Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
File: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft (raw, json)
Hash identifier: 3Z0R4Frqq3+9vI3WTXrYbd7ikWXDqJ21rtxdIKquyCA=
Subject key identifier: CF:44:35:26:3E:65:B7:14:ED:CD:C3:9F:F3:43:BA:49:B8:1D:1C:3B
Authority key identifier: F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
Certificate issuer: /CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Certificate serial: 019751C628B907589B93B9585271F7669490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
Manifest number: 09F5
Signing time: Sun 08 Jun 2025 23:00:30 +0000
Manifest this update: Sun 08 Jun 2025 23:00:30 +0000
Manifest next update: Mon 09 Jun 2025 23:00:30 +0000
Files and hashes: 1: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl (hash: MquEvAQjMM2t+O2t32HmU6ZbNUgELmZ8OBvSLUOau/k=)
2: JFSPkHUXD6uekiRT14OFUV3SRJ8.roa (hash: d66KNl4Y3abt7U8S0mMyC51IECrPTJ0e2/YrGhdvTTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:28:b9:07:58:9b:93:b9:58:52:71:f7:66:94:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Validity
Not Before: Jun 8 23:00:30 2025 GMT
Not After : Jun 9 23:00:30 2025 GMT
Subject: CN=cf4435263e65b714edcdc39ff343ba49b81d1c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cd:d7:11:19:f4:20:5a:f9:7c:bb:32:26:98:
25:2a:a6:9f:f8:ac:46:6f:a0:e0:4c:2f:a9:c0:b8:
b3:c0:c6:dd:8f:8c:73:7e:d4:dc:82:19:0e:f8:f1:
d4:c6:c5:82:66:0d:a6:a2:2d:7e:26:13:88:65:85:
cc:19:82:81:98:f9:4a:8e:04:2d:60:d0:1d:54:fb:
cd:11:4a:59:f6:95:57:38:1c:5d:e8:e6:8c:9d:a1:
9a:4c:2b:a5:2a:f7:97:24:13:6a:df:77:dc:35:ce:
ed:3b:3a:7d:87:2e:2c:9c:2f:c2:b3:41:85:03:72:
15:6e:37:3a:23:0a:f2:20:59:fb:8d:9c:4c:94:ee:
58:4d:69:d9:03:9a:25:6e:f3:df:2f:33:d0:a2:74:
6d:30:d5:f5:63:9f:b3:69:25:82:d6:aa:a4:6e:af:
eb:61:5a:7b:d0:63:94:f1:49:97:99:42:e3:61:77:
07:20:bd:17:2b:fd:99:b6:82:6a:4d:93:cb:28:42:
cb:7d:29:12:08:25:39:ea:d3:2b:24:c6:7d:ac:60:
94:24:d3:41:bd:3b:1c:70:cb:36:66:bc:d5:cf:6a:
6e:e5:7a:be:fc:28:0f:dd:a5:fd:10:5a:e8:7b:ff:
aa:84:8b:e8:95:d8:ba:58:9e:9b:2d:44:49:4c:8a:
6a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:44:35:26:3E:65:B7:14:ED:CD:C3:9F:F3:43:BA:49:B8:1D:1C:3B
X509v3 Authority Key Identifier:
keyid:F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ce:eb:38:27:d0:d0:b4:0d:74:5a:89:f0:ba:55:d3:3f:a1:
a4:9d:ff:f8:2b:f4:06:f9:c8:80:28:37:ac:2a:26:f6:42:60:
be:d0:21:25:de:18:2e:9e:50:7b:8a:10:1b:a0:f6:05:f7:ef:
94:5e:9a:16:d9:69:b3:c1:a0:ca:62:5c:f3:39:59:70:d2:26:
a0:a9:51:cd:90:4f:57:4e:2b:79:1c:4a:8b:76:5c:aa:73:c3:
b8:34:58:c5:3d:77:e7:88:20:0c:4d:75:be:73:8b:57:30:6f:
7f:bc:08:83:1e:76:98:18:57:d2:0d:26:f5:4d:40:28:2a:4b:
ce:68:28:50:58:d6:69:3b:4f:2f:47:38:f8:78:cf:45:76:57:
84:89:ce:02:4f:12:8c:39:62:a0:4b:35:55:6c:41:96:ab:0e:
e8:4e:58:11:03:67:94:b8:14:f0:e5:c3:aa:48:d0:07:d0:08:
66:01:33:b8:2a:fa:98:f4:df:82:99:bb:de:57:30:08:b6:53:
9a:7b:cc:9a:f9:35:14:4e:68:23:ae:3f:2d:63:b5:ce:f2:de:
b2:7d:74:27:a8:18:b6:70:b5:ff:98:58:40:e7:1a:fa:42:64:
24:6a:0a:6f:a2:fc:40:01:29:78:66:fe:d6:78:25:51:92:1b:
60:05:66:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:52:28 2025 by rpki-client