Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: pWXTg1CzlOqgunR42ctzDvQNHKjw2aAcYevLiHr0+vM=
Subject key identifier: DB:4D:54:DC:32:44:4D:BE:46:EB:C0:B7:53:15:A2:DB:36:DA:D4:7C
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 01974AB1407C675560322E7E9ABDA3CB6118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 14:00:19 +0000
Manifest this update: Sat 07 Jun 2025 14:00:19 +0000
Manifest next update: Sun 08 Jun 2025 14:00:19 +0000
Files and hashes: 1: 1-q7Os-ag3LFo7MgF8ZfJghgVfgc.roa (hash: AkqR6A52qHHQpKh+paJEwg0UF7zLNR6BUjxPJEPXBuc=)
2: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: wq3tXLDpFLRNFbz/MIiXGHcQBjX9NeGGPxGljWg3t2U=)
3: X2IXuMlNGoAcrvL_ko43_QrEupI.roa (hash: tb+ePbzsjMAZQXem+oOzrudhMucziUuIqtpyErKmVRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:40:7c:67:55:60:32:2e:7e:9a:bd:a3:cb:61:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Jun 7 14:00:19 2025 GMT
Not After : Jun 8 14:00:19 2025 GMT
Subject: CN=db4d54dc32444dbe46ebc0b75315a2db36dad47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:f4:aa:6d:12:25:6a:19:96:23:de:d0:59:
2c:4a:b9:93:c2:0b:ac:59:e0:13:0b:8a:ab:10:bf:
df:79:50:df:c5:e6:39:db:31:de:d5:91:1a:78:1b:
08:86:e0:e3:ee:e0:1b:df:e8:08:83:2c:a4:7f:0b:
26:80:93:71:75:0a:16:b6:51:9f:73:de:93:af:c7:
46:a6:2a:4d:d7:db:e0:de:c5:f9:83:7f:d4:d6:86:
f3:e6:da:d5:cc:88:a4:d1:35:d4:da:96:1a:e9:be:
5e:c7:e4:ba:41:25:2e:37:13:3f:ae:73:7f:69:04:
66:59:32:c8:04:6b:de:11:67:f4:70:89:63:c5:3b:
77:b0:a8:9e:b7:a1:ca:4c:df:b0:79:06:59:6f:c3:
75:4e:1e:3b:4e:0d:0b:73:9f:e1:ff:72:c5:73:08:
91:73:39:c4:94:1f:62:33:5b:ab:46:ae:8a:15:b6:
e6:53:c4:cb:c9:09:b5:2a:e4:fd:b8:cc:a4:18:51:
71:3a:8e:42:6d:69:5a:f0:8c:ad:a2:69:9e:1b:76:
50:11:82:00:7a:78:45:d7:2c:05:45:3e:cb:bd:d5:
3c:1f:45:87:90:ad:13:a8:c9:3b:94:c2:f3:74:2b:
c0:74:65:74:b7:0e:ca:2d:8d:82:39:ab:7a:1a:a9:
6a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4D:54:DC:32:44:4D:BE:46:EB:C0:B7:53:15:A2:DB:36:DA:D4:7C
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:4e:38:cc:39:55:82:34:e2:1e:e6:22:27:8e:0d:85:b9:8b:
ad:4e:38:0d:a7:9d:25:d7:69:19:6b:22:2f:5c:c7:dc:97:f0:
7f:64:55:56:e9:40:8e:b6:7e:38:e3:bf:09:7e:e3:69:4f:d4:
7c:4c:5e:19:ab:ff:98:0d:84:d6:67:33:e7:ad:d3:f8:3d:f7:
61:82:e8:9e:35:69:bb:c9:37:0d:2d:3b:2f:8a:60:51:6c:23:
32:56:c4:5b:18:a6:7e:48:a5:2c:a3:a9:62:8e:ca:d5:46:1b:
cf:0d:6e:56:d5:8e:1d:ba:e0:a0:a4:ac:40:d3:df:b0:62:34:
07:79:14:b5:f9:06:5a:18:24:5d:fd:e6:5a:46:44:e9:27:c4:
8f:ff:da:21:80:ce:2d:0c:fd:15:3f:9f:a6:c8:17:55:98:f8:
5c:fd:29:13:84:88:e8:c0:60:e8:08:c0:c9:4e:5f:7c:df:d7:
7b:92:a3:c5:51:01:02:4a:71:72:5a:5b:b3:3e:f8:ce:42:fc:
96:ac:a1:31:2e:a9:ed:66:65:0f:a4:79:04:e7:43:38:68:21:
9f:8c:b2:cc:04:5e:13:df:ba:1a:f2:f4:58:97:1f:77:18:7d:
56:5f:4a:a9:cb:dc:89:37:fd:5b:6b:7f:02:12:bf:9a:33:69:
e6:ee:20:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:04:24 2025 by rpki-client