Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
File: 9XpIEqFZ72qekpcudXKtZi1yIVo.mft (raw, json)
Hash identifier: BR/9I2+xoJ2Oq8OyNr9IsBN4q6JlzkOKSlo7UfPZjVM=
Subject key identifier: 8F:50:AF:37:4D:3A:C5:8F:B4:44:50:0C:15:D7:5A:FE:10:B2:9A:1D
Authority key identifier: F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
Certificate issuer: /CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Certificate serial: 0197696137C1D09EAF25CC1D2EF6C2655AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
Manifest number: 0E75
Signing time: Fri 13 Jun 2025 13:01:08 +0000
Manifest this update: Fri 13 Jun 2025 13:01:08 +0000
Manifest next update: Sat 14 Jun 2025 13:01:08 +0000
Files and hashes: 1: 9XpIEqFZ72qekpcudXKtZi1yIVo.crl (hash: LwjKJeEszsR/JIdDWnnMrtfmqfoW0vK0NXyc6/pDaUs=)
2: rsfWL4ne_IO-bw3hiD_1W0HWkNY.roa (hash: zqnrJ6HitRbslJtaa/MioT9cGJCTTWr6OsfLiIDmwLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:37:c1:d0:9e:af:25:cc:1d:2e:f6:c2:65:5a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Validity
Not Before: Jun 13 13:01:08 2025 GMT
Not After : Jun 14 13:01:08 2025 GMT
Subject: CN=8f50af374d3ac58fb444500c15d75afe10b29a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:56:67:9b:dc:3c:0d:65:64:7b:93:18:5c:c1:
49:84:22:37:fa:7f:a9:19:1b:c0:d8:37:28:e6:89:
17:1e:53:28:bf:b1:4f:91:cc:fe:79:3a:e5:6d:a6:
18:39:68:3c:ad:01:50:25:03:ce:ae:5e:c4:62:ba:
c4:a9:f6:b0:db:23:f1:45:5f:6b:6e:53:de:d9:5d:
e9:17:dc:ee:40:cf:7d:c2:04:be:e0:9f:12:32:db:
98:27:eb:9b:27:24:7c:2b:23:d2:10:e5:0d:bf:b7:
43:4b:ce:21:31:2d:46:4e:c5:87:9a:65:8f:91:68:
c7:8f:17:68:dd:cf:64:c3:50:f1:99:02:f4:33:ad:
b6:84:dc:6c:9f:a6:5e:cc:da:79:35:4b:4f:de:d0:
de:72:51:36:ec:a8:42:4a:52:fb:98:2c:a1:c0:93:
ef:ce:f5:d4:00:56:17:b8:d8:44:74:d3:28:88:dc:
d0:52:ed:30:00:22:51:36:54:af:64:56:1f:74:2b:
85:62:dc:5e:d7:72:4e:83:15:6e:1c:0c:5a:4c:bf:
3a:4d:16:36:f4:8b:cb:06:f8:78:e8:4c:1d:61:e3:
aa:36:4c:24:77:47:c4:73:6a:fc:bc:de:7a:4a:33:
1c:46:6c:40:5a:39:78:c9:8d:ce:17:6d:bc:f8:36:
eb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:50:AF:37:4D:3A:C5:8F:B4:44:50:0C:15:D7:5A:FE:10:B2:9A:1D
X509v3 Authority Key Identifier:
keyid:F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:04:a3:d0:ae:ed:9e:67:9e:e6:7d:e2:a2:c5:c4:d6:8b:93:
c1:aa:53:70:c0:40:96:df:44:7f:1d:49:9a:ec:1c:ad:6e:92:
79:57:ec:68:d0:20:71:8e:af:33:52:83:f3:5d:a4:42:cc:ba:
9c:3d:e1:e6:f3:94:13:fe:f9:18:6a:d0:0d:22:1e:b2:70:d2:
8c:47:1d:ec:5f:e2:cc:24:3c:c0:e2:a8:b4:c3:7c:70:61:14:
8a:6b:bf:7f:ab:e6:23:82:80:fe:4a:38:82:c1:57:75:79:b4:
a1:da:26:a1:08:68:ca:69:01:7b:b5:96:9d:03:08:73:bf:22:
34:ac:e4:4f:eb:bc:2d:2f:f7:6a:bc:60:a8:cd:5f:6d:71:c4:
2a:c2:56:73:17:7e:32:16:bf:2c:d9:c9:43:22:88:c5:02:7a:
29:1c:c8:1d:5d:f6:86:f0:a5:62:e4:f9:b4:f4:1f:98:80:43:
06:88:9b:c7:ef:9e:5c:36:c1:a9:42:16:9d:16:4a:9e:54:5a:
99:61:73:18:1d:27:f0:b7:a1:52:30:73:45:7d:1e:9e:2e:51:
54:8d:e1:76:1e:91:99:05:a2:b9:02:81:88:48:f5:31:30:0f:
bc:43:da:8f:90:8e:ca:9f:78:87:b8:35:95:4c:30:f3:51:5c:
0d:bb:ac:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:22:43 2025 by rpki-client