Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
File: 9LXIjF7ZSvHJnVAboClfQENyUcQ.mft (raw, json)
Hash identifier: henrAR8/7VSy3BecDZ7UOlniZ87hkqdpqTUufDALnk4=
Subject key identifier: CB:1C:CB:D8:AC:A4:3D:27:AA:DD:80:2D:42:11:D7:5C:B6:77:02:58
Authority key identifier: F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
Certificate issuer: /CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Certificate serial: 01977F0CC130DCCBFB708BCC655F35DACCA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
Manifest number: 14AE
Signing time: Tue 17 Jun 2025 18:00:31 +0000
Manifest this update: Tue 17 Jun 2025 18:00:31 +0000
Manifest next update: Wed 18 Jun 2025 18:00:31 +0000
Files and hashes: 1: 9LXIjF7ZSvHJnVAboClfQENyUcQ.crl (hash: kQEqpeFbbFcWPfvuYcl+UOLdSQZsAt3pmbNL8JLRQ3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0c:c1:30:dc:cb:fb:70:8b:cc:65:5f:35:da:cc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Validity
Not Before: Jun 17 18:00:31 2025 GMT
Not After : Jun 18 18:00:31 2025 GMT
Subject: CN=cb1ccbd8aca43d27aadd802d4211d75cb6770258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:ef:a6:8d:78:a7:c4:3d:46:c0:a7:5a:4d:
83:3b:7b:23:6c:e2:20:71:be:4a:8f:3f:b1:99:c7:
e2:86:26:07:45:b2:b2:5f:9b:a2:42:4f:02:48:ba:
c6:92:65:8f:98:e6:7c:ca:a4:df:83:9b:da:fb:b1:
43:0f:ff:85:4d:f7:ce:2a:34:09:1f:ff:4c:ca:85:
af:4e:d3:3b:38:d2:11:a6:ad:2d:30:49:93:e1:23:
e0:5b:05:7c:4e:a3:2b:5a:62:67:06:1d:9d:73:3c:
f3:f4:12:d5:78:51:3c:21:c5:a1:e1:ff:ef:96:96:
f0:36:44:31:04:a2:00:93:01:eb:6f:b5:5d:49:fd:
1d:c3:e2:b6:95:99:ae:9b:2d:36:39:78:9f:0c:d5:
30:9c:5b:a6:ea:95:d8:75:1e:40:3c:61:4c:37:fe:
ca:eb:d6:59:04:95:94:5c:9e:97:f5:c4:29:13:fb:
d0:44:e7:0d:ce:43:81:c3:9d:7e:39:c4:bf:8b:c4:
58:a5:6e:cb:cf:7a:87:66:ce:de:3b:9b:88:60:c9:
1e:bb:74:a8:b2:1f:67:a8:a6:7f:1b:6a:a7:f7:70:
dd:64:4d:7e:b4:b2:36:b5:8f:15:f4:43:74:ce:5d:
a3:33:f1:18:be:fb:af:86:2e:2b:fe:6e:61:0c:38:
8a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1C:CB:D8:AC:A4:3D:27:AA:DD:80:2D:42:11:D7:5C:B6:77:02:58
X509v3 Authority Key Identifier:
keyid:F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:de:30:44:59:e8:ae:f4:6d:04:78:c5:b1:6e:9a:5f:ea:5d:
b2:07:a5:65:cb:ed:f8:46:94:ea:93:1f:eb:ba:80:6f:6e:0c:
18:de:f0:07:0f:22:d0:d9:29:c7:18:c1:9a:8c:97:aa:95:9a:
e3:c1:59:5a:3e:f1:83:07:b6:1c:a8:91:e4:5a:18:38:9f:a2:
12:b1:22:50:38:02:73:a4:89:28:35:cb:a9:0b:ea:0b:d4:72:
59:a1:86:57:3d:c1:8c:3c:2d:cb:e9:6c:6e:f9:25:e6:23:f8:
55:b6:b9:21:9d:a3:c3:8c:6a:97:f5:fc:5c:9b:a9:dc:7f:ae:
35:9d:b8:5a:9c:81:18:1a:67:60:e0:10:41:d2:3d:2d:87:05:
14:8d:41:a5:52:8d:28:03:13:bd:06:4f:c6:a6:62:4b:a0:e0:
a9:c5:50:8f:9a:a2:71:17:b7:6a:ac:a8:e9:b7:1c:60:d0:c2:
aa:2c:e2:38:d2:2c:08:95:d0:26:91:3e:95:03:ba:bc:5c:66:
94:01:73:03:31:c2:3f:0b:fb:1f:88:46:ca:76:25:1d:78:f8:
4a:41:19:78:8a:ec:17:1c:e8:92:f8:15:41:32:22:33:ba:63:
66:f5:3e:c4:18:f3:25:76:a8:a4:21:e1:0f:1c:a5:1d:4d:65:
a3:cb:06:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:35:01 2025 by rpki-client