Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
File: 9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json)
Hash identifier: ibhodpGEM/79yExTa/sIaRAlzd/jT+X9siJ8/5R19SE=
Subject key identifier: 65:88:51:41:00:94:17:C0:5E:9E:18:B5:CC:54:B0:9A:0C:86:57:5A
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial: 019759B70F6A617CAD7CA859497D5707A37C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
Manifest number: 0CA0
Signing time: Tue 10 Jun 2025 12:00:58 +0000
Manifest this update: Tue 10 Jun 2025 12:00:58 +0000
Manifest next update: Wed 11 Jun 2025 12:00:58 +0000
Files and hashes: 1: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: EkUME0cSpndZVButQlqyrMdP7bUO8uTcycakVMmpO3w=)
2: khAk69GaviX3ISVPskdgmXYxHg0.roa (hash: iZg+JNU8yAUj+GbVfYYrGDVbFREqgvj716gjoOSNlMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:b7:0f:6a:61:7c:ad:7c:a8:59:49:7d:57:07:a3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Validity
Not Before: Jun 10 12:00:58 2025 GMT
Not After : Jun 11 12:00:58 2025 GMT
Subject: CN=65885141009417c05e9e18b5cc54b09a0c86575a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:e1:51:12:f4:b5:f4:ee:5d:9f:4d:fa:8c:
eb:7f:3e:c9:89:95:5a:71:75:df:7e:28:fd:06:47:
0a:ed:d8:4a:f1:f8:83:39:e4:9d:f0:ff:42:b6:30:
67:8e:83:b1:04:30:9b:2e:ec:6a:06:8d:fb:fc:94:
62:33:b4:78:b0:8a:e8:ca:5b:6f:9d:1f:e5:50:37:
db:34:cf:39:0b:e3:57:2e:ee:a9:13:4b:43:51:3d:
17:07:bf:62:43:a1:02:5e:20:02:2b:5d:bb:73:b5:
7d:8a:af:a6:80:de:f5:f3:c3:b5:ef:af:3c:1f:8e:
99:85:7b:16:2c:98:bf:1f:66:44:64:8a:9b:d2:8c:
97:db:4d:04:e6:44:50:7d:82:53:9c:4a:83:e4:8a:
5e:a2:78:9d:94:10:29:60:5f:45:bb:29:1d:5b:3a:
2e:50:86:59:85:22:6e:f0:a7:3d:63:f6:ef:a3:84:
64:0b:2b:1f:f9:9a:6e:75:5b:52:bc:50:d2:8a:73:
c8:81:a5:34:be:7f:45:03:71:13:13:4f:d2:ae:81:
b0:15:73:8e:4b:72:c3:01:99:5b:78:31:1c:32:c8:
2f:fe:50:d1:2e:d2:98:01:b2:ba:e6:28:1d:ee:09:
d2:11:1d:c7:aa:d3:9d:db:c6:51:b2:86:3c:a3:7b:
89:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:88:51:41:00:94:17:C0:5E:9E:18:B5:CC:54:B0:9A:0C:86:57:5A
X509v3 Authority Key Identifier:
keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c8:94:a4:57:5a:bb:50:98:67:cf:ba:96:54:64:c7:b3:cc:
7d:7b:1b:a5:24:1f:c6:b0:00:c9:d8:18:cd:c3:af:66:75:58:
c6:14:88:95:87:3b:3a:2a:1a:df:9e:35:83:a0:c1:f9:1f:d3:
32:be:23:80:e4:1a:5e:c3:7d:f0:e9:3f:69:63:86:2e:d9:e2:
92:d2:b2:9b:68:69:f0:43:43:fb:4e:af:34:4f:f0:f3:34:0e:
33:57:15:f2:b7:0a:1a:8b:6c:6c:10:dd:7c:04:c7:05:10:22:
7a:7c:3d:b0:83:8a:76:61:5a:a6:cc:30:64:e2:bd:91:8a:92:
4a:4d:f2:f9:02:76:52:89:7d:7b:ef:0a:1d:2e:03:01:c1:6c:
0e:05:21:2e:a9:88:b4:19:80:dd:4d:05:13:a5:74:b3:25:55:
b1:9f:10:47:ef:d7:81:da:7b:fd:c5:bb:0b:66:5f:e6:f8:53:
62:9b:cc:2c:3c:a0:a5:51:2a:ad:ef:5f:31:b2:1e:ee:96:25:
a2:fc:39:15:1d:d6:7d:27:0b:db:bb:31:78:37:37:09:84:cf:
79:64:1f:c5:50:f9:8a:89:15:5d:96:33:80:14:a3:03:b6:3d:
69:38:13:70:5e:36:71:95:ce:46:95:4a:f1:fc:8c:43:81:e2:
d9:c0:c7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:15:31 2025 by rpki-client