Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
File: 9KWwQv5I7rEjvlbb-ejdogweoR0.mft (raw, json)
Hash identifier: tZwGkGKj8X2t0aiTE6Uc1eCIHJQkKKbGp+DRXXLL7ic=
Subject key identifier: F2:A1:38:2D:FF:B0:A4:88:58:7B:78:8F:6A:12:6C:0C:7D:67:7F:26
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial: 01974DB24CFCF0EEC67B568DA985DDDEA8A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 04:00:19 +0000
Manifest this update: Sun 08 Jun 2025 04:00:19 +0000
Manifest next update: Mon 09 Jun 2025 04:00:19 +0000
Files and hashes: 1: 9KWwQv5I7rEjvlbb-ejdogweoR0.crl (hash: n8ojbUbBjonqublati8jAWkw82bAvFcFvMcOktpSDC8=)
2: BKaKCrIWJLW3Q862BmZ-Z-FQI78.roa (hash: zGv7kfCx9AyBiy/Vt4g16r88DKiDMl7S2RsrkRbPYxA=)
3: U6yxYsRAOLx1rVOUMfl1bHjQTqE.roa (hash: p5afCkYVQi7asNinB13X4z3pkTkHpo8/a9b5lnTy5To=)
4: hlFLNTPKu_nVGF692xwIYmZW2GU.roa (hash: c5Q2Sew+Iis+NOcJWfVvfa4Ocr0QgEd2RYjfl4HhWNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:4c:fc:f0:ee:c6:7b:56:8d:a9:85:dd:de:a8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Validity
Not Before: Jun 8 04:00:19 2025 GMT
Not After : Jun 9 04:00:19 2025 GMT
Subject: CN=f2a1382dffb0a488587b788f6a126c0c7d677f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7a:00:69:4e:ec:af:c3:06:fa:5d:a4:22:d3:
79:25:7b:87:ab:83:45:65:4d:fd:04:22:b9:de:81:
09:5e:82:0f:b5:38:11:83:f6:1d:18:49:7f:22:8c:
b3:bd:10:ff:d7:58:bc:20:a6:11:64:66:11:86:91:
c4:14:c9:ab:51:a3:f3:e2:85:22:95:9a:cb:a5:27:
9c:cc:d5:d7:1c:fb:55:aa:03:ab:ad:bd:78:8f:ac:
c8:b3:dd:a8:14:89:81:83:0d:89:8d:a4:f9:3e:5a:
ce:03:f5:7a:3b:4c:b1:84:2d:1f:b2:37:0c:dd:88:
6e:3a:83:8d:bc:a7:0d:72:42:cf:29:c0:93:cf:e6:
4f:0e:5e:13:e6:9e:ba:05:74:6d:40:be:ed:cf:4d:
52:d5:69:72:1b:6e:32:f2:f9:eb:99:69:8c:0d:6e:
83:1e:d7:e8:fb:04:2a:c5:3c:70:16:2f:37:c6:53:
2d:63:2e:6c:64:08:78:2b:88:db:b3:ea:a4:f3:df:
2c:f7:d6:de:b3:3b:62:91:3c:4f:ce:55:3b:95:53:
2f:3c:ce:40:d4:99:c3:59:eb:16:3c:da:f4:22:7d:
d6:22:75:91:08:9b:4c:31:53:87:c7:6e:e7:a8:41:
b0:06:1a:93:a9:f5:ba:8d:e9:2e:b2:65:6f:23:29:
55:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A1:38:2D:FF:B0:A4:88:58:7B:78:8F:6A:12:6C:0C:7D:67:7F:26
X509v3 Authority Key Identifier:
keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1f:fc:d3:28:27:9a:84:79:81:33:b8:7f:12:ee:04:9c:7e:
cd:ab:f8:24:1c:99:c7:cb:ac:36:8e:f2:1a:12:82:a9:b2:b7:
f5:67:b8:f5:94:c0:df:a1:b7:66:dd:3a:06:37:5c:5b:8d:38:
22:9d:36:84:54:8d:c2:a1:49:45:59:b2:c8:c5:cb:cf:4d:d0:
4d:d3:23:f8:5c:01:6c:76:4a:74:3f:44:63:1e:8e:17:3c:69:
b5:52:21:0b:3a:5c:ff:d4:cd:d3:12:39:9d:84:0a:c9:6f:00:
5f:23:55:02:c9:e1:82:ab:ea:0e:be:6e:1b:2b:fa:9a:55:86:
07:32:af:99:e5:c3:0b:0d:68:b9:0f:4f:1f:76:6e:78:8d:af:
fd:92:c9:20:7c:b5:66:32:e0:b1:14:c6:94:92:5b:e9:3a:2d:
e5:2a:d6:a4:7c:c2:68:03:fc:e1:3c:f1:d5:fd:01:37:2a:ad:
a8:65:e7:42:f1:1e:32:d3:0f:0a:87:11:be:1a:1a:c5:bd:c6:
13:f7:2d:36:29:6f:3d:03:5b:fe:47:f4:16:09:95:d8:85:1c:
14:88:52:68:5b:63:c3:34:6a:ea:db:c7:1e:15:bd:bf:95:65:
7f:c0:0f:5f:8b:32:7c:46:06:da:c6:cf:46:75:fe:b0:4d:a6:
86:02:12:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:22:40 2025 by rpki-client