Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: Gbuk096qFEnZj2b242HQHwly2LnDjchtA9r/74JY1Pw=
Subject key identifier: 9B:97:39:67:31:E3:53:08:60:8D:6C:E3:66:A9:C3:33:2B:78:C3:01
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 01976D3E040C5CBC76C8C3C139E9D4B079B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 12C9
Signing time: Sat 14 Jun 2025 07:01:10 +0000
Manifest this update: Sat 14 Jun 2025 07:01:10 +0000
Manifest next update: Sun 15 Jun 2025 07:01:10 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: PgVAscw5KVgMoHkQgzsfX1ibztGBG9xdln6zoRtBBE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:04:0c:5c:bc:76:c8:c3:c1:39:e9:d4:b0:79:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: Jun 14 07:01:10 2025 GMT
Not After : Jun 15 07:01:10 2025 GMT
Subject: CN=9b97396731e35308608d6ce366a9c3332b78c301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d9:6f:65:05:dc:b7:d2:e5:a6:38:09:68:be:
64:8a:f1:4d:3c:cf:b7:8f:f8:e9:b6:af:4d:bf:fd:
70:c7:59:90:ad:51:d7:e7:84:d8:92:d1:9d:22:bc:
b0:5d:a8:4e:80:08:d9:00:56:a5:37:16:46:05:e8:
24:b2:2d:af:cc:30:ee:96:92:d7:0c:06:94:78:7b:
96:7c:f5:8f:a0:9c:51:be:3d:7a:ea:8c:81:6a:4e:
38:87:7b:ec:c3:1b:9e:4f:55:90:84:a9:86:74:af:
4e:c0:99:1f:1c:bc:e6:41:f3:2d:69:93:23:33:1f:
29:6b:bd:3c:9a:37:65:5a:25:ca:bc:e2:a8:5c:6a:
41:11:ca:dd:4f:9b:84:d0:9a:6f:f3:d5:f0:cb:32:
1e:5a:70:9a:09:09:0d:40:5a:18:9e:73:17:18:69:
6e:12:3b:7c:cf:f0:89:a3:05:2d:c0:7c:9c:81:51:
80:f2:e4:3e:14:38:60:6e:e0:97:e7:01:67:99:c2:
0a:1f:f4:1e:3e:74:0a:99:22:60:5f:d9:17:cf:a7:
75:6d:4a:df:a5:d9:ef:d8:49:8a:4a:a6:b3:4b:09:
67:94:9f:93:7b:3b:cb:67:85:07:7d:41:e1:61:17:
f3:67:49:24:d3:b3:63:16:48:78:f3:56:d8:fb:bf:
f2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:97:39:67:31:E3:53:08:60:8D:6C:E3:66:A9:C3:33:2B:78:C3:01
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1e:53:74:c4:f0:37:42:ef:58:96:c5:58:c2:e7:9e:bd:f3:
a2:c4:51:1f:c2:8a:f6:4c:1b:84:61:8a:b2:1d:25:1c:bc:ee:
91:2b:c5:ed:d5:0b:b7:c2:13:c0:3a:3b:37:11:9d:4d:b1:66:
f6:cb:b9:6a:cd:5c:d5:e2:48:ae:73:53:4a:91:87:08:77:70:
f2:8f:04:19:98:ea:fe:cd:2b:f6:5e:1f:ef:29:08:c6:e8:57:
7b:8e:e2:cb:47:d8:57:f7:01:ca:35:a4:76:0c:45:55:72:b0:
70:dd:ee:c9:71:ea:05:c9:76:49:47:16:c5:28:41:6e:0b:57:
61:08:8d:88:7c:d4:5a:09:ae:ac:76:0e:4f:d4:2e:ba:4f:53:
9d:8c:0e:f6:7d:25:00:37:5b:a3:20:c4:49:f5:b7:92:2a:3f:
0e:3b:fb:f6:e4:b7:6c:6b:72:2c:b5:3f:9d:cd:e0:63:08:e5:
ac:c6:a1:39:3e:c1:0b:1e:32:c3:ff:ed:6b:b4:cd:2b:22:d4:
02:23:a5:d5:8a:87:1f:b9:1e:87:0f:50:8a:30:e6:b3:34:e3:
94:8e:71:82:b9:1e:fe:51:b2:ff:95:14:ce:8e:d2:ca:77:80:
26:59:d3:ec:c3:f6:5a:cd:06:af:e8:bf:f7:38:50:d8:9b:09:
29:f1:39:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:36:40 2025 by rpki-client