Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
File: mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft (raw, json)
Hash identifier: IGxLtptsI584YZslnq0xghB9RgWJuR+yRiSBb1qDwgQ=
Subject key identifier: AD:89:D8:39:C1:04:55:1F:CF:6A:56:0D:6E:5E:0E:E9:92:C7:07:31
Authority key identifier: 98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
Certificate issuer: /CN=987dccf5068829329cdac51d5d190fe1089cde9e
Certificate serial: 0197542380620EDEC35C1A935C2CCA7EB57C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
Manifest number: 0E9D
Signing time: Mon 09 Jun 2025 10:01:42 +0000
Manifest this update: Mon 09 Jun 2025 10:01:42 +0000
Manifest next update: Tue 10 Jun 2025 10:01:42 +0000
Files and hashes: 1: R9XjDqsU1i45aj3QGrLZJm2Xbtw.roa (hash: eXfXK6CNN8vKlZOgITSmIbCpVEoWMFvA24LwX+sXHCg=)
2: mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl (hash: cp9jJqqXaYsHxOVDvXdhj4S4ixzKybvXA3wITz8takI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:23:80:62:0e:de:c3:5c:1a:93:5c:2c:ca:7e:b5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987dccf5068829329cdac51d5d190fe1089cde9e
Validity
Not Before: Jun 9 10:01:42 2025 GMT
Not After : Jun 10 10:01:42 2025 GMT
Subject: CN=ad89d839c104551fcf6a560d6e5e0ee992c70731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:d8:2a:8e:41:c0:f0:20:c2:2c:6a:cf:ce:
0f:da:6a:f9:2e:01:ae:c3:7d:14:4b:18:ec:56:6a:
f7:9e:ad:fd:bb:79:00:e9:ac:83:59:9c:ce:40:00:
08:82:52:06:f1:5f:36:a0:a5:b7:4f:9a:ad:5d:ae:
8e:9a:32:de:12:49:25:fc:a1:0f:3b:7b:d5:6f:09:
e0:0f:0c:5f:e9:b4:e4:10:47:b0:30:40:e2:bf:36:
b2:f5:1f:b0:06:4e:d1:42:0d:ca:24:67:a8:78:36:
8f:0d:97:42:42:38:e0:be:38:97:05:0a:3f:0d:29:
07:66:ca:cb:eb:a1:ba:e2:90:27:2c:20:bd:c0:6c:
a8:3e:0c:3d:81:73:e5:66:46:3c:e3:a3:28:ab:f9:
9f:49:f3:64:55:07:0f:6a:d8:bf:8e:0f:c6:5d:80:
ea:bd:06:65:24:74:f0:cb:5e:6a:74:a3:8f:b4:16:
ba:7f:dd:51:2f:7f:de:dd:db:77:41:5e:19:6a:b3:
1a:49:98:3a:98:73:f0:64:b5:34:46:39:c4:d8:86:
ae:df:bd:84:bd:62:22:77:64:f8:95:ee:af:05:96:
5e:19:4c:ce:72:aa:01:df:35:60:92:20:d9:39:b4:
ad:ee:14:c4:ed:78:ef:4c:10:a0:b1:88:a0:b4:ac:
74:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:89:D8:39:C1:04:55:1F:CF:6A:56:0D:6E:5E:0E:E9:92:C7:07:31
X509v3 Authority Key Identifier:
keyid:98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:03:aa:83:c0:eb:fb:e0:13:7d:6f:06:61:90:14:6a:03:c3:
1f:22:f3:dd:f4:dc:59:2f:80:25:6b:24:f2:4f:55:bc:d3:18:
80:94:dc:fc:ca:49:d6:cd:6c:7e:69:8f:c2:8d:ff:b9:b0:1e:
a0:d9:de:71:11:0c:20:7b:80:c3:14:d6:6a:ed:3f:84:4f:e6:
c4:67:ec:8b:92:13:2e:68:36:9b:a8:91:c7:1d:c9:ea:c0:5d:
c0:40:62:1c:82:30:48:9d:29:71:d1:d9:25:56:a6:f4:d1:25:
ac:76:03:56:91:23:59:85:27:d0:27:45:25:d8:52:83:8a:e3:
f1:e5:42:0f:d2:0c:61:d2:9d:62:a5:1e:ec:56:4f:ed:43:0e:
04:4e:27:76:bf:dd:ea:7b:af:85:62:23:24:48:e5:f9:9a:c2:
c9:47:cf:2b:34:71:1c:25:5f:0d:f5:44:0f:a3:5f:82:e5:43:
7b:5e:e7:9f:f5:14:ff:4b:4a:0f:a7:7a:fe:f0:5a:b4:41:90:
c0:f6:2d:35:14:8e:1b:c2:a3:91:02:b4:35:77:7d:75:c3:34:
b3:1f:55:33:39:d8:06:83:9d:11:ea:a1:55:50:ae:ad:82:79:
38:fc:21:6a:a3:15:fb:41:25:1c:08:89:0d:9a:5b:6e:20:80:
32:53:ba:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:33:05 2025 by rpki-client