Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
File: 9H0DN3zBCPRAkSa5oMIBYyQhxko.mft (raw, json)
Hash identifier: sdN7lx+tDuxMNURh3W0+L4QwRMKciC6jfEdIwjFZHPU=
Subject key identifier: D1:1D:12:B8:38:66:A8:EC:AF:3C:4B:14:10:3E:66:96:2A:84:5F:44
Authority key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
Certificate issuer: /CN=f47d03377cc108f4409126b9a0c201632421c64a
Certificate serial: 01974A7A8B1AEF33B6C77692BB138CB42F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
Manifest number: 1578
Signing time: Sat 07 Jun 2025 13:00:34 +0000
Manifest this update: Sat 07 Jun 2025 13:00:34 +0000
Manifest next update: Sun 08 Jun 2025 13:00:34 +0000
Files and hashes: 1: 9H0DN3zBCPRAkSa5oMIBYyQhxko.crl (hash: PZMp8x2uHGIccNMGQ93pIuen9Zjt5DABSHeFZYpv+/k=)
2: yhhMqOayivlP0HqWgBqkxI1f14U.roa (hash: w/NNRo63VlTAmPeepIG4fNxKMWjZVte8F0Xs65Wc7u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:8b:1a:ef:33:b6:c7:76:92:bb:13:8c:b4:2f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d03377cc108f4409126b9a0c201632421c64a
Validity
Not Before: Jun 7 13:00:34 2025 GMT
Not After : Jun 8 13:00:34 2025 GMT
Subject: CN=d11d12b83866a8ecaf3c4b14103e66962a845f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:24:f9:74:01:91:2c:73:09:ef:60:55:80:16:
fa:9c:11:55:03:c1:a6:a3:ae:c3:5d:df:13:22:9c:
48:fa:20:db:7f:ff:d8:3f:fc:73:60:9b:7a:35:22:
e6:fa:8b:f6:3b:ac:b3:68:9e:d1:32:74:55:d6:73:
d3:15:8c:b8:e5:20:dc:01:cd:e8:d8:a3:ad:f1:31:
ac:2c:7a:30:27:9c:c0:ed:c9:cd:0a:79:9b:9c:0c:
dc:72:f9:7e:79:66:a8:98:27:8b:96:82:7d:f0:15:
8e:ea:3a:8e:df:f3:ef:92:fb:49:19:58:70:e3:ef:
6a:f5:47:97:5f:0d:88:22:03:c7:1b:d2:6c:2d:0d:
da:e4:35:06:40:c2:e6:51:0b:e3:0b:3c:1b:a3:72:
cb:96:d8:5a:a0:42:2f:7d:ec:ff:a7:e4:d8:7c:9d:
70:db:04:12:7d:48:ec:8a:48:a8:d3:73:f7:6b:08:
2a:43:da:2b:62:c7:57:1a:93:f4:b7:72:1f:b9:7b:
f2:41:fb:7e:58:2f:36:1c:1f:85:55:71:23:54:c1:
e3:5e:99:ce:ce:ba:3a:7e:b0:61:0f:55:9f:31:1a:
dc:98:76:cc:e2:df:cf:0b:e3:c1:76:34:89:f8:00:
c3:ae:ed:7c:4b:b2:9b:68:7c:d5:85:12:2c:54:0d:
75:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1D:12:B8:38:66:A8:EC:AF:3C:4B:14:10:3E:66:96:2A:84:5F:44
X509v3 Authority Key Identifier:
keyid:F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fc:f7:70:49:79:ce:c5:a1:7a:1d:ff:d6:30:cf:2c:14:45:
cd:8e:71:b2:38:f6:42:7a:26:32:29:39:66:68:4e:41:55:82:
76:56:1c:f6:d5:68:5c:a7:a1:13:82:8e:d0:b3:3d:e1:bf:64:
b7:d0:b3:ac:7e:0d:ad:fd:cb:1b:0f:5a:7c:4f:d8:da:f8:7c:
2f:9d:b5:e5:85:d9:32:1d:82:ba:00:db:cc:26:98:e4:84:d6:
5b:f5:8b:11:3f:db:38:5b:4c:0a:9c:dc:25:9f:45:d1:d3:67:
2e:09:0d:a0:11:5c:13:b2:1d:d2:22:94:b4:5f:05:f4:5d:27:
7a:53:23:ec:9b:59:93:2a:96:5a:91:a1:79:75:a5:b8:36:49:
28:4c:c9:25:34:72:f6:80:36:68:f8:fd:d9:37:49:91:08:d9:
6d:14:29:bc:f4:eb:58:21:2d:0b:0a:35:27:ee:5f:65:e4:d1:
ec:d1:7d:ed:0a:8b:ef:06:33:80:f3:5b:a0:40:a5:c1:f4:16:
c4:10:f0:66:5f:6e:37:a9:91:0c:08:03:0c:f1:83:65:b5:f2:
63:2c:de:80:7d:b9:7f:a5:11:cb:ed:77:dd:e7:e9:e5:3e:64:
7c:67:9d:0d:84:d3:6d:fa:ca:e8:35:c7:f8:fa:0c:97:3a:37:
38:bd:7c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:50:24 2025 by rpki-client