Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: zRT3fGUslgGlyMO2c2iLT9MCsLAemLEt/wq2zGBkZ8U=
Subject key identifier: 72:D1:AC:63:85:FF:51:20:17:E1:FB:30:7F:9B:FD:55:30:07:79:FB
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 01976471D2C53489DACE3B0D716A81A8B2A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 0C98
Signing time: Thu 12 Jun 2025 14:01:10 +0000
Manifest this update: Thu 12 Jun 2025 14:01:10 +0000
Manifest next update: Fri 13 Jun 2025 14:01:10 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: yxXwhaxNxQPDBpV94HvQOgSkJd6p6whMFm2RQrlseHc=)
2: B8bTTGpK1L-pMyO-WGFk_7H-LC8.roa (hash: r0JNxuBgg4on067YK5COQPlyCkk+tp458uDvr2IE4z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:71:d2:c5:34:89:da:ce:3b:0d:71:6a:81:a8:b2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: Jun 12 14:01:10 2025 GMT
Not After : Jun 13 14:01:10 2025 GMT
Subject: CN=72d1ac6385ff512017e1fb307f9bfd55300779fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:ed:70:b7:33:45:f3:71:0d:ef:77:a9:e4:
3b:37:e9:1b:d5:ea:fb:e4:b5:66:3a:ce:7e:af:ef:
b5:3c:d0:48:d4:65:b5:36:2c:e1:c0:e3:f4:63:6d:
8b:35:b4:36:c9:8b:7a:e9:7d:a2:4f:63:f5:ef:98:
e4:0d:8d:92:b9:e0:bf:b1:8d:45:d4:d0:9a:cf:04:
aa:ed:c0:9a:e8:fb:fc:9c:1f:95:fc:ae:eb:c7:8b:
f4:b7:f7:c9:a0:4f:63:af:a4:bb:65:57:63:80:17:
35:bc:4e:e8:98:28:58:ce:e1:ba:88:d7:49:13:8a:
e1:54:90:b5:77:c8:c4:85:d5:72:2e:6b:76:f0:b8:
02:d7:bf:b7:ca:cd:80:0c:95:2f:64:65:73:b2:b9:
06:dc:4a:76:33:fb:62:ca:24:b2:12:de:a2:2e:40:
06:ad:d8:d3:db:98:37:10:71:da:ea:31:a0:d7:bc:
64:71:82:c2:d7:88:0c:c1:47:d5:7d:6b:a9:8f:3d:
39:76:2d:b6:22:ef:0c:db:33:37:41:db:9e:1f:4b:
97:a1:a2:6c:64:1e:1d:99:26:0b:d2:a0:e8:e2:1b:
b4:bb:84:6b:f8:3a:ed:50:3b:20:b9:b0:53:8a:ff:
6d:9e:1b:28:05:18:e4:9f:c0:8a:73:c1:cf:c9:63:
6f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D1:AC:63:85:FF:51:20:17:E1:FB:30:7F:9B:FD:55:30:07:79:FB
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c6:af:39:5c:39:e9:7b:be:11:74:4d:04:ad:96:65:8d:7d:
99:72:65:83:e4:72:24:f9:32:cf:48:c7:6a:8a:a8:27:cc:f6:
0a:17:70:10:1b:ce:74:a8:80:21:0f:ac:35:55:39:71:bb:f1:
72:8f:b1:fd:37:b9:3a:ea:86:ad:e7:33:95:35:0f:61:97:c6:
71:ce:87:4a:51:0a:18:52:31:79:e2:12:c4:0c:53:1f:b6:b4:
d5:08:da:d2:93:2c:28:2f:7b:04:9d:92:b4:8a:5e:f0:ed:2c:
c2:41:27:9e:1f:64:b9:69:1f:78:3c:2a:aa:b2:54:79:a9:95:
9d:ce:9e:6d:5b:99:2f:cb:42:fc:9e:da:12:f0:41:e3:c0:98:
d7:d6:e4:5d:7f:be:7f:93:cf:19:45:2b:0a:3c:a0:32:57:c3:
11:14:92:ee:d8:b9:d5:1d:db:a6:9c:0c:a0:c0:08:e6:71:f2:
b8:73:fb:f6:06:ee:a1:ee:07:ed:5c:34:cd:25:20:de:7f:0e:
2f:be:e8:a7:d4:db:aa:41:33:fe:40:20:b9:da:46:ae:b0:d0:
9b:f1:8b:d7:b4:fc:ae:f1:cb:34:c1:9e:06:89:4f:6c:36:dd:
48:d8:8a:df:3a:2e:a8:70:23:9c:47:81:52:56:5b:fd:f0:84:
64:74:29:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 22:02:57 2025 by rpki-client