Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
File: 1-c9m7XQoo55j8NJzYDf0McQao08.mft (raw, json)
Hash identifier: 04x4lZ5plpfeqmcWb84Lk0k5BmOoF+p1zCCj8FKjL6A=
Subject key identifier: AA:9A:0E:70:61:DB:56:BB:79:24:92:38:15:B6:5E:9A:9F:B7:0D:AD
Authority key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
Certificate issuer: /CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Certificate serial: 01975D5C9302E59419BFDBFB5FCF06194002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
Manifest number: 1587
Signing time: Wed 11 Jun 2025 05:00:37 +0000
Manifest this update: Wed 11 Jun 2025 05:00:37 +0000
Manifest next update: Thu 12 Jun 2025 05:00:37 +0000
Files and hashes: 1: 1-c9m7XQoo55j8NJzYDf0McQao08.crl (hash: hhLFBJQws4XQfIjs/QrpyCsmFd0eq58m5/LaAyE9vsg=)
2: rbOZFLBJLeiBgSg-ywSTHEPc89w.roa (hash: Wz1ZKiJOk56RIdFfsa2AALc0JqTjfQEXp/iXAbjA7+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:5c:93:02:e5:94:19:bf:db:fb:5f:cf:06:19:40:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Validity
Not Before: Jun 11 05:00:37 2025 GMT
Not After : Jun 12 05:00:37 2025 GMT
Subject: CN=aa9a0e7061db56bb7924923815b65e9a9fb70dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b2:88:57:de:21:cd:6a:15:72:ba:e2:eb:49:
21:31:3f:ca:42:00:ac:6f:28:c2:90:81:e3:66:b4:
08:c2:0a:7d:7c:e0:a1:4e:13:cb:0b:08:09:24:ed:
59:16:9e:bd:f3:8b:a1:14:ef:4d:85:8a:b4:ea:9a:
e7:14:a0:dc:0f:e8:d1:55:f7:8c:c8:b2:46:cf:07:
5a:1d:d3:35:3d:28:4b:57:be:fc:4d:a0:f8:d1:1f:
66:59:5f:0e:74:62:9a:83:6c:c5:41:ec:5c:68:fc:
ff:59:f0:07:b0:9f:49:4d:85:a2:c5:b5:89:b1:95:
12:9a:a4:db:dc:ee:92:0a:2a:fe:0a:d7:ab:23:9f:
8d:cd:a3:a2:71:a1:59:31:9e:3d:0c:99:aa:67:61:
8b:f0:df:99:54:2e:48:b1:ca:4a:af:e8:ff:80:bb:
de:19:62:77:b0:87:41:71:3e:d8:3c:57:55:19:7f:
5a:cc:9f:2c:a0:da:be:56:d9:5e:af:4d:ea:65:f9:
f1:71:da:e1:88:9e:25:62:47:93:be:ce:b8:85:66:
d8:57:2d:60:93:0d:4a:79:7a:f8:08:37:90:d8:82:
3b:55:78:13:5c:61:19:2c:70:6c:95:aa:3c:67:c8:
38:70:aa:9d:b7:57:a4:b2:5f:96:f5:25:28:3d:a4:
89:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9A:0E:70:61:DB:56:BB:79:24:92:38:15:B6:5E:9A:9F:B7:0D:AD
X509v3 Authority Key Identifier:
keyid:F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:46:10:31:af:41:66:b0:6a:9a:c2:73:6a:15:bf:37:44:d0:
b9:46:a5:d2:1d:d9:5e:05:ac:95:fa:89:f1:07:cb:cd:89:5e:
e4:68:94:8d:50:75:ed:13:08:da:01:75:a1:df:a3:48:86:d8:
c0:f6:39:6e:25:0a:9a:b1:d6:db:b7:1d:4b:6c:21:0f:86:d7:
a7:96:45:5a:0c:27:6b:32:b4:94:a3:89:6e:1d:50:fe:2d:28:
e1:91:f0:bf:d6:e8:62:7e:fe:23:5c:8a:a8:7e:d2:30:d2:68:
01:51:dc:0b:c1:b4:99:a7:54:8f:f6:65:e6:6f:1b:de:e6:d2:
95:2e:d8:84:45:4e:89:1d:d4:5e:67:00:7c:69:48:3e:d9:dc:
b0:3e:4a:fa:57:bc:29:2d:17:4f:8b:62:c8:78:75:2c:0b:4a:
35:8f:44:fb:1c:98:43:27:ce:dd:d8:e6:b2:ff:49:aa:ca:31:
1f:1b:54:10:ce:69:4a:8a:86:ec:40:ed:4e:a0:b2:ef:7c:8a:
f0:4e:b4:11:05:28:f0:91:29:0f:1e:f3:dc:0b:e9:83:df:ec:
c7:4f:3f:be:65:fe:d3:15:d5:27:46:b2:44:c5:4d:bc:96:c5:
df:d7:88:ee:92:7b:e1:25:2a:22:75:5a:32:71:9b:2a:57:d0:
ff:97:68:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:30:11 2025 by rpki-client