Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
File: 1-c9m7XQoo55j8NJzYDf0McQao08.mft (raw, json)
Hash identifier: Y+O/oJrSDII5fOVwHouwVcMGYUaEmAbymSqYjAG4wdg=
Subject key identifier: 38:9E:22:79:41:0A:C8:E7:A2:88:F0:18:9F:9F:FE:A3:BF:36:2E:09
Authority key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
Certificate issuer: /CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Certificate serial: 01976CCF718F49C477AAD4C63E7A3B64ADF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 05:00:23 +0000
Manifest this update: Sat 14 Jun 2025 05:00:23 +0000
Manifest next update: Sun 15 Jun 2025 05:00:23 +0000
Files and hashes: 1: 1-c9m7XQoo55j8NJzYDf0McQao08.crl (hash: cLfKVGCDyz5SsNPif7MHbXFRmu9hBxvrknSYK/goqu0=)
2: rbOZFLBJLeiBgSg-ywSTHEPc89w.roa (hash: Wz1ZKiJOk56RIdFfsa2AALc0JqTjfQEXp/iXAbjA7+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:71:8f:49:c4:77:aa:d4:c6:3e:7a:3b:64:ad:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Validity
Not Before: Jun 14 05:00:23 2025 GMT
Not After : Jun 15 05:00:23 2025 GMT
Subject: CN=389e2279410ac8e7a288f0189f9ffea3bf362e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:eb:38:ec:3a:2b:b6:a0:4c:9c:1b:7c:d3:2b:
4b:7a:c9:bf:73:8c:11:08:06:77:98:a2:a8:02:bb:
4f:d6:85:b3:2b:09:25:4c:87:7b:fe:90:c3:c9:af:
f1:6b:61:8a:8c:5b:e6:3f:3d:20:2d:83:d4:2f:cb:
f3:aa:c7:61:6f:82:c9:3c:12:bc:8a:9f:eb:4e:71:
08:f0:fa:59:32:62:34:b5:e6:76:5d:1c:dc:3a:66:
b7:a8:31:73:58:78:03:fa:51:ff:6a:08:9a:56:78:
b1:b4:c4:98:5f:63:7b:dc:a9:0f:fc:aa:36:ab:3d:
0b:e0:5e:c0:92:e2:f6:24:95:d4:c0:da:2d:d9:00:
45:00:00:6a:f4:4d:fc:da:ab:ae:09:b8:70:14:d6:
25:c2:ae:f8:fe:4e:9f:19:8f:e6:2c:fa:08:74:6f:
ae:84:05:e1:e9:33:e1:89:6d:99:17:ac:a6:05:02:
3d:f3:a5:b1:3f:3a:66:7d:dd:ed:d2:26:df:70:98:
2b:48:b4:29:61:71:cb:12:5d:be:34:09:db:f1:03:
5b:c9:17:ae:bc:99:9a:67:bb:86:73:f4:6a:8c:21:
63:24:ca:b4:93:ac:7e:f3:17:98:06:33:0c:42:8f:
59:12:df:60:c2:3b:f2:dd:19:32:cd:98:3e:8f:cf:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9E:22:79:41:0A:C8:E7:A2:88:F0:18:9F:9F:FE:A3:BF:36:2E:09
X509v3 Authority Key Identifier:
keyid:F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4d:00:5f:24:91:3c:32:20:01:87:c7:11:02:b2:ce:f8:e5:
c9:3d:a2:5b:28:8c:d2:bb:64:cd:b2:39:16:ac:d4:cb:9b:76:
f2:2b:9c:ab:49:27:25:1c:48:f0:9f:4e:43:6c:0d:4d:b7:3f:
ef:8e:2f:b2:61:db:4b:29:9c:f9:31:46:96:56:d0:cc:b2:b8:
8d:a2:ab:ed:39:f4:70:64:77:67:61:21:07:28:57:be:cb:dc:
29:f3:a0:e2:39:70:1d:5e:71:ba:30:9d:6d:a4:d3:5b:48:d4:
03:ab:fd:d8:54:fa:5d:7b:56:5f:c6:4f:23:d9:65:eb:4f:35:
15:ea:21:92:43:c9:7a:47:f4:73:91:b7:d0:11:21:41:90:e0:
4c:a3:e7:f8:a8:27:be:28:80:1f:77:dc:7c:5f:5a:5d:86:0b:
40:25:57:ce:4e:b5:99:20:72:bd:89:d5:37:b4:4b:5f:61:b0:
05:40:77:54:d3:91:ec:3f:42:10:77:4e:39:f9:b8:0b:f8:8c:
5b:04:8f:f9:51:23:b6:6c:5c:eb:1f:d9:3f:a7:2e:88:c8:2b:
cc:76:2d:19:2a:fb:d6:f6:ab:ba:ee:b2:08:83:82:7a:94:4d:
82:b3:70:2b:52:9f:c7:8f:04:d9:16:a5:40:3a:36:b6:d7:17:
6f:79:9a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:30:41 2025 by rpki-client