Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
File: 9iwrcwAEBoJN-8euOIbreGf47G4.mft (raw, json)
Hash identifier: 64Dn95K0tPpnBlTyDC744J5YRuAzZi1YOwBxsJZZhgc=
Subject key identifier: 4E:0A:19:4C:8A:EB:1B:EE:7B:F7:7E:DD:DC:71:0A:8B:C0:E8:07:1F
Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
Certificate issuer: /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Certificate serial: 01976DE2AD87DF499192A6D775F5FB0CCFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 10:01:01 +0000
Manifest this update: Sat 14 Jun 2025 10:01:01 +0000
Manifest next update: Sun 15 Jun 2025 10:01:01 +0000
Files and hashes: 1: 9iwrcwAEBoJN-8euOIbreGf47G4.crl (hash: 49x5Oo887WRUS3MVcEe4FWNMKB+tdOEfXEqehGbqBRI=)
2: ceDg72YenqK4_dFvq8QBAcGglOc.roa (hash: Zws7AOUBGinLUnjZoVBw7x3JkyX35Jt03arL9swrd5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:ad:87:df:49:91:92:a6:d7:75:f5:fb:0c:cf:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Validity
Not Before: Jun 14 10:01:01 2025 GMT
Not After : Jun 15 10:01:01 2025 GMT
Subject: CN=4e0a194c8aeb1bee7bf77edddc710a8bc0e8071f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:24:98:01:26:d0:9c:e4:1c:61:39:51:76:
8a:69:bb:41:8f:ad:6b:5e:fb:c8:2e:b1:2c:bd:86:
9d:2d:ee:34:ba:99:7f:6a:02:0a:04:a6:84:cd:27:
e7:0d:2d:5c:01:8f:29:71:69:75:49:0e:dc:b3:9a:
a9:1d:ac:75:73:4b:56:2f:9f:8d:fe:46:b4:aa:c3:
74:fd:8c:dd:2e:44:2a:bf:13:00:e1:dd:30:62:e6:
e2:fc:c1:d3:da:11:08:5b:e6:ca:6b:e8:41:e4:d7:
0f:de:b4:9a:6b:dd:d7:2a:11:33:3a:a9:bf:e4:8a:
56:10:d2:90:23:a3:51:3b:22:85:2f:98:6e:5e:c9:
2e:3c:5b:36:1f:4c:7e:e7:19:96:ac:4d:6c:f6:d3:
2e:fa:40:8b:1b:8b:01:d7:cd:d8:b0:40:a9:fc:9a:
f9:90:09:89:74:e6:74:fc:5c:8a:3a:cb:41:c6:59:
ff:7d:10:9e:9e:ce:c7:1e:dc:8f:13:1f:07:78:15:
c4:63:9c:16:b0:95:2d:34:0d:6d:9f:69:e6:d1:15:
67:73:00:71:e9:25:8d:24:75:af:40:17:93:1c:5d:
3d:dc:8e:cd:ec:54:30:25:7b:ed:0f:34:d5:36:48:
99:3b:1d:49:20:e4:2c:51:b9:ad:4f:ce:ff:f3:42:
26:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0A:19:4C:8A:EB:1B:EE:7B:F7:7E:DD:DC:71:0A:8B:C0:E8:07:1F
X509v3 Authority Key Identifier:
keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f8:82:42:79:a0:7f:cd:dd:b5:69:ce:66:47:45:21:fa:17:
f9:aa:bb:d9:80:9e:1d:c5:0f:a2:11:b3:09:ab:33:69:a0:bf:
12:4f:a7:8b:a3:e3:89:ef:04:a3:93:14:13:cb:24:a2:a3:04:
4e:42:22:42:3f:44:2a:47:02:ab:48:87:69:98:01:a3:96:9c:
2e:99:1f:fb:60:88:d0:10:25:17:a4:40:35:f1:89:8b:36:86:
32:e7:7a:4a:f9:96:ab:27:23:09:c5:86:a7:47:76:78:7c:3b:
a6:7d:ce:cf:84:9f:4d:c3:b9:37:31:bd:45:f3:8b:d9:e3:fa:
3a:5d:c1:45:ff:57:00:2e:31:83:00:7b:ab:2d:d2:2f:9a:d1:
4b:01:39:2a:55:9e:cc:1c:c2:03:6b:db:f8:b5:ad:b7:6b:f8:
72:37:ae:3c:a5:ab:e9:bc:19:55:de:b1:7e:1e:ba:aa:51:0e:
18:d6:d9:9b:77:c2:9b:f7:dd:aa:97:0f:1d:7b:c4:61:9e:1b:
3c:ef:88:bd:2f:cc:ed:61:45:98:fb:9a:51:48:e2:e9:3a:e9:
c0:39:b9:88:3a:23:36:51:dc:b9:72:22:73:9b:5a:0f:29:13:
f9:fd:8e:71:55:bd:48:e3:c1:08:ec:30:22:dc:b3:e2:e7:11:
37:62:04:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:11:29 2025 by rpki-client