 Jun 2025 01:00:30 +0000
Manifest this update: Mon 09 Jun 2025 01:00:30 +0000
Manifest next update: Tue 10 Jun 2025 01:00:30 +0000
Files and hashes: 1: HX3f5FZnDXBVPEnE5bxp-46XcDI.roa (hash: Cn4L/fOgVlSahDb0v8tdmodjivbISS4FJEJArlg0b+Y=)
2: d9LZKEIxBOXDSA4htKPtFJiyon4.crl (hash: apV1x0lhPa1Xo2Fb9Diz4lZGL08ot1NxJQpPhxdVt5c=)
3: jKFJgU1IkNXTMlJ4fb3SLPhpIEs.roa (hash: gVNSWZlrE4CqYnhrjWkiPYyY6GBkTGDHd/hL4ezDiUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:04:cd:95:6c:bc:3d:58:9f:03:ef:77:f0:38:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Validity
Not Before: Jun 9 01:00:30 2025 GMT
Not After : Jun 10 01:00:30 2025 GMT
Subject: CN=a911a437496a538dc7baf35b9ec41c1fac336fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:47:33:5b:69:62:61:40:74:74:47:87:08:
fe:eb:6e:d6:23:b3:c5:31:68:7d:51:08:01:c4:a9:
a1:96:f1:0a:dd:ab:d5:df:3d:7b:6b:eb:97:3d:63:
a1:a6:c3:f2:57:0c:b8:19:3c:ed:70:cb:ed:33:7c:
b4:56:e9:28:2d:fc:1a:70:61:2f:80:50:08:ce:ec:
cf:ab:ec:df:2b:79:60:9c:de:8f:f8:fe:19:be:b6:
b2:b4:b4:0a:89:c8:bf:98:cd:1a:0b:dc:0d:80:aa:
bb:ee:ff:0a:1d:3f:77:7b:ad:f1:08:e9:b7:e0:13:
eb:67:07:fa:d2:76:92:b7:50:62:04:8d:a9:23:78:
a1:c6:f9:01:ff:c7:f2:3d:fe:04:d3:1e:c5:ea:51:
56:28:1c:2e:31:6c:64:10:d9:1d:69:61:ca:3d:4a:
d7:e8:15:bd:d6:71:f5:d8:41:09:00:f1:0d:94:0a:
16:de:de:10:b3:23:48:00:64:1a:c1:88:06:ab:d3:
e2:46:f4:b3:48:34:b1:de:a6:f2:f8:c3:3f:ef:ed:
55:a4:d9:9f:3c:e9:8f:2b:10:4b:37:75:69:b7:e5:
82:92:18:20:2d:a6:ca:7e:0d:06:60:13:64:d8:6f:
bf:b3:24:65:ef:4d:da:c6:8f:94:c9:f6:66:02:25:
33:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:11:A4:37:49:6A:53:8D:C7:BA:F3:5B:9E:C4:1C:1F:AC:33:6F:DA
X509v3 Authority Key Identifier:
keyid:77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:dd:52:e9:54:39:16:32:ab:f5:81:b6:ab:0d:02:da:f7:ad:
eb:1a:e0:bc:3e:36:75:b6:16:33:2e:02:1a:79:be:b8:dd:8d:
33:18:b2:d1:4e:4a:48:3a:6c:c4:dd:d9:3a:81:00:e5:47:b4:
bc:1b:22:c5:6e:80:1e:fe:8c:ac:b8:2e:60:70:26:07:ba:24:
ba:1a:18:a0:56:ab:eb:ff:c0:c2:be:90:08:54:96:a5:db:5d:
e8:25:2e:90:29:e1:f4:ab:89:e3:90:d4:54:f9:cc:53:e3:87:
bd:d7:97:3b:92:82:65:6f:7f:e8:8e:94:57:e6:df:38:26:4a:
d6:68:6a:61:5a:9c:ce:17:17:80:30:cf:81:8d:79:80:8f:24:
f9:8e:7f:1b:23:30:61:6c:be:80:50:d0:49:a7:28:5b:61:2b:
d5:eb:ed:6c:39:12:4b:d8:ce:af:a5:c6:31:4b:94:e1:05:72:
8c:0c:03:55:6c:47:4e:0a:68:13:ed:00:30:66:eb:09:67:f0:
b5:4c:90:3b:e9:bf:d8:5e:b3:be:b5:df:d9:47:b5:6c:4f:7a:
de:d8:b5:bb:e9:ac:81:3c:5e:7a:df:a3:79:5b:81:6e:30:ab:
2e:0b:9c:07:d3:18:a7:92:53:f0:78:3f:d8:dd:59:bd:f3:7d:
f9:37:61:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:34:44 2025 by rpki-client