Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
File: M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft (raw, json)
Hash identifier: DYZ+V3vzFZRT8nphkELWb4CZa8q1mzgXwk0ycC3oN34=
Subject key identifier: 6A:9D:C9:0C:F9:B3:13:B3:AC:3D:D5:F8:22:13:56:F0:D2:E1:22:92
Authority key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
Certificate issuer: /CN=33d2d885477d0280264e458eb071f45d91691520
Certificate serial: 019748C3451590D472893DE7F4F08F0D7434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
Manifest number: 14E2
Signing time: Sat 07 Jun 2025 05:00:46 +0000
Manifest this update: Sat 07 Jun 2025 05:00:46 +0000
Manifest next update: Sun 08 Jun 2025 05:00:46 +0000
Files and hashes: 1: M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl (hash: 7wP6WwcZFOmAcMTxAPobrolLjw3tksgkcAbjpkiuQOA=)
2: sK3XQwXTL-mqzvI7V9STOh1mdbY.roa (hash: VWu2Ff9vBiTjacxsepFTzMs84GfrYTJ/rH9rluBzGtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:45:15:90:d4:72:89:3d:e7:f4:f0:8f:0d:74:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d2d885477d0280264e458eb071f45d91691520
Validity
Not Before: Jun 7 05:00:46 2025 GMT
Not After : Jun 8 05:00:46 2025 GMT
Subject: CN=6a9dc90cf9b313b3ac3dd5f8221356f0d2e12292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8a:db:6e:55:74:bf:9d:8e:fd:35:a6:1a:07:
05:b5:45:6e:1a:0e:17:c1:78:cb:f3:1b:d6:c8:c5:
15:bd:d1:a3:55:2a:db:c4:5c:6e:25:db:9d:f1:f8:
ad:26:7d:ce:f7:2c:4f:b6:27:53:3f:7c:9c:ea:7f:
c0:53:18:a9:3c:5a:00:88:e6:87:25:6e:4c:6d:c9:
22:f7:ac:11:fd:01:f1:7b:ea:f1:c0:7e:ea:7a:fb:
97:67:81:92:5b:f1:01:9c:1a:69:5d:0a:2d:54:91:
e1:d3:0d:ff:10:2c:57:49:e4:ed:8a:51:a2:ab:5b:
25:d0:51:16:2a:7b:8b:df:4e:0b:f5:92:d3:3c:03:
ec:af:6d:c8:e4:18:e2:e5:b8:54:a3:6f:9d:e0:0b:
c9:dc:fa:74:7f:a5:45:01:d0:90:4a:7c:34:82:e7:
b9:d2:22:c2:9e:d7:1e:04:7e:9d:ee:d1:0e:18:49:
aa:38:48:a9:35:d5:ec:68:6a:67:45:cb:1e:41:59:
2a:80:f6:9c:e9:31:7d:c4:f9:48:e6:c5:35:74:06:
51:93:43:64:17:67:d6:d6:97:ef:e5:99:0f:ef:45:
63:cd:c3:6e:f2:a9:95:0e:2a:5f:05:ec:ee:5b:56:
4f:a6:62:b6:9d:35:e4:53:22:7a:0a:7f:e5:1a:be:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9D:C9:0C:F9:B3:13:B3:AC:3D:D5:F8:22:13:56:F0:D2:E1:22:92
X509v3 Authority Key Identifier:
keyid:33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9d:ed:13:68:b8:8f:76:af:15:22:45:d9:63:a8:1d:93:4e:
46:df:61:12:7b:85:cb:26:e2:2b:02:93:0f:21:b1:6f:97:27:
6e:1b:b2:4e:1d:36:39:4f:45:89:87:c5:c6:d9:e6:d5:c4:2e:
29:06:55:5b:58:85:e0:e6:67:87:54:9d:1b:ca:b9:c2:c9:a7:
d2:c1:43:e5:7c:ec:d3:42:70:11:fa:b7:8e:1a:27:e4:fb:ec:
11:1c:a5:55:22:74:d2:16:c2:c7:3f:13:52:eb:2e:2f:5d:c3:
e3:ae:7c:9d:5e:4f:07:cc:42:b4:10:32:b9:32:14:09:28:a6:
16:e9:0e:90:d6:67:34:f5:b4:26:25:75:ab:ea:d3:01:56:1f:
a4:54:f2:5e:68:8a:b0:eb:f7:76:9e:cd:60:c1:82:f8:15:7f:
23:cf:c3:55:23:22:96:dc:e1:b5:14:33:74:0f:c6:a9:c2:d7:
39:60:66:be:4c:38:b1:f0:92:7a:f3:58:b1:03:60:51:16:c9:
8b:91:ba:0b:e3:6c:14:dc:9d:7c:86:6f:ce:3f:ec:1a:91:c3:
76:07:a8:bf:1f:15:7c:0d:e5:65:e5:de:d9:23:d5:3e:2f:bf:
04:be:d8:f6:8a:48:fc:4f:a6:6e:40:7c:4e:35:77:9e:cb:4d:
e9:95:c2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:19:17 2025 by rpki-client