Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
File: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft (raw, json)
Hash identifier: RpmqdUviCiTVmdr5ViN3eIEEZd8hyYA0j32zUrGIxRs=
Subject key identifier: F9:92:F1:51:07:B0:55:5C:90:24:2C:92:6A:B6:27:29:D0:01:A9:03
Authority key identifier: 0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
Certificate issuer: /CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Certificate serial: 019752A277819A1611456B8CD81C5D9D3D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
Manifest number: A9
Signing time: Mon 09 Jun 2025 03:01:08 +0000
Manifest this update: Mon 09 Jun 2025 03:01:08 +0000
Manifest next update: Tue 10 Jun 2025 03:01:08 +0000
Files and hashes: 1: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl (hash: cJWoupxebR1JOx7GTAXM5+Xx3e3j3N7JMWHyDrp5ANo=)
2: jcTO1fBkVXsp4y6wlcBbebFM8iw.roa (hash: NkT9ooqiKYOuDT79Rkr1WXdOvqeB/1D8TcQH5fNDnzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:77:81:9a:16:11:45:6b:8c:d8:1c:5d:9d:3d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Validity
Not Before: Jun 9 03:01:08 2025 GMT
Not After : Jun 10 03:01:08 2025 GMT
Subject: CN=f992f15107b0555c90242c926ab62729d001a903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a5:b0:38:c8:c6:39:50:16:e6:ed:a4:20:54:
1f:08:92:3a:63:b3:c9:f3:7f:16:b7:0c:4e:1d:eb:
8c:c9:0c:97:16:e1:18:3e:9f:0c:dd:ac:de:58:64:
b3:44:71:b9:fb:3c:4c:77:dc:c7:b1:c4:f3:c5:6d:
f7:34:b6:72:12:ff:67:23:a7:51:2d:29:0b:a8:1a:
12:05:1e:1a:f7:0e:cd:cb:9c:d2:0b:4f:cf:61:8e:
38:4d:46:b5:4e:51:7f:de:fc:b3:52:d1:e3:ff:d5:
1d:69:6a:b4:9d:c6:df:e2:34:f6:7a:2b:1f:c0:09:
f6:e0:8e:9d:23:e0:fe:3c:ff:34:db:c2:1e:7e:ef:
86:dd:50:5f:cf:cc:ae:c8:75:ed:6b:32:02:8e:88:
55:2e:17:eb:49:c9:a4:ba:76:82:6c:4a:88:06:e9:
8a:92:99:50:93:96:7a:1b:19:e1:c5:aa:5b:21:a9:
bb:bc:7c:42:57:99:50:f1:77:72:50:d1:46:62:3d:
34:18:05:6b:7c:45:3b:e7:53:b4:da:ec:8e:57:09:
f9:92:c3:c0:8d:fa:6c:af:b7:c4:c8:d2:76:e7:b8:
cc:7e:32:a4:1a:f6:2d:f8:37:4e:f5:d8:e3:43:36:
05:b3:30:bc:19:43:f5:a6:a2:c8:78:86:e6:5b:4e:
3a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:92:F1:51:07:B0:55:5C:90:24:2C:92:6A:B6:27:29:D0:01:A9:03
X509v3 Authority Key Identifier:
keyid:0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:35:88:49:67:c1:52:f2:9a:96:9a:92:9c:2f:eb:10:27:bf:
03:46:28:32:11:1f:bf:8e:1b:a9:65:d2:29:47:59:43:6f:7e:
2d:25:84:19:9e:24:f1:7e:81:78:e2:cc:64:1e:09:e7:e6:e1:
02:7e:df:14:8e:0e:37:c7:16:94:e1:46:9e:df:63:a3:66:b7:
ab:47:ed:6b:c6:c8:f5:a7:42:73:7a:f6:84:cf:a3:bf:86:48:
94:12:03:3c:9d:10:d0:1a:ac:88:fd:ac:f3:08:47:a9:c1:05:
23:cf:a6:01:45:76:6b:b7:c3:77:27:49:8d:f5:3b:d9:1c:89:
ae:89:66:65:fa:05:bb:be:89:7f:fa:01:b1:e2:d7:cd:88:fd:
c2:25:7a:f0:2a:2b:af:0d:27:76:4f:a7:3b:ca:d1:03:45:94:
49:55:70:71:64:cc:6c:cc:6b:ad:79:c5:b3:e3:d1:3c:9d:47:
33:bb:a4:c0:93:bf:d3:fc:7d:9c:00:0d:25:88:51:af:d0:7b:
e2:6a:82:bd:d5:16:97:f4:85:b4:ef:ea:0d:c8:29:ab:e1:af:
2c:f8:fb:95:56:49:28:72:28:be:0d:ba:6f:94:35:c8:4a:a3:
3a:82:e8:10:55:9b:98:b8:d7:94:04:a8:6a:85:6f:57:4a:97:
bc:98:4f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:30:39 2025 by rpki-client