Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json)
Hash identifier: RhKlGMEQD9m0BV+nC9PihmauKhURLVsZ8ImwrU9SrV0=
Subject key identifier: A2:1D:C1:7A:67:28:94:6F:9C:3D:4E:7A:90:8E:AA:54:3C:12:9E:E5
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 01974B8D3EBA1A9860DC5D0AB70B9AE3F52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 18:00:37 +0000
Manifest this update: Sat 07 Jun 2025 18:00:37 +0000
Manifest next update: Sun 08 Jun 2025 18:00:37 +0000
Files and hashes: 1: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: WTpubeKOTSEyGUW5E3LlHlAw75D5RxKLWUxwT0QDHUI=)
2: OB1GsVdt7iCzhWhmgirUwJgGaak.roa (hash: HNRDkQU9zd4iAZZaAQcAxCYiJZDSBKH3pYjhla6LGLs=)
3: WMejWLM-fXx9J5hQgJ4TNGxlL40.roa (hash: 9oO47gALmpiotO1VgFePsYnaYk2I9wrq424pEV3SiMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:3e:ba:1a:98:60:dc:5d:0a:b7:0b:9a:e3:f5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Jun 7 18:00:37 2025 GMT
Not After : Jun 8 18:00:37 2025 GMT
Subject: CN=a21dc17a6728946f9c3d4e7a908eaa543c129ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:d8:8c:aa:50:0f:6d:87:91:b6:c8:b5:10:
d2:24:f6:0c:d4:6c:cd:3d:8f:9c:ef:7d:83:d7:82:
fe:97:91:74:28:b9:0b:e2:42:59:3a:42:c5:2f:58:
e9:61:94:32:56:3b:ca:e7:b9:43:34:9c:be:54:1d:
0c:c8:c8:ef:ca:75:b2:b5:b4:30:36:04:e7:c6:37:
9f:8c:f9:10:6f:b7:ff:bb:c7:a0:f3:43:c2:1f:ee:
f1:16:17:71:50:7f:d5:38:4c:38:55:d2:c6:77:4a:
ee:7f:c7:9f:30:83:cf:a4:e9:e3:66:e5:65:10:f1:
06:f4:0e:9d:d9:74:95:47:78:2c:3f:b8:51:47:fa:
1a:73:a7:b5:dd:4b:33:f2:c2:14:a4:da:a7:a5:a9:
ca:ff:2f:0b:d0:82:4b:a5:2b:76:08:16:d7:79:58:
f7:86:72:68:fc:9f:22:e5:a3:b0:4f:8c:46:ac:fe:
bc:7d:9e:22:b3:af:c8:5e:41:d0:58:5d:16:13:8d:
e9:b1:60:ec:c3:8c:e0:df:ad:d9:a7:1a:6d:7c:0f:
c8:99:6a:55:2b:e6:aa:aa:1c:13:86:76:66:c1:30:
31:cb:47:d6:d2:89:a3:ee:33:57:a6:6b:f0:56:96:
ef:72:0f:7e:8b:07:33:52:3e:a9:67:b4:1a:aa:c9:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1D:C1:7A:67:28:94:6F:9C:3D:4E:7A:90:8E:AA:54:3C:12:9E:E5
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:03:09:74:6e:2d:5a:a1:62:ba:14:3d:bc:8f:47:ae:be:76:
e2:aa:27:79:48:84:cd:8c:09:65:94:16:6c:10:84:99:3e:0b:
bf:9d:6f:6f:2c:44:47:d4:0e:91:4c:db:76:09:bc:56:5b:e0:
df:7a:c8:a5:ec:27:02:4a:58:bf:74:9c:b4:1e:0f:91:54:b6:
14:90:9c:fa:1e:e2:f7:9d:ee:5d:f8:d6:95:d1:ee:87:39:b7:
c5:52:1c:b1:48:25:1f:74:ca:8b:c1:b1:45:4a:d0:1f:4b:e1:
04:75:0e:03:1c:56:fe:61:38:90:87:a4:62:b6:fd:ba:26:66:
72:88:db:b8:93:01:c8:f2:12:8b:47:af:51:de:be:fa:8a:ef:
88:14:e2:12:de:ee:aa:f8:8d:30:6e:b2:25:ca:ba:52:0c:77:
e6:34:06:b4:15:ef:2e:61:93:70:c2:08:d7:8c:94:4f:00:1c:
40:d3:a6:97:f8:6e:7f:81:56:a5:88:8b:cb:98:b1:61:ac:0c:
21:9c:32:43:ba:73:01:ce:e4:af:04:97:3f:05:26:1a:e5:b3:
3c:e9:fd:ee:23:13:91:e0:52:a3:5e:e2:1d:35:dc:b0:4b:48:
d5:f5:aa:76:e3:db:e7:91:da:31:ab:1f:13:c2:39:a2:4f:02:
a3:0a:72:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:29 2025 by rpki-client