Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
File: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft (raw, json)
Hash identifier: aSZj1s7ZyzHh1YfPYgp55FBAvZlnAWCvyGYIht/RsoE=
Subject key identifier: AF:54:99:58:15:0B:43:C6:AF:68:3D:4F:3E:E0:D8:85:2B:DE:B6:18
Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
Certificate issuer: /CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Certificate serial: 01973A62B8938A6EB77654B4B73D7FBF1A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
Manifest number: 1019
Signing time: Wed 04 Jun 2025 10:00:37 +0000
Manifest this update: Wed 04 Jun 2025 10:00:37 +0000
Manifest next update: Thu 05 Jun 2025 10:00:37 +0000
Files and hashes: 1: LsBMcdJw5xS8I63MgOSx7GP6YGo.roa (hash: eclfzXKV6RSN6OrnDOnk9OvTtMq4JN86esMRl2QpoQY=)
2: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl (hash: Vw+TnG9fszwRFzIodQ7wsEL9HcZafrNAqzMiBo6J9l8=)
3: RP5jpn-uKD4VZqtBiaKoc8atoPw.roa (hash: QDcnUril7uwVWWdbILh+cVbAEXM+2Qt6gMgTdP6yAQo=)
4: hP4RlSdcYGNnTpuPiY_-lw9F7k8.roa (hash: C3TpjMqyfvy/eCoQ7B0XWPy+vgrcOa/QV9L4/p4cn7c=)
5: ufd9I1sTMu_-cmgS_4wyO_C2LOU.roa (hash: t8YD8zi5UguFlovOm8R2XRjIBtMUKaWMQ8CNRGn6mYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:62:b8:93:8a:6e:b7:76:54:b4:b7:3d:7f:bf:1a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Validity
Not Before: Jun 4 10:00:37 2025 GMT
Not After : Jun 5 10:00:37 2025 GMT
Subject: CN=af549958150b43c6af683d4f3ee0d8852bdeb618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:4a:9a:a6:d1:a1:ed:55:91:9a:97:f7:c5:
83:29:40:85:04:2d:08:0b:5a:c0:31:5e:26:e2:4c:
c4:13:26:13:85:d0:56:7c:68:3c:f7:77:6c:13:26:
0c:08:cb:99:d4:20:7c:82:7f:0e:a6:51:cc:65:6c:
d6:af:ec:2f:71:75:8c:a2:31:08:b8:30:62:1b:24:
d7:8d:58:ef:81:52:86:71:29:5e:b5:51:0e:f9:47:
a1:8d:8a:31:90:ee:66:d0:da:11:5e:b5:d9:b9:33:
a2:a6:06:e5:69:74:5e:a6:c5:20:6a:b5:48:7a:e2:
f9:5d:e1:65:ff:4a:4b:c5:6e:98:aa:42:d0:08:c8:
11:9d:77:8b:0b:10:c8:1b:b3:50:8f:41:db:7e:a3:
94:c5:e4:db:e9:66:16:cf:fd:29:99:aa:9f:2d:43:
6c:a7:d5:77:3c:71:f9:af:39:31:c5:82:ee:21:fb:
31:c5:bd:4d:0c:9a:f0:cb:b4:98:99:32:34:bb:e8:
7b:df:e2:49:b4:fb:2f:2a:c7:4d:4d:9e:75:99:ba:
c4:aa:a1:ca:40:68:2b:dc:9c:87:11:b8:09:01:90:
0e:1c:99:c3:54:22:71:43:4d:aa:ae:d5:40:32:29:
bc:c5:7b:0b:73:96:33:32:fd:d5:5b:45:f2:22:29:
e3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:54:99:58:15:0B:43:C6:AF:68:3D:4F:3E:E0:D8:85:2B:DE:B6:18
X509v3 Authority Key Identifier:
keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ad:b9:54:74:ca:2c:79:5d:db:1f:ef:0f:96:9f:b7:72:2b:
74:aa:21:a4:58:29:3d:cd:ad:45:01:d5:23:9e:0f:c0:37:f3:
ab:30:46:08:d1:0a:55:67:9f:a0:eb:1e:fa:c3:8d:4a:62:f1:
18:d2:6c:5f:34:1f:9f:2b:77:25:26:77:44:89:b9:36:1b:96:
22:5e:d9:23:17:eb:5d:c9:93:50:bb:99:7b:df:57:e7:3f:9a:
11:3e:3b:13:11:2d:52:82:a1:c2:f9:09:f5:15:ba:96:3b:b6:
f5:5a:dd:48:7c:93:18:57:26:3d:9e:80:3e:52:e4:a4:06:ab:
43:a9:c1:11:96:d6:e1:82:ee:0c:0c:77:23:d9:fe:79:78:1b:
5e:45:d5:89:63:c8:44:c1:8b:23:32:ce:37:af:35:59:0b:a7:
e3:ce:7b:c4:03:f4:a5:e1:d0:df:86:db:70:e2:f6:5d:18:9f:
6f:c4:32:87:ea:b1:80:8e:d8:65:2d:6f:f7:32:dc:d3:db:30:
da:9b:29:e7:60:64:cd:5a:fb:51:4b:56:0d:22:e1:1d:c1:d6:
c7:ee:87:3e:f6:41:b7:d3:b1:95:b4:dd:71:40:4c:7e:8d:5f:
cd:89:48:b2:f1:4c:83:53:07:e5:83:2d:69:f0:9c:34:b0:77:
a6:75:a9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:18:57 2025 by rpki-client