Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
File: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft (raw, json)
Hash identifier: g9YYNxcgrRaRf02k/VZOPptAf026SDEyk6i1XtStvrQ=
Subject key identifier: F5:7C:93:9D:05:35:73:07:76:60:DC:7F:55:43:87:B5:87:14:AD:AA
Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
Certificate issuer: /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Certificate serial: 019758DAF404128D51C9EC9969BD2A4191DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
Manifest number: 1584
Signing time: Tue 10 Jun 2025 08:00:33 +0000
Manifest this update: Tue 10 Jun 2025 08:00:33 +0000
Manifest next update: Wed 11 Jun 2025 08:00:33 +0000
Files and hashes: 1: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl (hash: 5V7RzZLKRaBM7TDbvYjw7y5UmCv1eW3nBS3dWayQM48=)
2: gGwKnYfvhCn5nwp-acIqahsS3nA.roa (hash: Rj4EAnxstBQ29bzxEKAGqDAmg0fXQP5ck4gqOBpaqb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:da:f4:04:12:8d:51:c9:ec:99:69:bd:2a:41:91:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Validity
Not Before: Jun 10 08:00:33 2025 GMT
Not After : Jun 11 08:00:33 2025 GMT
Subject: CN=f57c939d053573077660dc7f554387b58714adaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:3f:f9:3e:8d:46:92:71:e5:f7:93:da:bb:
15:5b:75:46:cf:d8:ba:c5:2a:ef:ce:2d:04:2b:ad:
80:ff:13:64:a1:45:cf:ce:4c:5a:74:18:9f:99:4e:
0f:ee:8c:c5:cd:7e:28:ce:a6:4b:ac:87:3f:e9:d2:
8a:0c:39:84:08:94:68:b3:0f:df:de:bf:a0:32:3f:
b1:d6:b4:b4:e2:22:09:84:17:e0:67:32:24:8e:bb:
4d:3d:71:b3:72:69:82:ed:19:5e:32:a2:ff:72:63:
fa:72:ef:e2:2a:ae:4b:a3:93:93:b2:2c:26:88:cf:
96:93:91:17:3e:91:3b:46:f3:75:f6:cb:94:66:e6:
b6:20:af:7b:c7:fb:b5:54:0c:70:41:f7:94:d8:3c:
72:04:03:f3:9a:c1:ef:77:a9:77:4f:02:dc:aa:a6:
29:f4:f1:34:f5:5f:4a:3d:24:10:5f:78:60:50:cb:
d3:14:94:32:19:d9:45:7d:15:29:b8:b0:86:f5:84:
5f:9c:ea:9a:7e:ca:65:dd:ce:9d:20:e2:c2:e5:39:
88:03:31:ec:ee:87:2b:f8:b9:2b:c6:01:1d:6c:93:
f8:68:11:66:0a:28:fa:30:0a:61:09:d3:02:02:e1:
3e:90:54:70:49:ef:b4:a7:01:c3:73:df:18:02:53:
83:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7C:93:9D:05:35:73:07:76:60:DC:7F:55:43:87:B5:87:14:AD:AA
X509v3 Authority Key Identifier:
keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:41:07:83:9d:98:49:43:73:9b:05:21:0d:6a:10:75:df:10:
d0:c2:fb:ae:d1:e0:de:87:8f:ff:3b:b4:46:ef:8f:c2:83:7a:
bd:5a:c4:4d:94:73:d9:3f:fb:8d:c9:75:27:a5:cb:8c:ba:cc:
0e:ef:bc:71:a3:49:8c:f1:4e:7e:fc:2b:a9:37:dd:73:97:1e:
8b:87:d7:80:88:3a:66:34:0a:78:12:cb:d4:a8:39:4b:c6:3b:
83:b2:13:b1:23:16:94:a9:67:29:c6:a1:ab:d4:56:95:06:67:
b9:fa:95:a0:2c:04:c2:b3:60:69:a9:ca:f7:2a:47:eb:a3:ea:
ab:85:1d:3c:27:8b:88:1a:01:93:49:28:9b:ba:47:f4:97:f9:
39:0d:e6:c8:f2:03:94:7c:af:3b:41:a5:80:fe:af:62:d2:f1:
74:e5:28:75:c7:b2:bb:4e:45:18:04:1a:43:60:ef:71:c5:4c:
0f:af:7b:6d:0a:ea:62:07:4c:ad:41:1d:4f:54:d9:75:c1:9d:
77:46:e8:27:99:53:f6:d3:ef:ad:06:50:e2:e3:f0:73:5d:ca:
f9:8d:c1:9b:bd:3b:c8:b2:0c:1e:fb:22:1d:46:5c:f9:2d:95:
b0:bf:af:db:d9:58:78:18:2f:0a:0c:c7:a6:2e:80:94:53:d9:
3d:e4:ba:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:25:34 2025 by rpki-client