Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier: e/O7qmiCx0XrFCRK3+mmHlUPCzuawjkpNrMrITJwjP8=
Subject key identifier: 75:70:F7:46:8D:55:70:0A:5D:6C:4C:34:75:F0:15:B4:0E:4E:EC:88
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer: /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial: 01974AE85DDF13711FDE72856098A202EE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number: 0C5E
Signing time: Sat 07 Jun 2025 15:00:31 +0000
Manifest this update: Sat 07 Jun 2025 15:00:31 +0000
Manifest next update: Sun 08 Jun 2025 15:00:31 +0000
Files and hashes: 1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: Z8ZUmW8NI4ijQzSAkjoKHR2Dn/y7LsxKLWHxXquBEM4=)
2: lTwG7fexEhfG1KlVMWVQwuwbbtc.roa (hash: bfD7+ofvPCOaA8CmUpbLhJtSVYv9giSBukJUfQkg6wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:5d:df:13:71:1f:de:72:85:60:98:a2:02:ee:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Validity
Not Before: Jun 7 15:00:31 2025 GMT
Not After : Jun 8 15:00:31 2025 GMT
Subject: CN=7570f7468d55700a5d6c4c3475f015b40e4eec88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a5:8f:c0:95:32:3f:6b:3f:3e:6e:e1:b3:67:
9a:b0:29:c8:f4:cb:1f:e0:b2:a5:79:e4:99:75:b3:
25:8d:68:cf:4d:a5:d3:de:59:fa:21:96:f9:94:45:
33:16:b1:b7:bd:26:cb:54:f0:5e:b9:b9:32:67:8c:
d5:61:24:b1:2d:12:c6:60:ca:51:1a:46:42:a7:6f:
33:05:af:ea:3e:9c:12:dd:a9:81:d9:33:72:ca:86:
7d:65:7a:d9:69:9e:84:e2:8c:53:36:49:5f:89:27:
35:1d:0a:90:fe:72:9b:2c:35:85:b8:ec:ec:83:96:
59:8f:5e:9b:dc:ef:93:01:9a:7e:f3:8e:cd:ff:18:
7c:b3:9b:6c:8f:00:4d:32:6f:9a:33:10:e2:2f:36:
7f:b8:af:c2:89:30:2f:a5:62:34:e8:e6:19:b1:0e:
70:43:d6:c4:99:70:d2:ae:56:bc:2b:b0:b4:62:3b:
52:45:6f:91:67:99:05:0d:70:8d:c1:9b:9e:f3:2a:
0c:a7:50:e1:ef:69:00:cb:09:af:f7:c1:ad:e6:ab:
ae:9d:41:3b:eb:78:b1:49:4f:64:33:67:ef:39:62:
18:5f:d8:c7:f8:7b:d7:14:26:7e:f7:fa:b6:ae:df:
a2:74:7e:b0:a1:67:07:16:84:2a:88:ac:29:87:b7:
32:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:70:F7:46:8D:55:70:0A:5D:6C:4C:34:75:F0:15:B4:0E:4E:EC:88
X509v3 Authority Key Identifier:
keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:49:a3:a5:d2:8a:3a:3d:91:c3:4b:42:1c:7c:ef:e8:aa:af:
db:89:74:c7:cb:17:92:e0:8f:42:0a:25:bc:d9:9d:7a:c7:8f:
11:5a:8d:ef:20:44:d5:26:39:e2:e9:06:bc:e7:07:51:5d:73:
55:a6:a0:e1:84:0e:2b:75:6c:66:4d:f0:ef:6c:b0:29:23:8c:
b4:dd:fa:1a:28:b2:d3:94:19:66:95:ac:39:82:ae:cd:f3:c6:
dc:f2:53:dd:59:80:21:b9:94:3d:06:bc:61:64:ed:cc:61:c8:
e5:c8:68:23:67:bb:6e:c0:c4:14:9c:64:70:ef:7c:d7:16:da:
23:ff:8e:ec:7b:2e:83:cb:26:98:b8:3b:43:e6:a7:16:ac:88:
7d:5b:00:c2:22:cb:f5:0b:c8:2c:9f:4f:0d:31:eb:26:6d:13:
88:71:00:8e:3c:8c:1b:6f:db:f8:e4:8f:30:26:d3:8c:0f:89:
fd:48:e2:ae:b3:d1:9b:38:51:80:f0:44:f1:e1:35:65:e3:07:
a7:e7:c4:bb:6b:ab:84:ec:c2:df:23:8c:79:80:c5:0b:24:bd:
dd:56:15:06:5a:9f:45:22:71:64:8e:a9:38:78:2d:b7:ad:e7:
a2:12:a1:f0:be:5f:e8:40:28:e8:36:6b:df:86:ef:83:f4:75:
a4:ec:75:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:53:35 2025 by rpki-client