Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
File: 9kixVYLTS9UXCp3RO4EyW6uuXjo.mft (raw, json)
Hash identifier: wmAj5r3JFt0rt0fCfrIWmutszKYSIi9FUpmSyOyRckA=
Subject key identifier: B2:54:16:72:9D:0D:8F:04:88:23:93:9E:02:A6:FB:29:3C:64:16:F9
Authority key identifier: F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
Certificate issuer: /CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Certificate serial: 01976C9895459D4D574D2B2291FB5E0CFB63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 04:00:28 +0000
Manifest this update: Sat 14 Jun 2025 04:00:28 +0000
Manifest next update: Sun 15 Jun 2025 04:00:28 +0000
Files and hashes: 1: 9kixVYLTS9UXCp3RO4EyW6uuXjo.crl (hash: +WDypya5TiOcTqmHbQB2on5XmhjSt2oLHL1cre/0o+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:95:45:9d:4d:57:4d:2b:22:91:fb:5e:0c:fb:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Validity
Not Before: Jun 14 04:00:28 2025 GMT
Not After : Jun 15 04:00:28 2025 GMT
Subject: CN=b25416729d0d8f048823939e02a6fb293c6416f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:cc:c4:39:76:32:7c:f6:4a:9c:09:da:c9:
b0:c0:11:5c:40:72:1d:7c:bb:fa:94:c5:15:2e:94:
0c:d0:f8:3e:34:24:e7:7a:5c:e5:5a:0d:83:65:4b:
2f:29:30:67:c6:cd:6e:1e:0e:cc:6b:ff:1d:f2:10:
3c:42:d3:fe:79:46:d8:c6:d7:69:7f:51:c6:6a:e5:
85:05:88:b2:7b:0b:0c:aa:48:e3:5a:16:fd:6f:d6:
26:77:00:d0:34:48:12:db:ff:7f:74:7c:38:8a:30:
29:e9:55:10:ee:2d:dc:9e:a4:b0:55:f0:27:c3:b3:
fc:6c:c8:79:b3:34:3f:d4:a1:60:ee:02:88:11:b5:
f5:73:ad:68:7a:0f:c7:1d:85:46:4b:6b:4c:92:88:
a2:a1:60:aa:d1:02:73:70:23:e0:c0:d7:2e:7c:74:
25:64:8e:d8:9a:50:75:3d:36:64:b4:71:01:6c:eb:
e9:b2:dd:fd:a4:5b:09:f0:e8:80:ac:4a:ab:3a:5b:
c3:30:80:9a:2e:59:09:ea:4a:3d:5a:1e:85:c2:4f:
18:e9:9e:c2:05:89:81:dc:73:08:48:ae:dc:33:05:
31:25:52:a1:03:80:e2:27:c9:72:03:46:0a:a9:54:
8b:42:cb:89:7b:8e:4e:d3:35:9a:01:37:96:46:00:
d7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:54:16:72:9D:0D:8F:04:88:23:93:9E:02:A6:FB:29:3C:64:16:F9
X509v3 Authority Key Identifier:
keyid:F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:cc:df:a2:17:13:76:19:90:a9:c0:d5:aa:e3:f9:bd:54:97:
6c:75:e8:74:17:db:42:59:7c:11:1b:2d:20:56:56:e4:20:84:
3f:79:c0:00:9c:c7:58:ef:83:1e:8b:bc:15:d8:18:f7:bf:0e:
9f:60:ca:37:d4:d9:35:2a:b9:75:ca:02:2d:7b:0e:1d:28:67:
af:3f:58:ae:e5:cd:9d:d4:35:fd:85:86:64:2c:cc:a5:14:22:
92:e2:d6:be:f3:02:72:15:96:d5:1f:c4:4e:7f:af:2e:d4:b5:
f0:5f:3b:c1:de:09:7a:f0:47:94:05:df:eb:57:f0:1f:ab:0d:
b7:68:f4:cb:ce:2e:10:5f:6f:29:2b:67:b2:b8:9d:46:6f:f0:
b8:a8:5f:a8:20:3b:fc:8d:ff:77:7d:cc:01:e5:1f:f5:b0:54:
18:de:39:99:01:ad:b8:74:45:89:0d:c8:ce:55:04:44:f5:83:
8c:48:ad:18:3d:f8:8f:86:6c:0a:50:25:2a:54:8c:f0:62:27:
21:a4:b1:1f:d2:9a:a5:b9:b1:c1:a0:1e:71:ed:3f:3c:28:9b:
63:20:78:0a:b3:fc:10:0a:cd:7d:7b:aa:0f:2a:cf:38:cd:b1:
cb:00:56:92:f1:c1:fe:88:60:09:cf:95:e6:a7:5d:b4:90:3d:
8b:4d:b9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:49:57 2025 by rpki-client