Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json)
Hash identifier: EjPqnqILGwYXLadIMbhoSnNd2a561T99McTXwoQzwlQ=
Subject key identifier: 39:CA:F8:1E:9A:65:8C:46:85:F0:2B:1E:81:40:1C:01:78:1C:36:95
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial: 0197530FFB16E3E5DDF572D4E4B4C5B30124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
Manifest number: 1580
Signing time: Mon 09 Jun 2025 05:00:45 +0000
Manifest this update: Mon 09 Jun 2025 05:00:45 +0000
Manifest next update: Tue 10 Jun 2025 05:00:45 +0000
Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: L/TLxLX3gPkPtStCsvwFtH47q2MU7PQajcyth+rjLfQ=)
2: fGeYBTeIqUGlzWkeYCJZuXTV3NA.roa (hash: NVWcI0sfwe5T87MmDN6gYp0EndXzVclJkGdW6buL8Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:0f:fb:16:e3:e5:dd:f5:72:d4:e4:b4:c5:b3:01:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Validity
Not Before: Jun 9 05:00:45 2025 GMT
Not After : Jun 10 05:00:45 2025 GMT
Subject: CN=39caf81e9a658c4685f02b1e81401c01781c3695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a2:93:36:cd:ff:72:b4:8d:f1:77:98:6d:ad:
e0:72:62:eb:d1:0e:a9:10:d8:87:41:a7:57:65:5b:
60:5c:32:c1:5b:7c:6c:28:40:27:ba:1b:8b:e8:2e:
08:08:0e:df:4a:c9:7a:69:71:53:c8:60:01:05:63:
ab:79:7d:d6:16:1f:51:c2:60:f7:24:d8:a4:8e:0a:
1f:35:b7:88:8c:e9:81:6a:28:71:dd:a6:8d:02:10:
47:af:b4:dc:83:31:ab:ef:ba:72:29:b7:bf:02:94:
82:60:c9:78:c7:05:a3:66:bd:e9:e4:f6:89:4c:22:
97:ae:bd:c5:02:4d:7b:71:ed:f8:65:8a:ba:77:9d:
63:9c:5c:99:c6:c8:30:05:a6:74:49:57:b4:c4:3b:
5c:d8:5e:12:55:58:55:90:23:45:49:36:de:ef:8f:
58:82:a3:6b:65:ac:67:37:ab:0c:40:bc:ab:8a:04:
07:a5:5a:dd:3c:7f:39:7e:83:0d:4a:12:88:9b:73:
41:4d:94:d4:a9:04:7f:eb:f5:73:b0:ea:d6:84:9e:
3e:1f:64:e1:51:7f:cd:fb:8a:73:bd:3c:19:11:8b:
0a:8c:d0:29:6d:7b:f8:5b:7a:a7:fe:6a:cb:dc:f4:
e6:38:51:a5:44:97:cc:d2:c6:76:d5:21:07:6c:2f:
79:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CA:F8:1E:9A:65:8C:46:85:F0:2B:1E:81:40:1C:01:78:1C:36:95
X509v3 Authority Key Identifier:
keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:64:a9:b8:30:b9:8e:c0:cd:95:cf:14:41:20:44:2c:f1:6b:
5e:d1:d9:ea:1d:b8:8a:bf:21:ac:8e:84:1a:20:16:6c:8f:12:
ec:c3:88:86:83:03:5e:44:e3:96:8f:52:bc:62:b9:e4:ff:8f:
fa:30:a8:0d:b3:10:10:40:7d:79:66:78:7d:40:81:ea:f5:61:
20:e7:e3:a9:d9:2d:5d:86:0c:54:bb:79:ee:02:0a:d9:4b:61:
9b:b9:09:64:65:f2:e0:43:4b:24:b3:dc:7d:b2:a6:25:58:83:
d9:ee:7d:0e:d8:35:d1:0e:b0:13:7b:a5:23:5d:55:0f:bb:c4:
2a:55:8f:06:a4:1a:04:de:12:b9:ba:40:ff:18:73:ba:a3:ea:
a6:e7:5e:47:c4:26:b5:b8:ef:2d:61:c2:d7:14:48:08:5c:26:
e7:27:36:0c:9a:5a:3b:de:da:b8:2c:13:f0:36:00:dd:0c:bf:
d5:8b:8a:06:a8:47:2f:ac:94:e4:d8:50:e2:87:06:b9:a7:73:
3c:90:ab:21:d4:ef:97:44:6b:fa:ac:05:d9:49:4c:a1:37:22:
c9:cb:34:d5:f0:3a:26:de:60:46:f5:9e:af:cb:53:e6:87:8a:
a8:88:da:39:59:fe:2c:da:99:5c:91:9e:a9:96:86:77:5e:25:
15:5f:8c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:27:20 2025 by rpki-client