Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
File: 9SMu6AX3jlku_yzKYVORCeWjRn0.mft (raw, json)
Hash identifier: zHXHrs95T8DzXMaNCico/ZL8ztq9Iuq1J+jy11nqUyw=
Subject key identifier: 89:18:E7:26:36:2A:FB:19:23:52:23:00:0B:3F:CA:99:1A:BC:3E:01
Authority key identifier: F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D
Certificate issuer: /CN=f5232ee805f78e592eff2cca61539109e5a3467d
Certificate serial: 01974D0DB6976D718B245034EDE675751F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
Manifest number: 03AC
Signing time: Sun 08 Jun 2025 01:00:33 +0000
Manifest this update: Sun 08 Jun 2025 01:00:33 +0000
Manifest next update: Mon 09 Jun 2025 01:00:33 +0000
Files and hashes: 1: 9SMu6AX3jlku_yzKYVORCeWjRn0.crl (hash: m0xaxUQL+HWNLCRbHwd0MKcVre+upH1Mic/iqHm+poM=)
2: mUlVQVQA_6DZI0Ul4lrD7MOPmCA.roa (hash: KLYv7255AIBTzhsrUwU5ETXppAJnyWMdZ4HLY5/fahk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:b6:97:6d:71:8b:24:50:34:ed:e6:75:75:1f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5232ee805f78e592eff2cca61539109e5a3467d
Validity
Not Before: Jun 8 01:00:33 2025 GMT
Not After : Jun 9 01:00:33 2025 GMT
Subject: CN=8918e726362afb19235223000b3fca991abc3e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:55:3f:ea:93:a4:f6:f3:60:fe:c6:e4:4b:2b:
62:4b:50:33:ef:0a:fc:a7:5b:89:56:1f:73:93:2f:
87:b6:22:cc:e6:20:a1:44:a3:25:9e:2b:2b:4a:15:
1e:08:90:f4:92:6d:e5:33:d8:47:5f:50:3f:5d:01:
3a:1f:4c:48:08:c7:28:2d:da:e6:d6:10:f5:4e:5e:
f5:4b:bc:30:df:e5:70:de:26:8a:e3:6e:4b:6c:c4:
33:b7:cd:f1:0e:01:51:da:6d:18:15:90:d7:ee:4f:
fa:a8:7b:5e:31:7f:a3:59:79:ef:09:65:08:a7:31:
30:48:3c:9c:57:a3:bf:80:8e:c0:43:e9:ee:af:76:
d5:be:1f:b2:e7:21:d6:2b:f7:0e:03:e5:40:b2:d9:
06:e7:46:56:e3:91:2c:d8:d1:b4:d5:53:ce:ef:0a:
66:cb:33:d3:c5:62:ff:27:58:7a:b0:84:b7:7c:07:
20:07:7e:f9:e1:5d:79:ce:51:1e:76:c7:0e:a1:36:
8d:d1:50:09:7d:a9:ff:83:71:a8:f8:3a:db:d9:81:
ec:11:37:ee:dc:a7:e3:1e:f4:8f:3b:cc:7e:8f:99:
b8:bd:c0:32:9b:a1:f8:33:c4:06:27:86:b6:ef:c5:
35:89:74:d8:d0:3b:92:87:7f:df:bc:06:a0:b6:98:
f5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:18:E7:26:36:2A:FB:19:23:52:23:00:0B:3F:CA:99:1A:BC:3E:01
X509v3 Authority Key Identifier:
keyid:F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ab:64:a0:9e:7b:d6:66:73:53:71:6f:dd:c4:42:a2:a8:4d:
33:c4:00:f5:0f:b0:87:c9:7c:41:12:e4:39:1e:b5:fc:57:08:
4c:02:f4:51:d9:62:a9:0c:5c:1f:90:42:8a:82:b0:36:36:51:
3e:ce:b2:af:0f:a7:3b:fa:b9:32:84:cd:70:89:17:24:c9:41:
21:46:f7:1a:ea:e9:b2:68:90:73:7c:7d:b9:14:7b:cb:bb:99:
17:8f:b7:bb:ab:58:0b:4e:0b:9d:f9:71:a4:1f:ed:7b:78:34:
56:ee:83:d9:89:55:6b:19:6e:2b:90:9b:07:e0:83:a9:61:fb:
1a:3a:77:3a:be:c4:6f:83:d4:32:8d:b6:22:ac:b2:1a:e1:28:
ac:e4:74:57:93:bd:08:c3:a1:d3:95:59:81:6b:83:5f:b0:af:
d4:f9:13:f5:62:55:2b:9d:40:17:4e:81:72:15:1f:7b:75:d3:
41:28:07:f0:14:88:4d:8f:b8:fc:06:a1:8a:bd:1f:2a:9a:98:
bb:8f:3c:e5:5e:a0:ec:2e:13:72:b9:3d:3a:a5:86:81:5e:c2:
4f:16:cb:1d:6d:be:e2:35:df:08:c1:09:94:44:8f:52:7d:80:
1e:c3:ee:dd:66:ac:0c:cf:e9:97:8f:91:33:79:fc:56:74:f0:
16:fc:07:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:07:26 2025 by rpki-client