Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
File: k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft (raw, json)
Hash identifier: GBRyqf3/MkEKoe2dZOtQ4HOjURfV7rpXmh57ZRibEB0=
Subject key identifier: F5:AB:D7:91:3B:F9:46:69:39:DA:C7:78:F4:88:92:EF:AA:F0:3D:03
Authority key identifier: 93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
Certificate issuer: /CN=93d43d499868091bbdc47d95aee1c9099f005620
Certificate serial: 019754230DCF67E2B67DCE0026800D01E0D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 10:01:12 +0000
Manifest this update: Mon 09 Jun 2025 10:01:12 +0000
Manifest next update: Tue 10 Jun 2025 10:01:12 +0000
Files and hashes: 1: d_f-2basXF4ecUjEUuL7_QGvdV8.roa (hash: 3qi4PJf12FWilDaOg+5R4nsdnVGnK/XQkSLQfanFNGo=)
2: k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl (hash: PQ7yWpDA2ohnHBmPBTHvXKvAcFf0uJlX655YZmEcdno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:23:0d:cf:67:e2:b6:7d:ce:00:26:80:0d:01:e0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d43d499868091bbdc47d95aee1c9099f005620
Validity
Not Before: Jun 9 10:01:12 2025 GMT
Not After : Jun 10 10:01:12 2025 GMT
Subject: CN=f5abd7913bf9466939dac778f48892efaaf03d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:a3:d8:cf:19:34:86:ad:d9:a2:d3:80:3d:
88:61:12:68:0d:c2:0d:4a:58:a5:84:b8:32:9d:ca:
25:a0:a4:68:c5:74:a5:ad:4e:03:f1:35:0b:f5:fe:
fb:61:2b:35:6e:77:c4:1b:fd:69:9d:34:1e:a4:68:
53:e2:00:9a:3a:63:d0:6c:58:87:f7:74:cc:d7:9b:
9a:d7:da:6c:6a:a5:d2:ee:04:bf:14:a3:9c:c9:da:
08:92:ef:a3:73:4e:65:b4:45:fc:1c:5e:51:99:3d:
d2:96:20:9a:54:ab:7a:2f:c4:aa:bd:e7:3a:6e:06:
c0:dd:5c:b1:14:d0:c5:b0:5e:a8:93:db:0b:2e:ae:
24:f6:65:3b:8a:ef:ed:ee:66:5c:8b:bb:2d:a1:eb:
75:57:e0:8a:64:93:d0:01:57:f2:8d:c3:58:1f:2e:
3f:34:55:74:7f:68:5f:20:a6:6d:39:c0:a7:bf:bc:
ee:49:bc:b9:27:d4:b5:45:68:ab:bc:29:1a:fd:88:
37:59:bd:e0:e4:54:4c:94:49:55:88:e2:92:08:73:
e4:29:e8:15:2f:ab:1d:16:05:36:15:21:cd:cf:87:
a3:a4:f2:78:0c:68:1c:b0:38:aa:2a:8c:d6:99:78:
20:fa:59:43:b9:2c:c4:3b:cf:c8:c5:1e:2d:70:46:
e7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AB:D7:91:3B:F9:46:69:39:DA:C7:78:F4:88:92:EF:AA:F0:3D:03
X509v3 Authority Key Identifier:
keyid:93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d6:b9:f5:10:a3:ac:9a:cb:2e:de:69:c7:59:36:bf:93:03:
cd:4c:31:53:1f:d3:77:84:4f:76:08:c8:22:9d:e0:6c:ad:ce:
9e:d0:53:c5:96:b8:60:72:03:b9:66:d3:2f:6a:c9:f0:96:a6:
10:c2:4e:9b:88:ea:2f:3e:b5:4b:ba:b4:f4:ad:c6:55:c2:eb:
ab:6f:9f:59:22:f2:94:c3:41:72:7d:cc:01:41:9c:18:0a:d1:
1c:34:32:61:2b:ea:40:24:17:e5:2f:21:5d:9c:92:b2:bc:25:
78:41:86:02:04:06:eb:c3:2e:ad:2c:14:30:e6:e1:3e:31:90:
ae:12:be:b8:ab:79:3e:ff:f0:31:d8:de:05:e4:4f:15:80:81:
7d:42:75:d2:d8:2c:c7:10:34:34:06:69:aa:94:b8:ec:71:b5:
d8:5c:78:5c:0a:bd:c2:67:00:02:66:a1:cf:49:11:44:b8:af:
7d:df:f5:45:a3:51:f0:10:83:b3:ff:24:c7:b2:4e:fc:b6:1c:
12:84:4f:13:1e:51:24:37:a4:1b:be:d3:f0:21:6a:0a:75:26:
a2:8b:91:4b:a4:6c:15:34:60:84:57:df:9e:c5:04:aa:ce:86:
c3:15:b4:a3:10:b5:2e:98:fa:44:22:fe:bd:24:47:ba:6a:58:
a9:63:e8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:42:19 2025 by rpki-client