Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
File: 9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json)
Hash identifier: tun5muOn4WWYbjX2sx+0BWXGD6BW6dLRe61nWteg8Q0=
Subject key identifier: 31:FC:E7:33:A0:0D:D9:C9:96:59:F7:B1:D1:68:9E:0E:75:54:DB:53
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial: 01974B8DC0AF74B42714221C064E7819831D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 18:01:10 +0000
Manifest this update: Sat 07 Jun 2025 18:01:10 +0000
Manifest next update: Sun 08 Jun 2025 18:01:10 +0000
Files and hashes: 1: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: zZfpqFkNAxoFzXqakVrcFhhCtb00RuuAWoFAzrOh6Mw=)
2: LF_3HwZmRrCki2d-FP5TfnY-Yfo.roa (hash: OqUUHUSkyKdGpgaBU1hHW7IYtyTJfajGz9ID3t644ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:c0:af:74:b4:27:14:22:1c:06:4e:78:19:83:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Validity
Not Before: Jun 7 18:01:10 2025 GMT
Not After : Jun 8 18:01:10 2025 GMT
Subject: CN=31fce733a00dd9c99659f7b1d1689e0e7554db53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f4:3f:a0:61:5d:bc:2f:62:1f:aa:1b:e7:09:
81:73:a2:0a:3a:99:a1:d0:af:ba:2f:83:f3:58:ca:
1c:66:03:60:2d:0b:12:9c:01:23:5a:9f:a5:f3:c2:
e2:1e:07:3f:19:23:0a:9b:76:2e:0b:2f:e2:6d:77:
eb:3b:80:a0:e5:21:c2:c8:f3:b5:4a:2c:db:ee:29:
54:b0:60:31:a0:38:02:60:8a:c5:0f:5a:ad:eb:47:
17:4e:6c:81:27:d2:07:b6:ef:17:f2:15:68:82:a8:
bc:67:88:d3:ff:c5:4f:d8:57:4c:68:fc:a7:3c:75:
17:96:6b:bd:cd:04:73:bc:a1:e2:52:ec:8f:77:26:
fe:03:ed:ef:25:1d:7a:c9:40:79:8e:82:eb:27:b2:
f1:12:ac:85:fa:73:e4:3c:e5:d5:92:40:02:e4:6d:
f2:75:08:1e:27:43:7c:14:ec:bd:28:56:46:99:ac:
48:a3:cf:30:5c:f8:04:c7:fc:0e:86:25:f0:35:3f:
c3:0b:7a:b7:a2:3b:a4:cf:7c:dc:f3:e9:9a:a7:b0:
24:06:9b:69:7b:45:ad:65:43:62:97:aa:f0:b1:ef:
7c:1f:5c:1f:62:3e:12:8b:c3:85:4c:91:58:ed:2a:
62:6b:65:57:4b:d0:4f:46:a6:19:6e:ec:af:3d:f4:
f4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FC:E7:33:A0:0D:D9:C9:96:59:F7:B1:D1:68:9E:0E:75:54:DB:53
X509v3 Authority Key Identifier:
keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:90:f2:7e:e9:07:64:e4:96:c6:ee:f5:74:ed:91:6d:8f:f7:
cd:b1:29:da:b5:cf:92:09:ab:54:a4:bc:c0:72:81:78:c6:8a:
e3:3b:e0:9b:c1:c0:90:94:30:d8:4b:04:ae:a9:4c:10:55:1a:
bb:eb:4a:8e:e8:c1:28:1f:d0:74:3a:8a:ef:5d:44:11:61:12:
3e:dc:e3:e4:42:3d:3e:66:20:80:ad:91:0c:8a:d2:ed:41:aa:
f2:66:1e:40:6c:9f:cd:d0:1f:51:43:82:a9:6e:bb:af:ac:ff:
6d:ac:42:55:c9:cf:95:33:d3:60:44:2c:ea:8b:91:40:1d:84:
e5:40:ae:73:57:58:1e:40:aa:5d:b1:3a:81:1f:fd:62:cf:fd:
6c:4d:f5:1d:1e:bb:fd:e7:50:e3:e9:5f:3f:e1:f8:47:b1:cc:
3e:a8:d1:92:05:68:0f:e3:40:20:fa:72:b3:5e:a0:82:75:fa:
de:70:e8:35:e0:69:f6:89:e0:9c:93:b2:39:ac:b3:f4:ad:a3:
f5:c2:07:de:59:65:8f:76:6d:ec:c1:9e:3b:28:fa:1d:fa:f8:
b3:7d:b1:02:d1:51:5d:41:28:32:e0:2d:6b:f4:c7:8e:36:7a:
50:d3:7b:59:e0:da:c0:29:35:b8:2b:ce:35:7f:84:09:e3:a9:
9b:ca:8d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:51:12 2025 by rpki-client