Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
File: 9q2iC9mLq990w9Vs14raZu2HoUg.mft (raw, json)
Hash identifier: GmzGJqtb8axARSHFJvonrAefViXDbKY0ZHAmSAM/Y48=
Subject key identifier: EC:33:B7:88:96:E2:18:8B:25:60:EA:95:CE:93:02:C9:CD:9D:74:59
Authority key identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
Certificate issuer: /CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Certificate serial: 01974CD71406036ECC5949A170775DBEF8F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
Manifest number: 0944
Signing time: Sun 08 Jun 2025 00:00:53 +0000
Manifest this update: Sun 08 Jun 2025 00:00:53 +0000
Manifest next update: Mon 09 Jun 2025 00:00:53 +0000
Files and hashes: 1: 9q2iC9mLq990w9Vs14raZu2HoUg.crl (hash: mVYZXzlRolFDidrH4tAssuaFYphAP5Vh4awmKcoPOKE=)
2: iIjePRipe22Xt3i-0k7Htqe5OiY.roa (hash: ZRSy/isYMR/Q32/3YEImTWCaf6Cp+8bokFU0sdfABNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:14:06:03:6e:cc:59:49:a1:70:77:5d:be:f8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Validity
Not Before: Jun 8 00:00:53 2025 GMT
Not After : Jun 9 00:00:53 2025 GMT
Subject: CN=ec33b78896e2188b2560ea95ce9302c9cd9d7459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:48:0e:3c:d5:85:a1:8d:1b:2c:78:a9:f8:
80:2f:ba:da:77:25:db:b4:c0:d5:fe:ee:d6:34:3e:
6a:4d:db:82:44:af:b2:ea:38:f0:21:1f:ab:91:02:
5f:bb:e1:f4:db:86:e1:74:8b:d4:10:a7:27:51:6e:
2c:9b:00:8c:40:c6:18:36:1e:8a:7a:68:a5:d9:73:
f6:f3:fb:ce:fb:25:51:e5:81:62:7b:73:4b:9f:d0:
c5:b1:8d:94:d4:bf:25:b8:bd:e5:23:35:4b:ef:e8:
fb:7c:16:1f:83:f9:b9:7f:6d:99:96:91:c3:3c:8a:
bc:ad:33:ba:5a:54:bb:77:95:13:99:54:ac:2a:67:
9c:c7:c0:d8:e3:c5:ff:50:f0:bd:f1:c9:a2:9d:ee:
3f:40:96:be:e3:a8:9e:59:bf:b2:71:b1:d7:a1:f7:
a9:1e:a8:96:ea:56:1e:dd:af:9c:db:79:f1:1b:4b:
5a:dd:81:2c:10:ae:c6:79:60:ad:3e:ae:9e:3f:47:
80:0e:5a:d5:b9:8e:41:14:aa:6b:23:a4:ea:70:0b:
1b:c5:f9:68:29:29:4a:cd:8b:d0:e5:2e:e7:5a:57:
96:2b:1b:68:0f:9b:f5:7a:2e:6b:6a:12:67:8a:40:
5b:0d:92:6b:3b:33:12:a6:cf:f6:04:fc:f7:66:46:
58:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:33:B7:88:96:E2:18:8B:25:60:EA:95:CE:93:02:C9:CD:9D:74:59
X509v3 Authority Key Identifier:
keyid:F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:20:c7:75:77:dc:7b:4e:0c:6e:d4:03:b8:09:bc:dd:c2:d7:
f9:2b:fb:19:7e:5a:92:cc:37:8f:ec:89:4a:e7:21:4d:43:58:
33:ee:e6:f0:13:17:dd:36:1b:c8:6d:2b:fd:90:d0:a5:f7:a3:
ec:33:24:68:f2:67:90:ba:21:c7:9d:e9:d4:1f:81:40:65:1f:
ce:d0:19:8a:dd:b5:65:0d:f4:a1:5a:12:76:49:1f:b6:50:7b:
85:ed:28:1a:bc:17:06:62:54:3a:e1:d0:a1:92:b8:10:1b:13:
b9:25:da:5e:83:00:99:b3:d3:41:fa:ce:d5:fe:79:0b:ea:1a:
e5:33:3e:bf:65:41:cd:93:93:de:ba:5c:8a:17:fb:bb:e2:bb:
91:f3:cc:18:10:73:72:c7:3d:b6:43:24:64:c7:2d:61:19:b5:
39:ad:bb:5a:27:04:14:fb:89:7f:5c:88:fa:62:50:71:b5:9e:
e8:45:0b:e3:f5:27:c4:9e:f6:13:2e:2f:81:4c:17:69:fe:a4:
38:4e:8a:be:33:00:b0:01:5b:db:94:9d:41:bf:4c:f8:90:8c:
4a:f8:d1:19:bb:77:94:54:45:21:da:1b:0a:30:88:c0:7d:0e:
16:6a:da:9e:70:41:83:00:84:cc:94:82:e1:83:71:86:6c:17:
20:d3:b4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:13:16 2025 by rpki-client