Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
File: 9h0r7udUOkGpCKGgHs_AqHJqOuI.mft (raw, json)
Hash identifier: NA/kFEbac1LJn5PKWcNaZZd8s4TsXgjxFa9tSt3uB4o=
Subject key identifier: 4E:F2:1F:DE:2B:5B:FA:71:CC:47:FA:06:CF:72:B7:21:CE:98:36:DA
Authority key identifier: F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
Certificate issuer: /CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Certificate serial: 01977075E5258D96558651ED52E92EC02195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
Manifest number: 0A32
Signing time: Sat 14 Jun 2025 22:01:03 +0000
Manifest this update: Sat 14 Jun 2025 22:01:03 +0000
Manifest next update: Sun 15 Jun 2025 22:01:03 +0000
Files and hashes: 1: 9h0r7udUOkGpCKGgHs_AqHJqOuI.crl (hash: vZ8CG2Xay3xlGPXJJX0doKRRziqRtPj2VPNrRe+u7Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:e5:25:8d:96:55:86:51:ed:52:e9:2e:c0:21:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Validity
Not Before: Jun 14 22:01:03 2025 GMT
Not After : Jun 15 22:01:03 2025 GMT
Subject: CN=4ef21fde2b5bfa71cc47fa06cf72b721ce9836da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:5d:23:71:0b:ba:01:68:47:11:0e:3f:36:
fe:08:e9:f8:04:ac:ef:4f:62:58:3e:02:e5:93:e2:
7a:ce:5a:f8:9d:8b:99:2b:f4:8f:dc:67:95:ea:00:
dd:6c:af:07:10:d7:2b:2b:17:87:9c:9b:ae:2c:55:
52:13:ab:bd:a7:cc:30:69:ec:63:ab:ea:8e:95:0f:
f5:3e:d7:a3:1e:b2:cb:46:e9:25:89:6b:92:cd:bc:
ff:0b:6b:16:89:dd:67:3e:b1:3d:38:be:f6:58:bd:
74:56:84:46:ad:73:16:44:34:a6:62:ae:99:bd:7f:
f0:83:2f:ab:86:5d:8c:7e:24:45:ba:ee:29:9e:16:
d3:49:1b:9c:04:ee:24:d1:bd:2e:85:cf:39:0e:82:
98:cb:8a:11:eb:bb:5b:66:5c:69:11:04:5f:1f:02:
e5:35:34:b5:26:0f:c3:8c:08:ea:b5:80:29:5f:2d:
d3:db:20:e0:ee:f9:e3:2c:65:93:a1:a1:2d:03:9c:
de:7d:a0:95:c3:38:74:70:b9:5d:1a:f1:b3:81:39:
1f:b7:cc:f0:37:db:8a:9d:93:cb:5c:d0:e3:82:9e:
f1:0d:46:8c:fe:7b:e6:56:54:cf:c5:37:9e:5c:23:
58:19:a2:9a:44:b6:62:2a:9f:9d:b7:78:d8:19:da:
03:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F2:1F:DE:2B:5B:FA:71:CC:47:FA:06:CF:72:B7:21:CE:98:36:DA
X509v3 Authority Key Identifier:
keyid:F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:de:01:71:60:66:72:04:09:6d:6f:57:9f:f4:f1:45:75:76:
57:5c:e1:3f:1d:3f:c1:ed:84:73:f5:40:32:cf:b6:53:4e:5c:
21:d4:e0:f8:96:2b:90:0a:7d:32:2a:97:2f:ad:ca:92:89:50:
95:16:ae:17:d5:ca:26:c7:a4:b9:bd:0e:d7:c8:c2:c3:68:49:
f8:42:7f:dd:c9:77:b9:34:31:aa:27:c8:43:3d:92:4f:a8:a8:
5d:f9:2b:4d:9d:1e:45:af:bf:0c:b3:6c:03:3e:0d:c6:1a:61:
d7:b6:cd:97:4e:7d:93:b8:41:89:81:c5:66:a2:6b:ad:5d:13:
b0:f9:b9:4c:9c:a2:a7:fa:22:8a:db:16:11:27:2d:3f:a1:a9:
00:84:77:65:1e:ec:38:f6:2a:eb:08:e5:0e:bf:c7:2f:df:f6:
90:74:58:7e:f7:ef:f2:b7:c3:96:97:dd:32:76:b1:f6:b9:8d:
d5:93:33:f7:b7:ae:b1:5f:5b:70:d2:1e:52:f4:e1:70:c6:cf:
22:cc:84:04:f7:ce:ec:16:a9:38:19:fd:01:10:03:e0:d1:ba:
91:de:ea:b2:3c:47:19:c0:77:eb:53:d8:5d:9c:51:ae:81:4e:
fd:97:b7:f2:7e:c2:ef:37:35:57:a7:2e:61:73:88:09:a1:e8:
12:2c:b6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:05:20 2025 by rpki-client