Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
File: 9iwrcwAEBoJN-8euOIbreGf47G4.mft (raw, json)
Hash identifier: IXtlz5jhC5tc0/rjw+7DNn3Q6n/SNhn7LiOKj66uqbY=
Subject key identifier: 98:70:E6:92:D4:85:4D:7F:D4:2F:F6:2B:35:5E:0E:62:C8:B4:95:34
Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
Certificate issuer: /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Certificate serial: 01975A9271AEC287B64DC7A2AF70C63AE622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
Manifest number: 1584
Signing time: Tue 10 Jun 2025 16:00:36 +0000
Manifest this update: Tue 10 Jun 2025 16:00:36 +0000
Manifest next update: Wed 11 Jun 2025 16:00:36 +0000
Files and hashes: 1: 9iwrcwAEBoJN-8euOIbreGf47G4.crl (hash: 49ZxAXghT+7R7KTrm6TvREarXeUo0Pg1qBO/JXcE7o8=)
2: ceDg72YenqK4_dFvq8QBAcGglOc.roa (hash: Zws7AOUBGinLUnjZoVBw7x3JkyX35Jt03arL9swrd5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:92:71:ae:c2:87:b6:4d:c7:a2:af:70:c6:3a:e6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Validity
Not Before: Jun 10 16:00:36 2025 GMT
Not After : Jun 11 16:00:36 2025 GMT
Subject: CN=9870e692d4854d7fd42ff62b355e0e62c8b49534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:87:0b:9a:b0:f9:32:e3:53:ca:1d:62:71:9c:
dc:06:49:a6:bb:cc:b2:8d:4e:06:3a:d0:5d:c7:a9:
09:bb:61:7c:92:4d:8e:20:55:3a:7a:41:d3:88:fb:
f2:63:52:cd:18:c3:68:50:f5:0f:df:cf:48:ad:62:
69:75:e8:9b:66:ec:fd:19:80:8c:bb:1d:03:a7:06:
dc:79:b5:7b:83:6a:9c:eb:74:27:8a:72:3a:35:8f:
2d:0d:51:fd:bf:4e:64:b5:7a:42:2c:16:22:44:e7:
9b:1f:55:d8:ca:67:97:c4:4b:6c:9d:0f:a3:ea:c9:
34:7f:b6:12:76:3d:c0:e5:9e:05:2f:0e:de:7d:63:
fb:ca:7d:84:8b:85:b8:10:fd:fd:02:1b:6f:fa:11:
60:50:86:8b:97:9c:f1:e3:0b:e3:61:2e:32:76:64:
18:7c:23:dc:90:75:ed:9c:5a:09:22:17:8f:84:cb:
4a:80:17:b3:87:c9:f8:bb:5a:62:36:4a:42:bb:d8:
67:91:80:58:a7:44:d2:5e:e6:45:ea:ad:af:60:37:
c4:a4:59:b6:5f:57:31:fb:43:68:c1:87:c8:a4:12:
54:93:f0:06:fd:cd:26:54:8a:02:bb:c5:ed:f8:5c:
f7:7b:92:97:b8:83:bd:7f:52:e6:5f:ea:ad:3b:69:
46:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:70:E6:92:D4:85:4D:7F:D4:2F:F6:2B:35:5E:0E:62:C8:B4:95:34
X509v3 Authority Key Identifier:
keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9a:8d:a5:63:73:ea:a6:0a:d2:3e:7f:c2:17:16:a8:a4:ab:
59:21:fb:6c:50:31:27:77:25:a8:52:07:42:36:ff:48:93:08:
c6:1b:2c:5c:94:13:96:fc:99:12:02:f8:18:1b:70:cd:7b:7f:
84:1f:72:d8:57:5a:f9:88:1b:fb:ae:c0:86:2a:5c:f1:8f:92:
95:67:27:05:4f:74:f7:33:41:e3:89:0f:c2:b8:d5:f7:dd:c0:
cf:ca:0e:81:21:35:91:cf:d4:d2:bb:e3:d5:45:ba:25:6e:2d:
97:58:ff:ca:e3:84:7e:cf:4c:64:80:60:8f:a4:de:ec:a2:e8:
5c:67:24:45:fb:a0:df:81:0b:1f:06:8f:98:9c:8d:9f:b7:e4:
a1:f8:40:9e:c1:ea:9b:2d:ab:d1:a2:12:10:3a:44:80:fc:b5:
3b:5e:15:4b:d6:4b:bb:72:3a:aa:d6:ea:d4:29:73:ed:e3:73:
4e:66:27:e7:c5:69:02:fe:03:d1:31:ea:24:15:29:bb:a8:bf:
c5:a3:44:aa:f5:43:db:30:e9:46:ca:5f:45:32:2c:a8:ad:08:
dc:aa:eb:17:e6:96:92:a8:86:7d:1b:f9:1e:5d:38:b6:53:f5:
2b:a7:e0:43:e7:ee:6e:a9:3f:e8:57:6a:2c:8a:84:ab:99:89:
34:a3:f7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:55:42 2025 by rpki-client