Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
File: 9gcH8oeiMJvuy7hS7kCqgxueeGY.mft (raw, json)
Hash identifier: vGf8ERzec6aESbb0FHv7OApilaxb+ibqOtlvbsZP2yc=
Subject key identifier: D5:DE:DB:09:B1:34:C3:A8:28:48:2E:A8:4B:C0:4A:76:00:D7:68:8B
Authority key identifier: F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
Certificate issuer: /CN=f60707f287a2309beecbb852ee40aa831b9e7866
Certificate serial: 01974A0C9BAC46F1E40D1E5F69A9A03733A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
Manifest number: 0C2A
Signing time: Sat 07 Jun 2025 11:00:29 +0000
Manifest this update: Sat 07 Jun 2025 11:00:29 +0000
Manifest next update: Sun 08 Jun 2025 11:00:29 +0000
Files and hashes: 1: 1qWzBwVhmQ6zdPJi5w7aMEYeKoc.roa (hash: QUUw5IgATMBX8godfHfSxzPR3Se/paZBDUtUUYMUESM=)
2: 9gcH8oeiMJvuy7hS7kCqgxueeGY.crl (hash: hwUq5UnBo0XkjXqAA0iiBkj1e38DlJsYxbdqs6149kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:9b:ac:46:f1:e4:0d:1e:5f:69:a9:a0:37:33:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60707f287a2309beecbb852ee40aa831b9e7866
Validity
Not Before: Jun 7 11:00:29 2025 GMT
Not After : Jun 8 11:00:29 2025 GMT
Subject: CN=d5dedb09b134c3a828482ea84bc04a7600d7688b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e5:ca:0e:b1:a4:b8:da:fb:5e:08:53:49:03:
73:48:f8:52:88:05:74:c2:d7:9a:f7:20:b5:62:21:
98:c7:15:93:75:34:a0:ea:4c:9a:7c:c3:1f:55:15:
ab:f9:17:23:08:61:76:e8:1a:0a:0b:ce:96:59:27:
26:53:37:c0:fd:49:2d:96:d3:88:f8:dd:2d:9b:2d:
70:5b:bc:78:dd:4a:db:5e:7d:b1:f1:67:da:c4:8a:
66:e8:bd:89:32:f7:c2:aa:e1:7d:24:ca:c5:96:07:
ed:82:42:f4:a3:c3:7e:13:bf:13:f6:2d:3d:cc:6b:
0d:1c:68:7f:60:9f:90:a0:f3:d3:fc:43:e6:de:bb:
46:91:ed:bd:7a:f9:8e:9a:90:af:7c:2c:3e:b4:c1:
70:65:00:4d:1a:3a:72:48:4e:c7:59:50:3d:ff:1e:
47:b2:a7:c2:a9:77:82:03:db:06:17:95:42:25:9c:
43:e8:a0:3e:ee:9b:55:4d:4b:e2:6d:be:93:68:43:
3f:20:06:48:77:3c:38:2c:e3:a7:79:b3:46:91:4a:
21:c0:ef:36:12:ca:4e:66:b0:72:33:08:b8:7a:52:
7c:65:f5:d7:a3:23:e7:7c:b3:ec:e6:a3:c4:c9:4b:
91:60:e5:b9:df:98:c1:b2:94:a2:51:72:ec:98:04:
c6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DE:DB:09:B1:34:C3:A8:28:48:2E:A8:4B:C0:4A:76:00:D7:68:8B
X509v3 Authority Key Identifier:
keyid:F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:96:69:3c:43:6e:67:f8:57:f5:0d:0a:e3:14:80:0d:da:af:
dd:7b:1b:19:f1:f8:c2:83:d7:47:1f:90:55:0d:50:74:97:1c:
67:e2:43:2a:6a:ed:3d:18:ab:f3:ba:a5:f5:fb:04:85:7f:0c:
8b:fd:23:e8:8e:15:fe:c7:3a:e4:8a:59:72:d1:04:a5:d1:7e:
51:09:17:aa:5f:a3:d6:d8:a8:59:86:b7:ac:08:84:1b:4c:df:
f0:6e:f8:a9:c9:ae:ea:52:f7:dd:5c:64:ae:ff:93:f3:65:80:
75:59:62:51:78:13:c7:2e:e7:49:66:5d:48:bc:b7:83:4c:62:
26:0f:39:7f:2c:27:d8:80:be:b8:87:c1:82:74:5d:7b:84:e6:
f9:d8:ed:c4:c5:63:41:2e:d0:9a:ed:3c:82:21:c4:84:cd:5c:
d0:6b:bb:f6:ff:8c:69:c6:b3:d7:80:db:d3:21:9e:47:f3:9d:
e2:b9:e9:65:6e:19:be:60:e8:80:7e:b0:ea:a2:38:14:54:66:
1d:80:7b:1a:59:be:10:e4:21:39:74:55:2a:06:6a:8b:b6:01:
d4:42:ec:1f:88:a5:4e:2b:bc:b1:0b:ac:95:66:4d:8d:ca:8a:
c7:82:df:6d:06:27:e9:6d:e1:8b:7b:75:6e:cf:eb:df:66:6d:
00:1d:3e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:30:22 2025 by rpki-client