Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
File: INS9SZ9YSUrA6CJjtVIKLGTWR34.mft (raw, json)
Hash identifier: ewtc0J6bEUliLfhIQ33b6QFzZO7cA1rA5LzBn/fRl5w=
Subject key identifier: 08:CE:F7:D5:47:0D:32:F1:BA:95:F4:C8:55:64:A5:3D:09:E0:B9:74
Authority key identifier: 20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
Certificate issuer: /CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Certificate serial: 019748FA3045EE069B3F0C7044B46DE11C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
Manifest number: 150E
Signing time: Sat 07 Jun 2025 06:00:45 +0000
Manifest this update: Sat 07 Jun 2025 06:00:45 +0000
Manifest next update: Sun 08 Jun 2025 06:00:45 +0000
Files and hashes: 1: INS9SZ9YSUrA6CJjtVIKLGTWR34.crl (hash: qTCuau+2H0TJh0KV8/P3rqagyGuDGfaTm74KI+uqA6U=)
2: h_lcjhsZRd-WoNkwUeJTA-cn-HU.roa (hash: MoTuYke9XnON66W6lzgS1xcgPTaCQPNgcBaF3y/k338=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:30:45:ee:06:9b:3f:0c:70:44:b4:6d:e1:1c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Validity
Not Before: Jun 7 06:00:45 2025 GMT
Not After : Jun 8 06:00:45 2025 GMT
Subject: CN=08cef7d5470d32f1ba95f4c85564a53d09e0b974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:ef:21:2c:e1:24:d7:1b:80:ea:9a:45:16:
94:90:cd:68:59:f0:30:93:25:77:ec:a3:77:d6:40:
bd:c4:4a:c4:0b:6d:2b:d7:c6:f9:30:d5:e4:19:07:
70:97:82:b4:40:6d:6d:b1:8d:cb:f2:39:66:3b:f0:
2c:f3:27:6c:70:85:6d:e2:cd:3b:bd:5a:5d:35:cc:
90:0b:a2:8e:47:e3:b8:c7:6e:e3:c1:2a:80:3a:12:
be:94:a3:8f:7c:00:5f:8a:fb:56:e6:e7:8f:39:82:
96:0e:48:7b:48:8e:de:51:53:4f:04:ee:b3:59:6b:
c0:15:da:2e:93:62:51:fe:93:e3:9c:09:dd:ad:8e:
94:06:e4:f2:8d:28:73:59:2c:79:5f:21:74:39:8b:
b0:91:e6:20:8d:29:34:d8:2e:ba:5b:4e:cd:9e:ff:
cc:57:74:05:a0:d7:d7:7f:0f:2e:28:70:91:39:fd:
ea:49:a8:9b:15:fe:d6:de:39:a6:32:82:c4:ff:06:
2a:0e:ca:bb:b7:2f:5b:d5:9e:83:ab:5e:36:0f:9d:
75:4d:70:7e:93:08:55:3e:e8:9d:c7:8c:2d:5b:ed:
67:30:6a:2c:e6:35:48:eb:19:dc:74:1b:a5:33:2a:
1a:9d:36:0b:e8:59:78:8d:a7:ad:78:cf:4e:62:84:
a5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CE:F7:D5:47:0D:32:F1:BA:95:F4:C8:55:64:A5:3D:09:E0:B9:74
X509v3 Authority Key Identifier:
keyid:20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:18:a8:43:c4:11:ee:9e:08:c6:36:0c:64:c9:5d:4b:21:f1:
7e:bb:31:21:1c:ae:ef:df:c6:91:04:cf:e8:65:2f:ac:04:4b:
22:76:b9:01:37:e1:20:00:5b:f2:3e:69:1e:02:27:82:06:d2:
a1:17:3a:6f:29:73:09:89:15:6e:a5:8f:b7:7d:4f:a3:e4:9d:
53:03:4e:06:d7:87:64:c9:a1:55:8b:e1:ee:23:cf:cf:9e:44:
e5:a5:24:56:f2:5c:2b:9e:df:59:56:85:bc:c7:ca:34:9f:e8:
cf:f7:4a:1b:21:26:2d:3f:e3:e3:48:ed:df:e2:d5:23:4c:83:
e6:e2:b9:1a:35:16:07:b0:1f:d2:80:a9:b7:79:e2:cb:8d:80:
43:c8:ba:88:07:bd:5e:36:c4:c2:f8:35:e8:ff:7e:fc:b9:9d:
c6:f6:00:30:2e:f4:0c:3c:27:c2:6f:db:8b:a8:fb:57:a5:53:
d6:90:91:1a:43:27:1f:3a:7a:f5:ed:08:b1:56:56:d3:54:e6:
d0:af:a9:27:b8:a3:19:6b:32:5d:67:a8:81:1e:d7:a9:2f:0c:
19:5b:51:eb:f1:55:b9:83:7b:21:a0:bc:25:31:9c:e7:3c:16:
fa:0c:43:c7:9c:7f:7c:24:22:21:97:7d:48:89:3b:e5:33:eb:
00:df:5f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:45 2025 by rpki-client