Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
File: 9p8HIQsohLT-pQe94id5WyZAYu0.mft (raw, json)
Hash identifier: EpLnnLp5eu9zwBs7Vma8Wi2nsqWkdvqT8lcfEpYULuM=
Subject key identifier: F1:0F:B9:99:7F:28:16:D6:22:C5:F5:1F:A7:B5:6B:59:02:5E:82:CB
Authority key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
Certificate issuer: /CN=f69f07210b2884b4fea507bde227795b264062ed
Certificate serial: 01974E8E6632AA59D49E929B17ADC1D1E0AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
Manifest number: 028A
Signing time: Sun 08 Jun 2025 08:00:44 +0000
Manifest this update: Sun 08 Jun 2025 08:00:44 +0000
Manifest next update: Mon 09 Jun 2025 08:00:44 +0000
Files and hashes: 1: 9p8HIQsohLT-pQe94id5WyZAYu0.crl (hash: zC1zfjZKB9O9rCV7/aRW0JYvqFDxTPsb0lC9peUdwhw=)
2: jYwiLy6C8PrH1zmVRebb5xoCcHg.roa (hash: B/91TwKxBsOKKHQE6s1Ydkjq/nj0hd3T+71Ppy1e7kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:66:32:aa:59:d4:9e:92:9b:17:ad:c1:d1:e0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69f07210b2884b4fea507bde227795b264062ed
Validity
Not Before: Jun 8 08:00:44 2025 GMT
Not After : Jun 9 08:00:44 2025 GMT
Subject: CN=f10fb9997f2816d622c5f51fa7b56b59025e82cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:2e:be:d6:e9:8f:08:ea:33:5b:cd:92:ab:
fe:5e:25:c1:35:24:af:84:fb:73:37:30:69:17:22:
0a:6a:a9:75:98:14:6b:a0:bc:a9:31:e8:f9:b6:e3:
99:a2:5e:4b:71:a2:98:03:2a:91:f4:16:41:dc:b4:
1e:d8:f0:7c:70:cf:fe:06:a4:ec:cd:4c:b5:01:ed:
00:c8:2e:45:e7:dc:d3:85:b1:be:83:04:8b:98:7a:
92:f8:44:15:aa:dd:a1:9c:20:be:90:08:0d:58:30:
7b:22:da:07:23:58:4f:cf:b3:15:a6:9d:e7:05:dc:
bb:0d:58:16:39:90:f1:ed:3f:8c:4a:c0:a2:4a:bf:
08:02:45:f1:4e:a3:9d:df:7b:2b:04:36:16:3a:76:
b6:65:48:d0:d7:25:e5:a7:32:d6:c3:e8:48:81:97:
14:a3:17:75:80:8a:a6:d0:47:ec:62:0d:06:be:be:
5e:43:e0:45:bb:98:24:75:a1:a8:9e:da:27:7b:98:
54:0b:95:ed:7e:6e:18:62:74:53:21:62:7f:b8:70:
cf:70:0b:65:7e:99:61:8d:39:b2:1b:77:26:e3:30:
77:a9:48:ab:a5:d5:e9:57:a6:04:68:3d:94:6f:d5:
a6:7f:b8:9e:a4:0e:56:27:c0:b6:ea:a7:ff:c1:2c:
be:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0F:B9:99:7F:28:16:D6:22:C5:F5:1F:A7:B5:6B:59:02:5E:82:CB
X509v3 Authority Key Identifier:
keyid:F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a3:a3:4c:31:21:31:23:21:15:3d:09:c6:97:cf:0b:74:aa:
eb:e5:4a:78:74:19:ba:c7:b5:05:d6:29:ea:5e:db:07:1c:ef:
b7:ef:7c:86:b8:30:f0:f3:ae:1f:7d:69:99:c7:3e:52:07:da:
ee:7a:11:8f:90:a4:f1:5a:55:dc:0b:8d:8b:7c:ad:67:36:52:
f9:ed:23:15:91:1b:c1:ae:8e:5b:13:e3:53:92:89:08:a5:69:
7a:84:9e:13:55:aa:50:28:dd:81:5a:99:14:5b:5b:bb:23:d1:
df:39:82:42:a2:4b:7c:e7:4f:ac:cd:0e:c7:d8:9f:9d:13:de:
1c:33:1f:86:bf:64:28:59:18:02:c3:bf:71:dc:23:5b:3c:8c:
5d:25:b9:cc:48:49:1d:76:4a:ce:0e:07:0e:e7:d8:7c:dc:2f:
a7:2f:80:ce:b9:41:f3:de:5c:ff:f5:35:b1:34:b8:e7:45:93:
30:e3:fe:d8:b3:b5:5f:da:6f:28:28:2b:83:7e:79:62:57:fd:
f7:5b:8d:c9:94:94:0c:4e:57:74:70:5a:c7:f8:bf:54:ae:39:
f8:6f:f5:e2:8a:f4:90:23:9b:41:71:06:a7:ea:44:dc:5b:15:
08:40:df:86:e0:04:04:b6:96:29:d0:91:22:69:a3:e5:92:d8:
a1:f1:97:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:31:01 2025 by rpki-client