Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
File: Rj7duRtTj4Port9VZclg3wsQfqI.mft (raw, json)
Hash identifier: 7R/rZnn4AfBqSFfjMQWY9Z8PNvT8JfjRngfhIC1qdiY=
Subject key identifier: 2C:5C:0A:96:23:6A:E1:74:CB:B3:07:62:FF:FA:DD:32:72:1F:C8:6A
Authority key identifier: 46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
Certificate issuer: /CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Certificate serial: 01976E1981CBFACD6F781AE584B01574592C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
Manifest number: 09F0
Signing time: Sat 14 Jun 2025 11:00:54 +0000
Manifest this update: Sat 14 Jun 2025 11:00:54 +0000
Manifest next update: Sun 15 Jun 2025 11:00:54 +0000
Files and hashes: 1: Rj7duRtTj4Port9VZclg3wsQfqI.crl (hash: bbkzXOSQYJUAkA7rHLv9RfCjnG6QKCDT9wH/gEZIOWo=)
2: VDpi_TMhu0MubOzMgSkXQ1gGEVo.roa (hash: l1aEmCnDC0lAylyG2lI+yA0mAn8xNZotz2Kipdmx4J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:81:cb:fa:cd:6f:78:1a:e5:84:b0:15:74:59:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Validity
Not Before: Jun 14 11:00:54 2025 GMT
Not After : Jun 15 11:00:54 2025 GMT
Subject: CN=2c5c0a96236ae174cbb30762fffadd32721fc86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e9:44:08:1d:70:fa:10:f7:c3:98:f5:38:3d:
ac:4d:2d:dd:9b:03:d3:52:ba:dc:e6:c1:f0:3b:88:
d6:0f:75:19:09:59:9a:1e:b1:9d:62:d7:51:7f:de:
2e:9a:d0:b5:66:3b:a9:94:96:3b:d6:7c:66:3f:8c:
6a:fe:26:3f:79:7c:00:00:5a:a3:0c:a3:f3:58:55:
e7:5d:91:d1:02:e7:d1:71:65:02:9e:da:41:10:b6:
bb:ae:58:6b:72:a7:cc:5a:90:45:77:21:a0:a0:16:
11:87:45:cd:2e:11:c4:d8:d1:5f:0d:8f:8d:95:14:
9c:58:f0:7f:59:8c:8a:56:13:d6:1f:93:9d:9b:50:
60:8f:78:4b:8d:08:75:73:9d:ea:34:fc:46:61:f9:
9e:e2:2d:b3:fd:fb:8c:06:32:03:f4:15:a1:7f:3b:
c6:a4:12:b0:90:00:f5:3b:93:d8:51:79:12:71:3f:
2a:0f:f7:48:56:c9:f2:27:cc:f6:20:41:40:82:d1:
aa:e8:f8:09:18:14:72:94:a5:21:67:30:72:4d:83:
2e:c3:4f:9b:67:64:6e:4f:7f:f8:6f:56:a4:fe:34:
75:6f:24:cb:a1:36:36:44:24:b6:aa:46:de:10:4e:
ff:70:d3:61:a6:9b:08:3e:1c:c5:e2:e4:fa:17:d4:
c9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5C:0A:96:23:6A:E1:74:CB:B3:07:62:FF:FA:DD:32:72:1F:C8:6A
X509v3 Authority Key Identifier:
keyid:46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d0:e9:f8:a7:71:d8:5c:b9:8d:4a:de:70:47:75:db:e6:14:
f1:d7:3c:b5:7b:7f:4f:a3:be:e0:58:17:e0:68:02:c1:d5:ab:
65:30:f4:47:b9:cf:c8:96:c3:4b:0f:e0:41:cf:8d:59:ea:fb:
07:79:35:83:e8:39:4f:5b:9b:d2:e8:06:02:9e:6b:25:d1:ff:
8e:bb:9f:2f:4a:ce:5c:0b:bf:1b:20:5e:0a:31:3d:95:b1:d6:
b3:68:3a:d8:e2:30:07:a8:be:a4:e9:96:6c:13:0f:ab:d1:de:
a4:90:bc:3f:8f:d7:c8:d4:33:9e:d9:1b:63:82:08:74:33:88:
30:74:83:b3:5c:07:ac:96:bd:70:bc:ab:a0:d1:1c:8b:09:97:
5e:2a:65:65:eb:13:30:24:9c:8e:a3:d2:dc:4f:cf:73:c0:72:
09:32:16:9f:59:ba:d9:2b:ce:62:d6:13:55:ff:fe:3b:0e:66:
a5:24:6b:3c:85:0a:bb:c6:7c:55:73:3d:27:47:f5:d6:0c:d1:
4a:c3:d6:bf:f8:10:6f:03:a7:c6:cc:b0:56:c6:57:98:d0:bb:
38:75:bb:aa:a3:66:6e:8c:cf:35:33:92:b0:21:12:4b:70:b4:
d9:cd:8c:b2:fe:79:c5:90:5c:f6:16:98:cf:7f:45:75:5b:cf:
a5:65:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:09:36 2025 by rpki-client