Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier: w5Nhs9v73RZ4451QWRxXEqoAOi5m69mrJNgPpgkPySo=
Subject key identifier: 26:D8:6D:59:D7:EB:F1:D1:A8:6D:15:1D:F3:78:B5:E2:C6:75:E6:AF
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial: 0197488CC978AD2E0BE899029436D53FC686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number: 150B
Signing time: Sat 07 Jun 2025 04:01:15 +0000
Manifest this update: Sat 07 Jun 2025 04:01:15 +0000
Manifest next update: Sun 08 Jun 2025 04:01:15 +0000
Files and hashes: 1: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: XEE9hApLW7omieZycF9nxUorJudXZaBRZYj6KbGwg+c=)
2: opYZOi4k9YDcS_3foMnJJa-4gCI.roa (hash: VbpgC06Lnc7NWswjuIad3/ZduRJ+GtOZh31gorgG7Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:c9:78:ad:2e:0b:e8:99:02:94:36:d5:3f:c6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Validity
Not Before: Jun 7 04:01:15 2025 GMT
Not After : Jun 8 04:01:15 2025 GMT
Subject: CN=26d86d59d7ebf1d1a86d151df378b5e2c675e6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b5:89:c4:46:71:a2:ba:f2:b9:18:a5:1b:ea:
7b:33:41:c6:d4:60:b2:e7:f1:78:83:c8:d8:ca:fe:
e7:e4:4c:61:bf:cc:75:1d:1e:ae:3b:89:79:81:5e:
79:58:36:58:b7:41:b3:21:ad:96:e3:3e:50:7e:e9:
57:a2:80:b9:99:f6:8f:48:88:b6:11:03:d9:09:5d:
58:93:cc:82:13:43:87:99:69:e8:65:c0:10:fe:e2:
c0:84:10:b3:f0:51:66:28:0d:21:6f:24:52:88:13:
cf:ff:ed:51:77:dc:7d:36:86:81:01:8c:2d:e0:d1:
a9:96:60:40:06:db:24:15:2c:70:75:54:f3:7b:fb:
5c:7f:1e:8f:6d:49:50:39:2f:6f:93:a4:35:d1:fa:
77:41:6f:69:6b:e1:2b:14:41:f7:7e:65:fb:03:37:
02:cf:94:b9:5e:ef:76:ed:55:c1:a2:36:1d:e7:95:
1f:69:53:4a:91:e0:fd:4d:b2:25:9e:03:01:67:a2:
ba:e1:26:07:6a:9e:c9:57:bf:e0:aa:c2:b7:4c:62:
a1:12:99:b6:3a:1c:3a:5e:8b:ea:bc:76:57:8c:a7:
2c:50:22:0e:70:f6:26:a8:e6:18:d1:dd:1d:45:08:
f7:64:f5:b3:3a:37:a5:e0:ad:9f:3c:2f:4d:a3:0c:
5e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D8:6D:59:D7:EB:F1:D1:A8:6D:15:1D:F3:78:B5:E2:C6:75:E6:AF
X509v3 Authority Key Identifier:
keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:58:b2:61:43:13:3f:94:2b:08:3b:57:6c:1f:d4:14:9b:fd:
9f:c4:24:42:93:61:35:05:47:b5:1a:94:d0:0f:7d:94:f4:16:
bf:3a:3e:e9:7c:7a:73:8c:b8:51:cf:f6:8b:40:ea:50:3f:fc:
bb:2b:82:ea:91:a5:3f:78:fb:3a:39:e2:e0:e8:e7:23:e2:e3:
d4:7d:6c:73:b2:d3:c0:07:8a:09:cc:2e:30:b0:e4:27:b9:ea:
54:b0:39:00:6f:c8:57:33:97:57:1e:ea:6f:7c:97:05:3b:2a:
4f:34:45:4f:20:e8:ee:0a:94:8c:6c:78:73:17:3f:b3:3c:98:
35:81:77:24:ae:8b:ba:5f:ed:d2:9b:d1:5b:2d:fa:06:c9:52:
f3:b9:60:14:03:ff:ff:b8:99:ce:62:38:19:6e:9b:98:69:94:
43:8a:0b:d9:8d:e7:30:af:9d:c5:f1:ce:1a:16:7b:ad:91:e8:
e6:87:7e:63:40:da:4e:cc:d5:08:f5:5a:56:b1:09:b8:f0:ff:
d6:8f:bf:cf:ef:e6:70:e5:2d:2c:e1:ee:73:3f:99:6a:1b:db:
6c:b7:f1:d3:d8:91:32:30:cf:a3:22:97:1f:46:6c:a8:d9:49:
a3:6b:c8:63:d3:c1:82:75:6e:d8:ae:39:af:32:f4:03:d5:4a:
ad:2c:e2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:47:43 2025 by rpki-client