Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
File: 9Ma33VF1vo23oFIvfU5BxcQsayk.mft (raw, json)
Hash identifier: qEK/vkjQhXnoGqMEmDIeE4TccQR1ZQQ+VrlEk64N0N0=
Subject key identifier: A4:02:A5:02:FC:45:D3:E5:FA:F7:CC:36:A1:A4:1D:7E:FE:4F:6A:01
Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
Certificate issuer: /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Certificate serial: 0197530FB565961367F63473A2026978B7EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
Manifest number: 120C
Signing time: Mon 09 Jun 2025 05:00:27 +0000
Manifest this update: Mon 09 Jun 2025 05:00:27 +0000
Manifest next update: Tue 10 Jun 2025 05:00:27 +0000
Files and hashes: 1: 9Ma33VF1vo23oFIvfU5BxcQsayk.crl (hash: AQI8qfCzF8+ZZG574UjmFChWQGk6pJ2Rfia4TIJrHlM=)
2: s6yEWsPPsE_jYMdwsDZUmjp8J4Q.roa (hash: 7aHvy02DcE2m3coLCeXBwZHNGiDhkrKOoU9qLdUUABA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:0f:b5:65:96:13:67:f6:34:73:a2:02:69:78:b7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Validity
Not Before: Jun 9 05:00:27 2025 GMT
Not After : Jun 10 05:00:27 2025 GMT
Subject: CN=a402a502fc45d3e5faf7cc36a1a41d7efe4f6a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:d2:40:94:cc:e7:09:d1:c1:73:8e:0d:05:
ac:63:bc:94:fd:fa:04:d8:42:c0:1a:a0:86:75:ec:
cc:83:a7:b0:b5:6e:78:36:21:6f:f0:b4:45:7b:04:
4e:17:18:41:b2:68:c1:ed:d9:f0:e9:70:29:7f:42:
03:b2:78:f9:82:2f:7a:bc:02:88:8c:e5:47:04:ba:
8e:3a:05:86:e5:54:d4:23:10:36:db:6c:61:a3:bf:
89:a7:17:f8:9d:27:9e:16:76:99:26:6b:41:fa:64:
8c:0a:df:f9:50:e1:3f:a1:8b:04:8d:59:88:de:a3:
1d:f6:1c:92:7a:58:21:3f:db:07:26:ef:f4:bd:ab:
19:29:75:f6:76:93:36:78:25:a5:ea:e3:ef:32:ba:
83:a9:74:ba:00:f4:71:00:69:d0:88:af:51:fe:6f:
19:ea:8c:7a:cc:fb:3f:93:bb:f5:2b:8e:6b:28:a0:
67:14:d9:94:53:cd:ef:75:36:9c:fd:89:d4:97:28:
ba:7f:ac:fc:e3:2a:ac:c4:80:26:2b:db:45:f0:a3:
18:41:1a:cd:cf:96:0b:34:fa:42:cf:11:2a:d2:42:
94:af:69:4a:7b:ee:7d:8f:90:71:6f:27:56:eb:69:
e7:46:fd:a3:b5:11:e7:72:82:e9:f3:49:c7:f1:59:
d0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:02:A5:02:FC:45:D3:E5:FA:F7:CC:36:A1:A4:1D:7E:FE:4F:6A:01
X509v3 Authority Key Identifier:
keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c1:68:a9:e3:0d:3d:9f:30:8a:d0:6a:86:72:53:f4:7f:7b:
d3:87:c5:e9:96:a8:97:48:8d:86:65:d7:5e:83:7d:9c:1c:84:
2b:ae:93:92:62:1f:d8:6a:d7:20:c6:83:c0:8d:ba:08:47:e5:
12:1d:ee:2a:94:57:49:f9:2d:77:ac:16:89:9f:78:a6:c0:05:
b6:25:5b:bc:2e:23:41:44:42:d3:79:ba:1a:35:9c:66:31:a7:
fe:58:85:08:43:b9:c3:79:2c:1e:c3:1f:51:96:17:00:de:11:
cd:fc:ff:7f:b5:c7:aa:94:3f:f0:15:24:37:22:a0:2c:d7:db:
65:56:25:d9:e9:83:03:f6:25:d8:0f:99:35:75:86:87:ed:a2:
f3:e9:41:cb:13:ab:31:fc:e8:a1:e7:ae:69:d7:88:29:b1:91:
7f:fa:d7:a0:b2:97:53:44:ca:73:44:d1:82:92:54:4b:22:a0:
ea:0b:9b:67:73:29:ba:69:56:fe:7e:ae:93:8f:55:ee:c4:9a:
ce:a5:75:da:c6:d5:df:ea:02:f0:38:76:30:97:7a:f8:ab:21:
22:ed:55:1c:69:73:bc:d8:4d:c8:85:df:9f:e3:19:fc:c6:11:
11:3b:5e:7b:97:4c:ec:fc:48:24:1a:65:be:3d:c8:a7:8f:52:
cd:d6:1c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:04:05 2025 by rpki-client