Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: wXzbMQ852iggaaFJh4tFTN/B/E2OqM4bizDvfW80Gus=
Subject key identifier: D2:AD:6F:23:EB:93:5F:49:28:BA:5F:31:E9:36:A7:2E:5D:1E:6D:50
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 0197485581F848FA7CCFCEDB18D457904457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 03:00:52 +0000
Manifest this update: Sat 07 Jun 2025 03:00:52 +0000
Manifest next update: Sun 08 Jun 2025 03:00:52 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: QMmuzka2VkxCylJhVagozfSE5Ff4wChq9/BB8LkkdPo=)
2: HmMkZMs_L5qVhevMb58XTv8ACos.roa (hash: p6Cspm4w36V6nse6CJ6sMJJCGrV41tHwZhdpXbj7GQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:81:f8:48:fa:7c:cf:ce:db:18:d4:57:90:44:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Jun 7 03:00:52 2025 GMT
Not After : Jun 8 03:00:52 2025 GMT
Subject: CN=d2ad6f23eb935f4928ba5f31e936a72e5d1e6d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:95:9e:01:c2:2e:2b:e3:ea:60:bb:2f:a4:
06:d7:0d:fe:f5:6e:bd:f2:30:4b:e4:35:55:4b:cb:
0d:19:79:67:c6:55:c5:da:65:f3:7b:03:f4:6e:fa:
eb:02:a1:cc:f0:8b:69:62:85:4b:06:d6:c6:15:ec:
a6:54:45:77:9e:b4:bf:fb:f2:33:1a:ef:b7:90:74:
2e:4d:f6:e7:37:5a:0f:67:eb:da:3a:bf:3e:f6:d0:
10:75:fe:5c:e9:27:b6:12:67:b0:b3:25:58:e8:5f:
da:23:d9:df:91:ce:4e:53:a3:ac:1d:de:aa:a2:b0:
fe:76:bf:2a:b7:7c:da:f4:72:5c:9e:c7:60:de:44:
54:ae:40:68:da:b5:70:7c:c0:b3:4d:a4:b8:cd:81:
f4:bf:e2:6a:e0:8d:2f:fb:fb:8c:31:fb:bb:ac:d0:
e0:e2:8b:0b:27:ce:6f:de:ed:5d:7f:be:40:40:26:
40:b7:98:71:8e:bf:0a:e9:de:3e:57:cb:69:5b:34:
08:58:e7:8c:29:90:90:e6:57:70:95:dd:d2:e2:b3:
80:e1:da:ca:12:3e:6e:1a:d2:4d:20:b6:5d:65:c5:
b7:6b:e8:00:ac:04:45:d6:1d:44:d5:e3:ee:c5:49:
ff:06:13:74:3a:91:08:fd:b9:25:02:41:0a:af:75:
a9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AD:6F:23:EB:93:5F:49:28:BA:5F:31:E9:36:A7:2E:5D:1E:6D:50
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:70:18:e4:a3:ad:33:9e:e2:1e:0f:1e:98:50:6a:21:21:97:
12:91:e5:7a:85:92:d1:da:72:f9:a0:57:b8:03:84:de:b6:91:
5e:76:b0:fc:46:57:f6:8b:ee:ba:6f:55:20:e7:64:7a:58:59:
15:69:23:e2:dc:e4:3e:14:55:b5:87:c2:11:1c:70:56:83:0b:
6b:f6:9d:da:bc:36:57:ea:ed:c7:e8:00:dc:11:f3:ef:15:40:
2b:98:0d:1f:8e:55:f5:cc:01:50:6a:40:56:fa:ee:ce:a9:b8:
69:72:72:50:d2:01:aa:41:46:97:0d:35:ea:c0:7f:fd:78:7c:
34:54:99:34:96:3f:96:a2:e9:96:2b:0a:4b:62:97:4a:ef:77:
17:d4:a1:70:21:83:3b:c7:46:38:1a:4d:c6:99:14:a6:34:d5:
ab:4f:e2:48:75:46:83:93:f8:83:8d:a1:8a:a8:75:0f:9e:bb:
e2:92:e8:a8:8d:1b:51:79:8e:ae:73:5b:45:12:b1:1f:15:24:
a5:9c:ab:f6:b8:34:26:05:d0:26:dc:f2:8d:5b:99:b2:92:f7:
96:cb:88:84:8e:d3:25:19:26:c1:3a:d8:eb:b3:76:f1:65:dc:
50:ba:86:15:00:1b:7c:98:ab:bd:2e:a6:74:60:14:c5:e5:fc:
8c:8f:b6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:31 2025 by rpki-client