Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
File: Rj7duRtTj4Port9VZclg3wsQfqI.mft (raw, json)
Hash identifier: VJpqqxAcknSpKsNyxO4EJl4MMKxMp3aKNLXWYIXscDo=
Subject key identifier: F7:C1:9B:96:E7:45:69:2B:A1:F2:7E:38:68:CD:9E:93:8C:53:11:0F
Authority key identifier: 46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
Certificate issuer: /CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Certificate serial: 0197531005EF7876B73F641E0A1071C62893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
Manifest number: 09E2
Signing time: Mon 09 Jun 2025 05:00:48 +0000
Manifest this update: Mon 09 Jun 2025 05:00:48 +0000
Manifest next update: Tue 10 Jun 2025 05:00:48 +0000
Files and hashes: 1: Rj7duRtTj4Port9VZclg3wsQfqI.crl (hash: cMC90kDGZ3AvyRoKjNxVm7t39Ynq0XruNLb42+zI5Xw=)
2: VDpi_TMhu0MubOzMgSkXQ1gGEVo.roa (hash: l1aEmCnDC0lAylyG2lI+yA0mAn8xNZotz2Kipdmx4J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:10:05:ef:78:76:b7:3f:64:1e:0a:10:71:c6:28:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Validity
Not Before: Jun 9 05:00:48 2025 GMT
Not After : Jun 10 05:00:48 2025 GMT
Subject: CN=f7c19b96e745692ba1f27e3868cd9e938c53110f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:18:5b:4c:71:62:61:8e:f4:ae:71:0b:71:ad:
00:8b:42:03:d9:a0:09:52:c6:b5:b8:bd:2e:8b:ca:
91:b7:b0:f7:aa:79:18:64:c7:d5:0c:52:ec:1a:3d:
19:04:dd:d5:c3:c2:be:24:46:55:68:17:ec:1d:63:
c2:da:48:46:dc:c8:e7:25:87:03:b8:1e:df:f9:17:
28:a6:cb:ba:77:7f:59:c3:4e:68:d3:e9:e9:5f:c1:
c5:2c:a1:61:cb:a5:5a:50:7e:77:2b:3b:2e:85:72:
ad:f1:ac:b9:0c:60:5f:5e:6b:46:84:bd:72:01:07:
83:bc:e6:b3:e4:8e:16:ae:65:53:71:e8:7b:94:d7:
11:38:48:a3:e2:4c:c3:50:ff:2e:a3:0a:2d:e6:be:
c1:ec:d9:e9:62:51:ba:22:5f:88:dc:91:b0:74:fd:
69:98:40:34:f4:25:d3:97:13:5d:40:90:96:b0:19:
1d:d8:c2:9f:8a:ee:05:85:30:de:1c:b8:c5:7c:bb:
98:85:72:5c:b0:30:2d:b4:bc:98:8b:a6:b4:d6:08:
f7:95:06:8c:35:12:d1:7a:5c:2b:d6:f6:c1:33:df:
bd:ee:a0:59:d8:be:33:a5:19:28:8e:5b:eb:dc:5f:
75:36:cd:1b:d2:7c:56:74:f5:3b:55:7e:e1:8c:a5:
97:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C1:9B:96:E7:45:69:2B:A1:F2:7E:38:68:CD:9E:93:8C:53:11:0F
X509v3 Authority Key Identifier:
keyid:46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:30:4c:7b:18:99:f4:3f:52:da:65:55:35:ce:59:f6:76:8e:
0f:7e:84:b0:15:c1:d4:08:77:0d:00:a5:ee:7d:bf:ca:73:cd:
52:49:8e:46:63:2c:09:eb:ee:4f:72:05:bc:f2:7f:22:3c:f6:
d0:ad:29:ab:c8:01:79:b9:16:6c:8d:1b:da:c8:02:43:cf:7d:
85:58:41:9e:6c:c4:c0:f8:71:44:5f:96:c6:54:05:3b:29:d7:
10:f1:c3:6e:7c:84:10:2b:6b:7f:04:e0:d6:e8:78:90:d6:be:
ed:ca:da:af:f1:12:d9:20:1c:ab:58:bb:b9:e6:62:60:12:5c:
42:f7:19:dd:a3:1a:f7:e7:3d:bf:8e:87:02:56:64:2e:12:7b:
fc:02:7e:c7:26:f2:7f:9f:62:3f:a3:d7:09:58:a1:97:4f:49:
ab:d5:0e:1a:b3:2f:25:84:59:1a:da:ad:da:b9:59:22:4e:80:
43:07:52:f4:55:ec:86:eb:16:be:b2:12:e4:9f:e2:4e:3e:a7:
88:f6:e8:0d:f6:01:f6:1a:1a:81:9e:89:90:af:82:b7:26:66:
c1:f1:41:62:67:b7:dd:fa:93:ef:24:12:65:9a:ba:1e:d9:fd:
77:a7:7e:79:8c:f1:3a:40:60:20:36:8e:dd:42:47:6a:76:f3:
ba:b2:66:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:40:40 2025 by rpki-client