Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
File: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft (raw, json)
Hash identifier: g88QuAi+gTlkom6PM3GHF+2Jqqt4DTZofiQpDO+PHko=
Subject key identifier: 89:11:9A:A2:D7:EC:2C:12:F9:04:E1:46:4A:11:27:22:83:CD:2A:AE
Authority key identifier: F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
Certificate issuer: /CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Certificate serial: 019747B078FC81ADF97B1FC81E8B452FE120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
Manifest number: 1269
Signing time: Sat 07 Jun 2025 00:00:36 +0000
Manifest this update: Sat 07 Jun 2025 00:00:36 +0000
Manifest next update: Sun 08 Jun 2025 00:00:36 +0000
Files and hashes: 1: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl (hash: gcKM67VJXzVXtpO86rsX9qiPt5q7o9zuwng35U48M2A=)
2: FhvwZmZbFQ5_XSu4XdZkFej3jvE.roa (hash: ld2MBpkdINa/HpitEI9hE8KrLNtvxY4fg+rJ1pVUK1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:78:fc:81:ad:f9:7b:1f:c8:1e:8b:45:2f:e1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Validity
Not Before: Jun 7 00:00:36 2025 GMT
Not After : Jun 8 00:00:36 2025 GMT
Subject: CN=89119aa2d7ec2c12f904e1464a11272283cd2aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:46:0f:18:dd:b8:da:09:c7:76:cd:84:6d:24:
98:55:8c:ca:f0:47:ed:fd:84:75:5d:79:e8:8a:0e:
6b:3b:ac:a7:75:12:1d:da:c1:05:32:0e:1e:e5:a3:
d9:6b:85:7b:fe:3e:73:37:07:c7:f3:9d:a5:5a:74:
ba:33:b5:48:7b:e3:36:c2:c5:9e:ee:4f:c8:d7:c1:
24:d0:ce:2c:15:a9:ac:ee:cd:f2:b0:2c:c4:5e:9d:
c5:99:6b:13:e6:d5:30:a0:47:a8:70:be:d2:ca:95:
3b:49:c0:88:0a:c2:aa:da:84:8c:c4:73:bf:a3:49:
5e:a6:3c:0d:b9:fc:65:00:5f:a4:f0:83:dd:72:3e:
c9:f3:62:52:fe:49:6a:8c:54:a8:5a:1f:4c:50:75:
01:1c:2f:a1:b4:4b:e0:c8:7d:d6:ad:cd:f4:cf:19:
1d:78:35:53:f5:2e:96:59:35:0e:76:5a:c3:ee:86:
0f:ee:b9:4d:e5:fd:85:d1:b5:d2:5f:ff:a7:68:d0:
a2:71:52:1e:94:ae:4c:4e:1e:a0:e9:75:21:8e:0e:
7b:db:9a:ad:41:97:9b:b0:1c:7a:97:05:99:62:ba:
d6:18:5e:36:aa:a6:6b:0f:b4:2a:16:46:0b:12:13:
74:6e:ba:e0:8f:2c:b1:41:3b:96:93:f5:87:02:6a:
c6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:11:9A:A2:D7:EC:2C:12:F9:04:E1:46:4A:11:27:22:83:CD:2A:AE
X509v3 Authority Key Identifier:
keyid:F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:14:1f:4d:ac:17:89:f7:a7:e3:2a:fd:f0:62:30:d3:c8:b4:
0b:e3:68:f7:48:0c:59:9b:99:90:ad:02:a4:5d:fa:84:5d:99:
86:52:ed:54:5f:e1:7c:c3:e5:41:c0:e3:b1:f5:3d:d7:e5:de:
2a:85:45:9d:27:eb:fd:46:ae:3f:22:a8:ef:1a:9a:b1:e9:24:
f8:88:71:8b:04:9f:2d:d3:8a:f5:86:45:a2:46:07:e6:6b:33:
14:f3:20:0c:3e:d3:07:52:ec:48:e1:db:00:0f:b0:ed:a7:5c:
80:d9:82:d2:4c:dd:31:63:f6:8b:cd:da:c7:3d:56:c1:a1:fe:
d4:c0:ed:86:06:36:4a:9f:f2:4d:29:99:e5:27:e6:a0:9a:eb:
af:db:2a:c3:19:6b:ea:11:fd:08:95:bc:1b:ee:d6:a0:41:d0:
f8:24:7f:39:82:e5:0f:e1:8e:63:ea:e6:04:2d:43:d5:f1:a0:
e8:dd:e8:40:09:d1:26:a3:ba:6e:6f:56:54:5a:15:e4:fd:d6:
77:97:50:9c:4f:e5:56:78:4d:99:c0:54:3a:a2:66:6f:3f:c1:
b2:c5:31:4f:8d:67:da:8b:bd:ea:5b:a8:5b:d0:7e:57:7c:08:
dc:c6:ab:4f:ba:51:79:73:57:80:44:68:90:85:f2:fe:1b:5b:
32:3a:7f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:33:56 2025 by rpki-client