Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File: Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier: 8tbRiV3OkU5wS2pBCQrBOLcx4rCP1isyb+hUMYUPbms=
Subject key identifier: D9:C0:D2:A1:7A:47:2B:3E:35:77:AE:01:B2:69:4C:CC:3E:A2:60:50
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer: /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial: 01976D3D79AF1F476AD979F5B82BEA4E1611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number: 09CC
Signing time: Sat 14 Jun 2025 07:00:34 +0000
Manifest this update: Sat 14 Jun 2025 07:00:34 +0000
Manifest next update: Sun 15 Jun 2025 07:00:34 +0000
Files and hashes: 1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: fHHT6ZpdZU+MZGmLUv4jYSSjZ4YLy62hW8xJH0N1SE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:79:af:1f:47:6a:d9:79:f5:b8:2b:ea:4e:16:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Validity
Not Before: Jun 14 07:00:34 2025 GMT
Not After : Jun 15 07:00:34 2025 GMT
Subject: CN=d9c0d2a17a472b3e3577ae01b2694ccc3ea26050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:29:ab:a1:1a:95:a9:a8:1f:68:78:a8:be:
00:0c:bd:ee:18:56:59:c7:fc:96:dd:a3:42:ac:42:
a1:15:53:10:6b:85:0c:bc:1e:e5:25:bc:37:ba:b0:
a8:a0:7a:92:8c:ef:5f:f5:54:e6:be:98:8a:b2:7d:
bd:31:cc:1b:1f:a8:7f:35:f6:ba:93:7f:e6:fc:79:
5d:63:af:f4:25:43:4f:b2:94:b0:42:43:32:2d:3d:
a5:ff:38:e3:04:a4:69:0c:e5:12:10:2c:17:8f:79:
5a:6d:89:f8:49:0a:75:74:6c:94:f6:43:1f:5e:e2:
28:38:8f:45:3a:5d:c4:41:9f:ea:cc:77:c0:8d:5c:
69:0c:63:f6:09:2c:cf:ae:3f:c9:f5:5f:1a:1c:b9:
4b:a1:42:65:d8:36:24:0c:77:96:3b:e0:92:17:17:
79:68:90:17:8c:37:af:44:f1:03:4d:a1:c2:86:22:
81:b7:bd:9b:d2:57:81:28:a4:f7:c1:3d:22:5e:57:
14:38:2f:7a:6a:99:2d:fe:5b:5e:8f:24:7e:c2:80:
57:7a:c8:9b:ae:ee:6f:9c:1a:ec:70:7b:0e:6c:0f:
e2:47:8a:fa:ee:bb:9d:b2:1f:29:8a:9c:02:3c:d7:
26:f9:f9:1d:84:5e:56:92:e2:39:e7:04:f3:e4:8a:
8c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C0:D2:A1:7A:47:2B:3E:35:77:AE:01:B2:69:4C:CC:3E:A2:60:50
X509v3 Authority Key Identifier:
keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:68:91:ff:8e:f2:92:7a:25:59:20:ab:1f:d5:1c:fa:2c:61:
20:ef:b1:83:cc:de:83:8e:f8:f5:fb:61:4f:43:e1:29:eb:53:
06:7b:3b:e0:ad:5d:bb:65:2b:d9:5e:7d:bd:a4:ad:6c:b5:62:
19:30:b5:82:22:c2:34:4f:85:b3:4a:9a:70:c3:d3:f9:04:6e:
27:a9:98:a0:1c:ea:2f:fb:52:2e:90:f3:46:fd:8b:d1:b2:05:
04:d3:3a:43:b4:45:f5:4e:e2:b2:1c:d1:64:eb:23:ea:a3:fc:
ca:61:a0:67:5d:ad:fe:3b:4a:01:8d:81:72:0c:89:2d:cc:15:
d9:e3:d4:4e:97:2e:47:d7:d2:65:aa:e7:b9:58:da:4f:af:ad:
9a:6b:8c:a8:c9:ee:1c:e2:0d:cb:f5:fd:a3:a7:f2:c7:c2:f5:
34:9f:5e:d7:54:31:c5:84:7f:68:9f:60:32:9b:2d:2e:24:69:
2c:7a:33:f2:22:7a:3d:3f:6f:10:86:d1:25:f5:00:ca:e9:00:
66:51:41:45:85:ef:96:61:ad:58:c7:82:09:15:e1:c2:1f:c8:
fe:ed:9c:1b:93:d1:00:1a:3c:9c:69:d6:13:4d:2c:c4:64:c4:
1c:cf:f1:c5:30:fe:58:89:1c:85:b5:02:0e:00:7d:c4:0e:8e:
33:71:69:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:32:09 2025 by rpki-client