Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: NCmPCpu5lzIfEita39sexeRAFiHonY+R5DmGZi6GoIQ=
Subject key identifier: 70:34:07:9B:A2:24:18:52:B5:A6:57:F0:98:CC:B2:08:92:1E:23:33
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 01974E574D07BF6532546FBCCB59150110B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 0D74
Signing time: Sun 08 Jun 2025 07:00:33 +0000
Manifest this update: Sun 08 Jun 2025 07:00:33 +0000
Manifest next update: Mon 09 Jun 2025 07:00:33 +0000
Files and hashes: 1: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: cIMOphcgXZEUF+iOWmMiVSde9bimTd70p1AvodgU8Eo=)
2: _0wH1BRcgc6tfF99TwNnC3iQ1pU.roa (hash: O+Zelc4oaCgFlSMOLR6IXR0OWFyZm1W0ImLAmE3cggg=)
3: igkLmqGvdo3ZptL2OBtAT5tgBr8.roa (hash: JNS1dghL0HEbj9Q46she80UtZ72vLWiMcXMi6xfr/RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:4d:07:bf:65:32:54:6f:bc:cb:59:15:01:10:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: Jun 8 07:00:33 2025 GMT
Not After : Jun 9 07:00:33 2025 GMT
Subject: CN=7034079ba2241852b5a657f098ccb208921e2333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:c3:20:bc:a1:97:18:19:4a:c2:7a:c1:11:
35:f8:1e:6e:f5:a2:3a:16:df:be:c1:93:70:b3:7b:
fb:b1:2b:2b:b7:b4:1f:ec:26:39:0f:dd:63:8c:f4:
70:24:ee:22:c3:a2:9f:d3:16:39:45:03:58:34:3f:
0e:03:47:27:e9:45:5c:54:71:01:3c:67:f7:70:a5:
d7:7f:78:ea:09:c8:48:ed:97:f5:8a:f1:bc:58:ce:
77:5e:19:f8:49:df:58:18:ce:85:04:c0:4d:cf:1c:
2f:82:c1:87:a6:46:21:06:10:5c:01:ed:af:3e:50:
98:f6:89:01:1e:a3:8e:5d:b6:23:75:8a:70:d8:f3:
b9:8a:e5:af:7b:6f:c6:10:6e:df:4a:4e:89:64:8b:
b3:23:4c:d1:1d:7d:9f:07:b2:81:a1:06:6a:e6:69:
ed:fb:db:fa:1f:96:f8:2b:a1:ed:27:a7:ed:b5:41:
60:76:89:25:c1:30:00:38:7b:c6:02:54:07:d4:c1:
ae:8a:84:ff:2e:35:d2:83:31:15:29:ca:3c:78:e9:
65:63:82:12:1a:46:b4:fa:a2:16:9e:40:fb:b2:08:
a2:e4:fe:34:dd:7f:74:e0:0f:18:ec:0e:6c:fb:8c:
20:a3:c9:dc:d0:64:e3:f5:e3:45:9b:dd:d8:e6:db:
b8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:34:07:9B:A2:24:18:52:B5:A6:57:F0:98:CC:B2:08:92:1E:23:33
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:16:d4:8e:76:3b:cd:5b:63:2f:4b:79:d3:21:52:99:16:43:
1f:bd:8f:85:6f:74:49:f0:3e:21:08:ac:fc:e0:11:92:0d:2b:
3b:ea:6a:45:f0:b1:b9:be:b8:80:c8:dd:54:25:2c:49:37:32:
8d:e0:10:f1:46:8c:b8:a0:25:cb:07:6c:ab:ba:1f:02:fd:42:
21:42:89:24:64:81:32:0b:43:59:42:21:26:44:85:af:c1:1c:
60:64:19:02:d5:3f:32:61:68:03:1a:6e:c1:9b:9e:ef:cb:77:
d8:f5:6e:6f:4f:8c:63:f1:fc:3c:1c:81:76:15:b7:1f:f7:e0:
21:a9:fa:1c:4a:04:78:4f:c8:02:22:fc:7d:ce:be:e5:b8:a7:
8b:2f:6b:35:97:d3:52:9a:92:e1:2e:0b:69:21:9a:e4:be:1e:
4a:6c:2b:02:f6:73:c3:a2:c7:f5:a9:6f:bd:13:e2:27:c4:b2:
0b:f9:d4:62:a0:d0:38:8d:62:84:52:bd:5d:2f:80:49:04:63:
4c:0c:0f:0e:73:ff:8b:ea:d7:03:59:39:a7:91:35:cd:c6:91:
1d:ec:37:86:10:25:da:31:55:02:1f:01:33:f8:ce:27:12:d9:
f6:c2:54:1a:b1:a0:b9:92:16:42:c1:15:75:6f:91:10:04:a1:
5a:9f:50:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:56:01 2025 by rpki-client