Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
File: 9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft (raw, json)
Hash identifier: NrMc686yo7opT75wQTMu3RDknh5339j2cS9PhjbDthM=
Subject key identifier: 36:72:F4:39:72:89:29:4E:9C:73:4E:70:AB:4C:6C:85:AF:26:A3:BF
Authority key identifier: F7:AF:76:98:9E:D4:64:FD:9A:54:89:FF:F7:FB:98:CC:2D:2F:93:E4
Certificate issuer: /CN=f7af76989ed464fd9a5489fff7fb98cc2d2f93e4
Certificate serial: 01974FA12D176846C234B534E483420EBEBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
Manifest number: 0C9C
Signing time: Sun 08 Jun 2025 13:00:52 +0000
Manifest this update: Sun 08 Jun 2025 13:00:52 +0000
Manifest next update: Mon 09 Jun 2025 13:00:52 +0000
Files and hashes: 1: 9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl (hash: P85iGj3BBIMD2+GDv/Gk5/q8YWDDr67GZGpdf2MMTzQ=)
2: ebpSJwwODthJSAtEhWxsuE5jmWc.roa (hash: DHoxuM9A5djnyMyGDG3UGPu6tBxqwYzj6AbU5sL1Pg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:2d:17:68:46:c2:34:b5:34:e4:83:42:0e:be:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7af76989ed464fd9a5489fff7fb98cc2d2f93e4
Validity
Not Before: Jun 8 13:00:52 2025 GMT
Not After : Jun 9 13:00:52 2025 GMT
Subject: CN=3672f4397289294e9c734e70ab4c6c85af26a3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:9f:d7:d9:80:cc:0a:2a:c0:3d:9d:4a:fb:
46:79:73:2f:92:5f:6b:1a:74:bb:1d:12:79:ca:f3:
51:8d:39:68:1d:cc:7d:b0:ff:87:bb:be:af:72:68:
fa:4c:a2:59:30:b0:e5:5c:bb:a7:1b:87:bf:98:bc:
1b:0b:9a:ef:28:e3:b7:02:3e:d1:6b:32:26:d5:a9:
69:be:f4:bb:9a:b0:a8:b5:b6:d5:4c:df:52:38:cd:
40:90:98:eb:38:89:96:02:68:b9:38:f6:03:c6:d5:
39:a0:72:6e:73:6b:5c:8e:aa:30:64:5b:7b:e4:80:
33:c3:44:31:dc:80:f0:2f:19:63:46:9b:db:a6:4c:
56:5a:71:60:1d:c1:dd:5f:09:8f:c3:8e:8d:2e:c4:
c3:57:30:29:31:37:92:09:ca:39:0a:f7:13:00:8d:
31:c0:f2:d0:a9:ce:81:90:9e:d2:60:c3:aa:24:54:
f1:e7:b0:98:5e:3c:5b:7f:0a:8f:a4:96:a3:2f:04:
38:f6:c0:9b:fa:d9:cb:4a:c1:ad:0a:d8:53:84:6a:
0a:a0:d1:19:14:38:6c:35:60:88:67:9e:0e:04:85:
6f:34:94:71:55:7b:8a:ba:4e:31:f0:3f:64:dd:fe:
77:65:87:e6:27:ef:c3:11:f4:c8:78:27:4a:3d:04:
09:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:72:F4:39:72:89:29:4E:9C:73:4E:70:AB:4C:6C:85:AF:26:A3:BF
X509v3 Authority Key Identifier:
keyid:F7:AF:76:98:9E:D4:64:FD:9A:54:89:FF:F7:FB:98:CC:2D:2F:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:91:88:31:c3:26:6d:92:bd:8a:1c:cc:51:2d:09:78:5a:de:
5b:a8:ef:80:3c:d0:47:03:b3:98:8a:17:33:ed:cd:a1:71:b2:
9f:ba:ff:79:24:d4:38:fa:36:34:ea:2c:5b:58:12:16:df:84:
56:23:36:c3:18:47:b5:1b:a1:94:81:11:53:a3:4d:c8:94:e5:
4f:67:b8:96:84:c0:db:ee:5f:94:e1:b0:85:49:fc:05:a4:37:
a4:00:30:c0:dc:87:13:d6:11:2f:70:52:0f:b0:ae:d1:fc:f1:
fa:69:5d:67:67:db:2f:7e:ed:44:3d:98:77:7a:84:92:f6:7b:
92:43:8b:a8:d5:2b:3b:06:ce:fd:87:3e:05:3c:f1:a0:21:65:
5e:55:ee:b8:86:e5:0c:fa:c8:d9:63:5f:98:2f:2d:aa:dc:86:
67:5e:82:db:26:ec:35:34:19:b2:57:ee:41:7c:b4:73:70:48:
6b:dd:94:c4:01:61:43:97:e2:8e:ac:0b:3e:98:1c:64:a5:5e:
83:79:da:35:44:ca:d2:c1:c1:ac:f4:a3:51:df:05:45:61:ef:
e1:57:9f:56:20:ba:ec:e8:d5:1c:39:47:ab:3d:37:ef:8f:e4:
b3:4e:43:4b:6c:28:24:91:e2:ea:3a:e2:2a:6b:fc:6f:de:ac:
41:84:8b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:15:28 2025 by rpki-client