Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
File: 9px-uGIkrbOECIR97kz8TEADrV0.mft (raw, json)
Hash identifier: YvKrNuwrg3+GoMmLRW6ggy+AnAnUv3aeMNKPjhuzq6E=
Subject key identifier: 57:A1:FC:CF:5B:5C:82:A6:BF:70:27:59:D4:24:5E:72:4D:EF:03:1A
Authority key identifier: F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D
Certificate issuer: /CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
Certificate serial: 01974BC4A45B698360896D88BFA1E4F99447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
Manifest number: 0DDC
Signing time: Sat 07 Jun 2025 19:01:07 +0000
Manifest this update: Sat 07 Jun 2025 19:01:07 +0000
Manifest next update: Sun 08 Jun 2025 19:01:07 +0000
Files and hashes: 1: 9px-uGIkrbOECIR97kz8TEADrV0.crl (hash: 7FmP3n7gzuDG/YnmkrRfIoIbZsyFjUui7zUQjee3wko=)
2: YdnfzNQU6p17HNy9eA1Hw53deFE.roa (hash: 2Yw8oKr6x9VyLBdNC/o5JNz+v9yyH0gMbVBwfTOD/GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:a4:5b:69:83:60:89:6d:88:bf:a1:e4:f9:94:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
Validity
Not Before: Jun 7 19:01:07 2025 GMT
Not After : Jun 8 19:01:07 2025 GMT
Subject: CN=57a1fccf5b5c82a6bf702759d4245e724def031a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:bf:4a:f1:d0:1e:d9:be:ba:94:37:db:22:
8d:4b:08:5c:78:8c:4d:13:23:3b:e8:ee:cb:1e:7f:
11:dc:c6:bb:ab:eb:b9:e3:af:33:93:03:9f:84:5f:
e0:93:c2:d2:6a:83:2e:7c:90:5c:f0:37:e9:8c:be:
2f:62:1c:04:4c:a2:e1:51:9f:24:3c:81:36:d9:f5:
ed:8e:fb:d1:d3:f9:1a:6d:d1:2f:74:44:94:89:a9:
9c:76:c9:56:87:ce:dc:1a:4d:f9:b2:3d:2f:94:79:
be:d2:1e:14:35:97:72:db:3b:86:b6:60:58:18:50:
3b:fc:08:a7:76:bc:9b:94:84:2d:81:41:97:04:b8:
1f:71:dd:eb:be:18:79:90:24:b3:36:38:10:05:24:
48:a0:06:b2:1a:14:4d:16:8a:0f:22:6a:c8:ed:74:
80:ff:c1:74:21:04:73:e8:50:3e:48:2e:ba:00:41:
e4:8f:b1:27:db:a6:dc:2a:44:81:05:0f:fa:cf:08:
91:ff:26:20:b3:dc:f0:e2:b0:9b:45:18:33:af:bb:
d2:a3:af:71:38:9d:6a:bc:2a:11:7a:a4:80:04:42:
f0:5f:de:4b:46:b9:0f:85:28:c8:8b:a5:1c:90:b7:
fa:53:8e:ca:a0:af:56:56:93:40:f2:a2:81:c2:7e:
be:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A1:FC:CF:5B:5C:82:A6:BF:70:27:59:D4:24:5E:72:4D:EF:03:1A
X509v3 Authority Key Identifier:
keyid:F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:92:71:47:e1:0c:c7:47:f4:0f:79:70:b2:65:e2:44:ac:64:
67:15:52:c8:9a:14:65:a3:b6:9b:cd:df:bf:a3:10:0b:bf:69:
40:21:18:bd:54:fc:d3:b4:01:70:c7:4d:ea:8f:7b:c3:8a:54:
55:32:eb:94:93:4e:80:7b:07:39:ce:e0:fd:c6:aa:59:1b:be:
26:c7:e8:6f:d8:d7:7d:61:d3:59:81:59:5b:75:2b:fe:a1:30:
43:b8:5d:4f:ca:09:a9:05:87:74:96:42:d3:2d:44:d5:f4:53:
e9:cd:9d:1f:a3:ae:00:81:2b:79:b1:50:22:f8:ab:79:57:dc:
8e:49:8d:05:95:ab:e0:10:f1:39:a4:4c:97:af:cf:8f:25:b4:
8c:cb:69:12:a8:41:71:a6:24:90:cb:ac:e1:cb:f9:eb:6b:da:
07:31:87:2a:3e:7f:93:ff:23:39:18:26:d6:b4:6b:1b:43:5f:
fd:42:0e:9d:9f:13:a6:e5:ad:6d:5c:a1:b0:3f:dc:61:12:c3:
d6:7e:17:32:4b:2f:6d:80:e6:bd:a5:bc:eb:34:ec:79:e6:b2:
f0:98:c4:f2:9f:a2:f6:aa:4f:86:d0:10:82:85:fb:91:fc:b1:
20:bd:c0:63:07:3d:fb:86:e5:f3:15:e3:09:4e:cf:87:a9:91:
51:6f:47:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:14:59 2025 by rpki-client