
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
File: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft (raw, json)
Hash identifier: +Xf/J0RBqX8jdRulqap3THTvaLDZI21hzlovBE5fm0g=
Subject key identifier: 7E:8A:86:DD:4E:12:81:C2:34:AA:34:61:60:4B:3C:A5:FA:62:82:1E
Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
Certificate issuer: /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Certificate serial: 0197531000F1F0308E3F5808B9A7ADBC29AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
Manifest number: 1581
Signing time: Mon 09 Jun 2025 05:00:46 +0000
Manifest this update: Mon 09 Jun 2025 05:00:46 +0000
Manifest next update: Tue 10 Jun 2025 05:00:46 +0000
Files and hashes: 1: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl (hash: 1jRuFYw0IZnetxJf1EQNnYos0DEaB+0nf3RGjDmXiLs=)
2: gGwKnYfvhCn5nwp-acIqahsS3nA.roa (hash: Rj4EAnxstBQ29bzxEKAGqDAmg0fXQP5ck4gqOBpaqb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:10:00:f1:f0:30:8e:3f:58:08:b9:a7:ad:bc:29:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Validity
Not Before: Jun 9 05:00:46 2025 GMT
Not After : Jun 10 05:00:46 2025 GMT
Subject: CN=7e8a86dd4e1281c234aa3461604b3ca5fa62821e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:68:12:c4:d9:9f:af:bb:dd:82:2d:cb:2a:
31:da:c2:6b:fc:4d:75:81:a2:13:40:e3:0c:1e:5f:
1c:63:4f:91:45:ba:88:65:28:c5:a1:c7:ca:5e:4d:
ba:75:52:95:79:25:a5:bb:f2:f2:71:b6:58:86:74:
f9:59:e3:a6:da:cb:c7:71:54:08:d6:c3:72:38:ee:
88:f0:4e:33:fa:74:00:4d:88:bd:c3:ca:42:35:fd:
f7:e6:d1:b0:c0:3d:f5:d4:ae:72:69:96:a1:ad:1c:
49:c5:4a:9c:9e:94:9b:86:0d:53:29:07:73:b9:30:
89:c1:ba:3b:0d:88:aa:de:7a:df:76:b7:7e:c0:5f:
38:f7:02:da:89:9b:17:28:9e:22:9b:9a:4a:42:ee:
cd:20:23:b3:0e:d2:20:4d:63:31:6f:e0:71:58:ad:
a4:e0:d4:b4:10:07:25:bc:87:f2:8a:60:cd:91:fb:
27:b2:c3:38:97:c7:eb:ca:a6:0a:5a:88:21:0f:8f:
ed:11:e2:55:2a:4b:12:44:1c:0b:c5:88:bb:b3:be:
3e:6c:5c:0f:b1:5d:3d:a3:63:49:a8:55:1d:01:ff:
a9:fb:65:12:80:54:ae:11:c5:ce:ab:a3:fb:a8:bc:
8e:2a:6d:30:46:49:38:3d:78:98:4b:27:c7:ef:74:
06:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8A:86:DD:4E:12:81:C2:34:AA:34:61:60:4B:3C:A5:FA:62:82:1E
X509v3 Authority Key Identifier:
keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fb:3f:34:b0:38:61:07:c9:2c:d7:4f:90:bd:15:97:50:96:
26:3f:3e:28:1d:63:fc:53:33:d7:87:25:1b:0b:d7:53:03:fc:
ba:79:af:71:a4:d3:ca:f3:45:0f:9b:a0:9b:f0:ba:ea:a1:67:
d9:fc:85:fa:d8:78:ad:05:d1:91:cd:12:bf:96:a4:14:81:f8:
e4:38:c0:99:75:43:cd:ba:7d:c9:60:97:45:4b:1d:d2:8e:ee:
bc:5a:fc:1c:35:f3:76:8e:d8:c1:db:83:40:a3:f8:15:20:fa:
a2:94:e8:a9:dc:a2:db:c3:78:9d:2a:63:e3:30:2c:06:f7:ed:
a1:07:bd:e3:76:ed:f3:ac:44:b5:43:69:b1:d0:16:21:17:a6:
a6:26:b4:a1:00:a6:c7:ba:f7:10:35:0a:2c:7b:b5:44:b9:72:
c2:f3:bc:51:d5:ca:d7:64:bb:df:3d:61:45:dc:8c:0c:8f:53:
35:93:ae:bb:6f:90:ba:cb:d9:c7:13:47:89:23:c5:ae:79:84:
ab:e5:d8:23:00:d6:62:3a:1f:bd:c1:e2:f3:13:b6:7f:2b:c7:
b3:aa:b7:83:a7:0f:a5:d1:8f:15:e8:80:ca:fe:0e:60:08:7d:
ee:61:54:31:a2:8c:5e:b4:88:23:cc:22:2e:b0:9a:03:c9:79:
6e:b2:ce:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:44:16 2025 by rpki-client