Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
File: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json)
Hash identifier: OQ2MYMRpL24cQ+Zh8YaxdSjpuJpY16t9AMj8D+pqtLk=
Subject key identifier: 3C:B3:45:C9:AE:AE:6A:65:47:7A:A4:F2:E8:EC:6F:B4:F9:53:5D:F2
Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Certificate serial: 01974968276C19934CCECF9F1579EB9C21C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
Manifest number: 0EE0
Signing time: Sat 07 Jun 2025 08:00:51 +0000
Manifest this update: Sat 07 Jun 2025 08:00:51 +0000
Manifest next update: Sun 08 Jun 2025 08:00:51 +0000
Files and hashes: 1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: JL7rk8xlpwCyEM0FiF2HMNqIEY6E4stQnDomJPOEsEM=)
2: JKDoGMCZzjSndX7Ct7p3CxyKJR4.roa (hash: bo2ZyeRjzsKv0IsXJYurWXlAoWDOMikTk02MIFIPMnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:27:6c:19:93:4c:ce:cf:9f:15:79:eb:9c:21:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Validity
Not Before: Jun 7 08:00:51 2025 GMT
Not After : Jun 8 08:00:51 2025 GMT
Subject: CN=3cb345c9aeae6a65477aa4f2e8ec6fb4f9535df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ae:a0:7a:6c:76:e9:ed:76:34:cd:f0:db:3a:
f2:49:f4:71:92:46:fa:b4:c2:76:5f:b5:dc:78:38:
42:92:f3:95:e6:be:49:1a:5e:27:f4:03:26:14:2a:
d0:4d:37:46:fa:b0:1a:8e:d0:ea:d1:32:60:82:45:
c4:67:3d:fc:a5:f6:9e:05:cf:3f:f1:d7:b7:ae:31:
01:75:9e:1a:46:05:a8:d9:fb:b6:e1:b3:d3:d5:b0:
8e:af:ce:22:3f:f3:09:01:6f:68:eb:16:65:14:a9:
20:57:6e:a4:1b:fb:55:8c:8d:a1:e5:e7:1a:2f:5b:
04:72:e3:c5:9a:47:ea:a4:1a:3b:74:b4:7e:ac:bf:
2f:67:8b:79:67:89:09:a2:f5:b1:5e:fb:b2:18:75:
7d:00:c9:32:48:a5:e0:73:82:97:4f:be:fe:fc:6c:
75:56:b6:1e:a7:e4:56:97:f3:e5:5a:ab:32:6a:e5:
70:0a:8f:d7:3b:a8:b9:a6:e1:c1:fd:cc:09:f1:41:
c4:79:ed:46:cf:89:5c:4c:b1:66:7b:5f:df:9c:c2:
f8:4a:98:2d:c6:35:ff:d5:d0:1c:c5:da:e6:eb:85:
fd:4a:79:39:b3:9f:cc:8d:4f:9d:d6:5d:04:91:5f:
6c:99:c7:ed:4d:1d:4c:cd:9f:3f:66:c6:8c:e3:84:
9d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B3:45:C9:AE:AE:6A:65:47:7A:A4:F2:E8:EC:6F:B4:F9:53:5D:F2
X509v3 Authority Key Identifier:
keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:06:42:26:64:11:49:73:8f:04:31:b0:7f:d2:ad:96:69:ef:
0b:6f:57:6c:9f:34:3b:e4:c8:c0:b3:44:0e:1a:96:e6:85:88:
10:46:05:48:c9:6a:b6:5f:69:00:e4:63:f2:9c:f3:32:e9:5a:
f6:55:1f:c4:09:00:0a:bb:d5:cd:d0:ff:82:ad:57:0c:bd:31:
3c:ab:dc:2d:19:f4:6f:d2:b7:1c:c7:07:97:a4:1d:36:54:73:
99:f0:ed:6c:3b:ad:0d:24:e0:8e:18:29:13:97:d6:0f:be:f3:
ad:a3:4a:dc:4c:26:36:2e:48:c7:ad:7d:a5:0b:26:90:ea:38:
c6:cc:74:42:64:5f:01:cf:40:4f:18:13:47:39:43:97:87:a6:
cc:17:8a:9e:38:e5:f3:3e:c4:ae:b7:29:7d:ec:7e:46:9a:85:
30:66:7e:b5:d3:a9:fd:a9:10:ec:12:ac:22:a8:81:0c:e4:37:
e7:39:9d:3b:2e:02:3c:bf:63:a7:7d:6c:41:3b:b6:75:7e:60:
e5:06:c6:00:71:ab:c8:a1:02:ef:50:66:d6:69:c3:4b:84:78:
6d:b2:f9:e1:a2:e0:94:29:07:cc:15:f9:ea:6a:26:68:bd:71:
84:0a:89:51:9b:b9:c4:cf:7d:92:fb:48:cd:8a:fc:40:92:a4:
14:28:2f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:08:01 2025 by rpki-client