Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json)
Hash identifier: zj4fjgR5KmuAzBjL/K4qI4Wc5qV/DnOiTL3ZlFz1O8s=
Subject key identifier: D5:4A:DF:B2:4B:81:6D:22:EE:AD:CB:A0:7E:98:5D:4B:F0:52:97:B2
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 01973987971715375091C6B66174425F29F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
Manifest number: 052B
Signing time: Wed 04 Jun 2025 06:01:16 +0000
Manifest this update: Wed 04 Jun 2025 06:01:16 +0000
Manifest next update: Thu 05 Jun 2025 06:01:16 +0000
Files and hashes: 1: 67zW8t21om1pTXvyuagS0QWX12s.roa (hash: arwG9XkQ/+2dVagELL/zq8/mCR4dYaym8bqyA1sBk4A=)
2: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: vmZ7408EqyaQ8HSnJBTQtsdwfHHhjnAI0OL44oktGbw=)
3: cCgr35XwpirOi5T2NC-QhUoK0mY.roa (hash: aPFc2y18XhdFxhdVyRug+HbV1BK/ZT7q4hdqYZuvICQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:87:97:17:15:37:50:91:c6:b6:61:74:42:5f:29:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: Jun 4 06:01:16 2025 GMT
Not After : Jun 5 06:01:16 2025 GMT
Subject: CN=d54adfb24b816d22eeadcba07e985d4bf05297b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:47:38:71:42:3b:8f:6e:da:bf:cf:c8:8e:
08:ae:5f:55:67:f2:04:b1:8e:7c:7b:59:3a:28:76:
cf:3a:fb:3e:22:88:30:5c:f2:97:73:b2:4d:92:f9:
20:7c:5e:ff:76:85:68:6e:44:21:b2:1c:1d:92:0e:
33:26:84:81:79:a7:35:b9:85:5b:99:aa:48:70:fd:
ff:a2:16:62:32:4c:21:d0:70:26:d0:a5:8e:ce:fc:
73:5d:f2:09:66:26:42:11:6b:be:b4:3b:b4:24:a0:
40:60:09:34:30:84:bc:fd:5c:94:2e:48:c8:91:e7:
9c:c8:ef:a4:34:1b:b7:7c:a5:f9:0f:1c:c1:72:33:
01:89:4a:f8:dd:46:9e:2f:4e:2f:6c:d8:8a:c7:af:
34:8d:25:e6:65:d0:ce:d6:bd:01:ef:b9:c1:d7:f4:
f0:97:47:65:6c:98:c0:26:54:23:20:2a:bb:56:7f:
59:a0:8f:0e:d7:20:0e:86:a7:46:a9:63:57:be:44:
66:28:c6:5b:42:c2:00:51:56:81:a3:ee:37:8e:db:
b5:4c:3c:85:ed:42:08:7f:5b:ae:23:80:42:01:28:
bf:75:c5:74:52:41:5b:a9:75:37:32:9c:7a:a9:3e:
21:1b:13:60:47:9b:8c:26:cb:d1:49:ce:2e:e5:de:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4A:DF:B2:4B:81:6D:22:EE:AD:CB:A0:7E:98:5D:4B:F0:52:97:B2
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:aa:00:32:25:05:44:e3:93:0e:96:ed:a0:18:12:e4:6f:90:
9d:a4:67:26:91:cd:d1:68:19:f7:37:17:bc:22:24:73:3c:16:
9c:e7:55:4b:64:0a:e2:97:b7:9a:79:6c:e3:f4:92:2b:d7:32:
2a:64:82:fa:fd:98:3e:bb:dd:11:46:4d:10:31:de:c1:1c:c6:
ad:0c:95:a5:0f:55:52:08:62:cb:2d:c2:1d:67:81:d9:1a:25:
23:ce:70:6d:b1:89:81:93:72:5e:92:0f:8d:39:43:6a:56:a1:
3a:79:70:aa:b5:0f:af:a0:82:dc:71:31:95:f1:2a:bd:82:cf:
0f:e9:ab:b0:28:48:1b:d3:5d:5a:e6:6b:db:12:78:e2:b0:e5:
da:27:aa:8d:5a:60:ab:00:60:42:f6:52:0c:c4:78:ed:68:ed:
ab:f8:b1:aa:ce:15:35:08:2d:59:75:41:49:4b:c0:ef:de:76:
d2:64:21:67:fe:63:93:e3:f1:98:f2:e1:0c:10:01:66:cf:8e:
0b:08:28:06:8c:31:9a:a2:09:62:ef:76:8d:48:be:7c:0d:6c:
d9:93:06:f5:8b:fe:3f:a0:6d:1c:2a:2d:59:23:31:c4:6b:1b:
fd:37:56:9d:c7:e1:fe:cc:78:dc:29:57:63:dd:e0:b2:5e:05:
95:6e:8a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:56:11 2025 by rpki-client