Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
File: m9bIYDQsx5nCgHT2mXaKjsvapS4.mft (raw, json)
Hash identifier: qKaTDC7sLp17N8c+P6WPviJOLwNOetA7gVWVnN+gY6o=
Subject key identifier: 52:99:55:3B:ED:07:46:C6:50:56:43:8C:AE:CC:17:7A:D9:13:26:45
Authority key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
Certificate issuer: /CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Certificate serial: 01974968357AF6EAC9005A65FA0CEA1E7C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
Manifest number: 1323
Signing time: Sat 07 Jun 2025 08:00:55 +0000
Manifest this update: Sat 07 Jun 2025 08:00:55 +0000
Manifest next update: Sun 08 Jun 2025 08:00:55 +0000
Files and hashes: 1: E9yjq7sNmTyPb-NC6kzqBRLzrkw.roa (hash: Fv8DNDjTn+xqZTnmPhsaO+M3G5osAwVvGy2YaFQtoP4=)
2: m9bIYDQsx5nCgHT2mXaKjsvapS4.crl (hash: yegM4bvdYw7Htidu4bW4IwBDclTm/7BA5d1WqqKXSKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:35:7a:f6:ea:c9:00:5a:65:fa:0c:ea:1e:7c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Validity
Not Before: Jun 7 08:00:55 2025 GMT
Not After : Jun 8 08:00:55 2025 GMT
Subject: CN=5299553bed0746c65056438caecc177ad9132645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:b0:f4:d0:45:0d:96:cd:13:45:20:25:6b:
99:70:49:a5:9f:b3:79:91:34:b9:b5:d8:36:47:4f:
ab:cd:25:4a:73:2f:cf:3b:f4:a4:89:66:a9:5b:78:
58:64:0a:41:44:54:d5:b2:ec:4b:02:de:db:c6:54:
e3:61:c4:4e:0d:fa:e0:ba:c4:75:03:8b:d5:ed:ad:
19:b5:a8:6c:73:7e:8e:ae:ad:fa:66:d6:57:cc:56:
5d:12:ff:89:0e:eb:21:99:5a:85:2b:03:b7:87:4e:
67:7b:a5:67:c9:ab:20:8d:a4:47:ee:ea:92:d0:c6:
c8:46:ee:cb:44:37:3c:e8:10:cb:6e:f5:b4:8d:70:
4b:75:19:44:df:24:8d:04:ef:8b:a4:63:b8:ca:26:
ce:8e:25:3c:8c:f3:0b:87:11:9c:ce:93:eb:be:c2:
7f:fc:c4:cb:62:ce:93:2d:2e:dd:86:6a:0e:b3:8c:
ba:08:ad:70:82:99:1a:87:3a:9e:f8:75:50:bf:10:
24:1a:36:f3:71:0b:98:25:86:e2:7e:ec:80:19:03:
bd:b0:44:00:28:9a:47:e0:42:ca:c3:d9:f4:cd:dd:
97:f8:b3:11:6f:dd:5c:bd:be:da:db:c0:1c:d0:ae:
ac:2e:57:15:d5:c9:99:3e:66:e3:ac:e5:ee:26:c1:
1a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:99:55:3B:ED:07:46:C6:50:56:43:8C:AE:CC:17:7A:D9:13:26:45
X509v3 Authority Key Identifier:
keyid:9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8d:47:ba:ca:a5:1c:08:18:a2:2a:64:4e:99:43:45:a0:61:
8c:e1:74:28:e1:72:cf:22:ba:5f:48:95:48:a6:31:1e:e6:a8:
3f:a3:84:11:85:e4:b3:5e:7c:20:64:6a:1d:c7:d3:39:10:24:
8c:cb:d3:9d:58:9e:c8:25:5a:9c:1b:91:e3:3e:9a:31:f9:7b:
4f:2c:37:2d:e8:12:b7:c0:1b:25:88:ae:3c:a0:09:25:8f:ab:
3d:97:bf:8e:d7:91:98:c2:5f:18:a4:16:87:1f:6c:66:b6:ee:
13:d5:28:02:b9:6b:e3:91:c0:cf:bb:d9:00:9f:fc:54:c8:1b:
1a:7b:17:16:f9:c9:a1:19:21:9a:31:6e:2a:73:8e:62:46:11:
55:ad:3b:4f:88:84:54:22:e8:e7:1f:20:93:f7:8d:58:7c:34:
81:25:45:84:a2:d3:11:4b:1d:7f:7a:bd:8f:0d:69:ec:55:f5:
2c:fc:d0:8f:bd:b5:74:65:4b:e3:36:27:38:80:f9:ce:2a:7d:
7e:e3:7b:92:58:46:75:0d:38:be:36:00:6c:ec:60:5e:0e:2e:
95:55:67:21:e1:c9:32:a0:76:06:46:10:5c:14:ee:05:fa:9a:
30:2e:0f:43:18:77:6c:fc:cc:58:f8:cf:62:e5:3f:2f:56:44:
d8:6c:62:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:23 2025 by rpki-client