Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
File: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft (raw, json)
Hash identifier: KtMkofl8OjKwgnKdb51SkLDA+43nV7CQNQG8e9I1rYo=
Subject key identifier: 14:32:79:59:FF:8B:16:EA:48:2E:EB:CD:89:09:60:D0:37:07:25:70
Authority key identifier: F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
Certificate issuer: /CN=f57766f0726cff8618af968258f5bb229e937c6e
Certificate serial: 019770758EC95BEFD309F4409EC373AD9071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
Manifest number: 0CBD
Signing time: Sat 14 Jun 2025 22:00:41 +0000
Manifest this update: Sat 14 Jun 2025 22:00:41 +0000
Manifest next update: Sun 15 Jun 2025 22:00:41 +0000
Files and hashes: 1: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl (hash: lOk7zDQQHy37T1JXaS0YPy8kmBDWjUHzHSE21q2wkDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:8e:c9:5b:ef:d3:09:f4:40:9e:c3:73:ad:90:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57766f0726cff8618af968258f5bb229e937c6e
Validity
Not Before: Jun 14 22:00:41 2025 GMT
Not After : Jun 15 22:00:41 2025 GMT
Subject: CN=14327959ff8b16ea482eebcd890960d037072570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:06:71:3d:d8:0f:c2:3e:57:59:13:38:b5:19:
b6:97:cb:6a:5a:43:23:88:95:eb:5e:1a:6b:51:5b:
78:8d:e1:13:50:8e:51:a8:f5:77:ca:5a:48:62:21:
4a:35:35:c2:74:f8:38:a6:9d:70:2f:5e:78:58:7b:
3a:6b:da:05:5e:aa:1b:b9:84:d5:7a:13:b0:bd:97:
52:56:61:fc:c6:ca:bb:ac:11:10:cd:6b:97:b5:08:
f1:88:93:c7:c3:8f:52:53:69:75:8b:3d:79:c4:7f:
8c:f9:9f:a3:99:f9:5a:d5:be:ef:1b:93:92:c9:23:
a5:8f:4a:cb:37:40:33:9f:27:2d:d6:d4:99:b3:7b:
0e:51:e1:cc:33:20:ef:7c:ef:f2:91:ae:3f:16:8c:
3d:ea:1f:ac:cb:c3:7c:a3:74:45:65:15:19:fc:ae:
b5:67:8c:c6:36:08:5f:b8:e8:60:59:47:7b:62:32:
26:5e:5b:ed:e2:5b:e7:07:bb:c0:97:ec:d3:76:e9:
e2:5f:46:a4:76:b9:ad:2d:3f:62:a9:d3:61:f0:0b:
32:c3:ad:7e:b2:59:91:05:6d:d5:85:9c:9e:03:33:
3c:df:5b:2f:2b:b5:3a:11:e6:3b:f8:14:a0:9a:28:
ae:8b:67:b2:5c:1a:64:f1:59:7b:20:c6:9f:e6:5c:
b9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:32:79:59:FF:8B:16:EA:48:2E:EB:CD:89:09:60:D0:37:07:25:70
X509v3 Authority Key Identifier:
keyid:F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7b:37:5a:2f:8d:8f:6d:39:c3:83:85:72:58:35:0e:98:ff:
3c:8e:e6:12:6e:ef:05:80:10:6e:de:c2:5b:cc:04:80:e2:b7:
84:5d:80:1a:e0:a8:5e:40:5c:7f:4f:d9:66:75:73:4e:2e:e5:
a2:a0:59:a7:fb:48:14:7d:79:86:ff:99:80:6d:3c:b4:a2:3e:
e3:90:9e:f9:76:ac:3c:7b:63:cd:13:df:35:29:38:43:e6:39:
95:f8:c6:e8:83:56:cb:91:2e:01:9e:dd:68:8e:ff:d4:a2:02:
18:87:ee:24:87:28:bc:36:4f:7f:49:f6:12:9a:8d:ac:22:d7:
f7:a0:f5:03:68:79:fb:b3:e5:4b:d8:f3:2f:43:6e:99:34:5c:
dd:d7:85:4c:69:76:b1:a7:18:09:33:5a:88:24:69:e8:5d:b4:
d0:fd:7a:b1:6c:da:44:f3:77:bc:3a:7b:6d:d3:7e:6f:5b:d9:
0d:d7:a6:0c:77:95:ad:1f:a9:b7:26:5b:fc:b6:19:da:9f:78:
68:86:79:76:a8:9c:1e:5b:10:1a:1a:05:70:03:72:e6:08:d7:
5f:72:b8:fa:80:f5:4b:59:9a:0d:4b:bf:55:90:2d:f3:13:97:
63:f2:a9:c0:43:78:4e:45:ce:74:6c:33:8d:a4:3d:33:0c:81:
51:f0:62:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:39 2025 by rpki-client