Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
File: 9_38M32M4OBe9_e3KvJ-thzUcDc.mft (raw, json)
Hash identifier: C31GbvOw23AhjsGEGPNX5d5BQJnBpk4U9b3XhIpu2Sc=
Subject key identifier: 16:89:50:4E:5B:31:D5:EB:60:42:4D:CF:0A:F1:0A:F0:EB:CE:5D:2B
Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
Certificate issuer: /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Certificate serial: 01974A0C9E46A7E23A2D52D7AE8A27F2750E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 11:00:30 +0000
Manifest this update: Sat 07 Jun 2025 11:00:30 +0000
Manifest next update: Sun 08 Jun 2025 11:00:30 +0000
Files and hashes: 1: 9_38M32M4OBe9_e3KvJ-thzUcDc.crl (hash: Wa0klMf1nKSM6KOa/MwB3NEnXPiGWvxyjupJyZmD1CU=)
2: fCHzIX3PF5IX4vTpqhp12B4ANgE.roa (hash: 56hifj5pI9Tipd1DppPjnl4odiFdle6vhykV6J1DFck=)
3: g7wXivy3539LtXi_LoOdOIVbDx8.roa (hash: +5hEq5/dYKWbMKLOksJvPEMNRWQVyUVWOFEW1b0Bio8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:9e:46:a7:e2:3a:2d:52:d7:ae:8a:27:f2:75:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Validity
Not Before: Jun 7 11:00:30 2025 GMT
Not After : Jun 8 11:00:30 2025 GMT
Subject: CN=1689504e5b31d5eb60424dcf0af10af0ebce5d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:9b:a9:53:3f:13:d1:0f:b2:16:b1:a2:80:
66:45:b4:d4:25:fa:63:33:59:49:01:24:67:50:37:
49:37:67:74:2c:64:6d:7e:af:9a:4b:75:85:ae:f4:
3f:db:a0:d8:8b:e9:8c:0d:3a:bd:9b:d6:64:94:06:
c7:0c:98:f9:24:81:0c:a6:1a:3a:52:db:de:16:77:
2f:38:c2:f7:63:27:69:b6:56:b3:1b:5b:6b:f0:07:
d6:92:49:52:0b:2d:b3:45:96:b7:61:b2:1e:84:9b:
c0:60:89:91:fa:31:14:51:02:81:e0:94:95:fd:ee:
de:89:d5:b6:eb:f8:de:bb:36:af:ef:c5:ed:84:2b:
c8:50:92:06:e1:d8:3e:5b:6a:a5:4b:ff:3a:c9:24:
24:d5:ef:64:4f:eb:5b:94:18:71:12:be:13:de:0f:
fa:1a:6f:06:c9:35:b2:00:c2:d3:27:f1:cb:10:16:
3f:64:89:64:b3:d1:01:ce:91:64:07:33:61:d6:30:
c7:e4:82:2b:6c:0c:86:c3:63:c4:77:fe:18:07:30:
ff:ea:51:a7:31:08:af:99:87:cb:df:3f:a7:5a:1d:
3f:ec:23:1b:7a:50:4a:8a:33:c0:9a:c0:73:4d:8c:
ba:c6:43:96:a5:bc:c7:8f:14:58:fb:e2:b9:76:9a:
91:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:89:50:4E:5B:31:D5:EB:60:42:4D:CF:0A:F1:0A:F0:EB:CE:5D:2B
X509v3 Authority Key Identifier:
keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e3:ff:ec:84:e8:22:ae:2a:00:e4:32:18:4b:42:11:61:a7:
f7:1a:06:f1:ec:48:14:11:7d:cd:9f:6b:ed:57:07:b0:2b:86:
4e:b6:31:82:86:c3:bb:34:a0:44:db:cb:2b:88:01:8e:64:f4:
a8:d3:7c:4a:0b:ef:3e:28:82:2f:0c:53:a3:52:61:fb:d4:4f:
c0:cc:46:49:2c:26:1c:71:8e:83:ca:9f:c4:cc:69:07:88:73:
b9:23:b2:eb:c6:12:bd:28:65:50:dd:42:56:8f:7d:03:3d:46:
35:ce:d0:00:d1:70:13:d0:e8:86:91:2c:0b:b4:06:46:42:bb:
85:8f:cb:24:ba:82:75:f3:01:88:e9:50:3c:3e:6c:1b:dc:66:
38:1b:cc:2a:5b:84:a6:72:2d:80:e2:34:34:fe:61:e8:4d:87:
24:99:c5:c3:a3:16:75:0f:a8:2a:14:a9:a1:54:b3:6f:3b:a6:
19:a6:31:bb:d5:af:74:ef:db:42:de:6b:eb:b8:72:7c:26:1e:
4d:c8:46:1a:c7:ff:91:aa:f0:16:c7:e9:db:d5:ab:fe:f6:4f:
63:59:83:00:5d:0d:6d:41:54:90:21:5b:d4:02:02:7b:a7:ea:
75:27:55:53:e9:c5:ad:80:91:a9:ea:45:e8:ec:d9:06:e1:de:
7f:cc:ed:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:34:21 2025 by rpki-client