Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
File: 9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json)
Hash identifier: IEd7CPsW+1V1nQ6W6O37TKidsX1CN+gRutXVHL4TeCs=
Subject key identifier: 01:2D:A7:6C:C4:DD:D5:C2:E4:E3:7B:C0:C2:29:7A:AB:27:A2:8D:9A
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 01974EFC03DE3A77D951E727B475FC38E70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
Manifest number: 0876
Signing time: Sun 08 Jun 2025 10:00:28 +0000
Manifest this update: Sun 08 Jun 2025 10:00:28 +0000
Manifest next update: Mon 09 Jun 2025 10:00:28 +0000
Files and hashes: 1: 84Ad1KJPc9jhr8WAEOEs6s8tmPc.roa (hash: UeaLHRP7oFc/d7B28fPSHAmNwBiXwzZTNmEOfITVZrU=)
2: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: mvM77pS7ue+ZRKMCpo/IKB+qoxuzcHmfEQmT3+GNzlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:03:de:3a:77:d9:51:e7:27:b4:75:fc:38:e7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Jun 8 10:00:28 2025 GMT
Not After : Jun 9 10:00:28 2025 GMT
Subject: CN=012da76cc4ddd5c2e4e37bc0c2297aab27a28d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b7:90:5f:1a:d9:0b:a7:3a:a1:ad:5f:30:3d:
31:d9:a1:14:d1:13:19:89:ed:db:51:d9:e0:36:ee:
31:ff:1f:e6:ae:0b:29:2e:10:3b:9c:72:71:05:6d:
00:b8:1f:94:d2:75:c9:0a:14:67:de:da:3a:18:42:
aa:55:fa:f7:34:5b:24:78:ae:db:55:ff:de:12:1f:
e9:89:bd:58:04:69:42:74:9a:f5:9d:30:ec:bf:02:
10:04:05:44:8a:df:a8:55:f8:fa:1c:0d:f3:3e:85:
c6:3f:19:70:4e:10:51:d0:7d:f4:d8:7e:d7:96:88:
85:47:37:a2:a8:3a:0d:44:bb:8d:bb:13:f0:2c:39:
d4:7d:5c:b3:31:e3:b6:24:9b:14:ff:80:21:5d:05:
1b:ba:1d:d7:ea:17:b2:72:98:f7:b6:4f:fe:a8:0b:
78:13:0e:cf:f1:b4:0b:e5:d5:81:57:d0:b4:3c:e5:
6f:ca:95:51:c7:1c:a1:73:90:56:1a:fc:6a:a7:61:
92:16:fb:e5:0d:53:20:90:fd:4d:96:29:26:fd:b3:
e6:02:89:0b:94:97:73:8a:ae:9a:f5:6e:c4:71:30:
a4:d0:6b:08:c3:e6:9d:ac:e7:e5:05:27:69:be:9a:
40:33:cd:29:eb:fc:9c:a7:9a:6e:fa:15:fa:42:10:
98:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2D:A7:6C:C4:DD:D5:C2:E4:E3:7B:C0:C2:29:7A:AB:27:A2:8D:9A
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:35:d7:15:66:c8:8f:59:e1:fa:9a:48:0c:e9:cc:f8:c7:1d:
9d:35:8a:53:54:b1:fe:c5:1b:bf:1d:2e:60:b4:6d:eb:2a:25:
e9:da:65:d3:55:c8:5c:b1:4d:5a:8d:2b:9e:e9:0c:03:6e:c3:
84:7a:06:61:56:a0:72:0f:be:48:89:ee:6e:2b:c1:c8:25:56:
c3:10:da:0f:94:da:fe:c7:34:6f:aa:14:76:64:c4:44:8f:61:
da:d4:be:f9:b9:7e:f4:0e:31:a4:17:eb:56:33:fa:b7:5c:0e:
de:e9:3e:9c:4b:de:9a:98:e1:f5:d2:e3:16:8d:79:5e:b7:81:
3b:8f:9d:59:20:87:47:b1:17:e8:78:08:72:76:23:cb:d2:63:
fb:5d:71:18:2a:1b:76:44:c0:31:21:30:dc:40:94:6d:b7:b8:
59:e9:0d:c8:e3:cd:31:bc:4f:d2:fa:d9:68:e9:f6:05:3f:0a:
f8:59:db:c5:fa:5a:06:1f:5d:e8:9f:53:04:7c:8f:b2:5a:c7:
d1:7b:95:4f:0e:c4:cc:cc:cf:08:60:01:e0:c3:4a:22:92:eb:
2e:6c:99:c9:a8:4e:cf:a9:07:7e:1b:02:64:11:aa:cc:80:2f:
b3:59:6f:09:d3:64:f5:e9:96:57:19:22:cd:18:73:ef:8e:28:
63:68:c0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:46:35 2025 by rpki-client