Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
File: 9oXcPBRGS4xAgXUl2aJUtO06ijo.mft (raw, json)
Hash identifier: 0dDX1k455kA9ywEvJyx28G5xOJHX+r50syGOyUY5DKM=
Subject key identifier: CE:2C:0C:B3:57:5E:E2:5F:AB:61:C3:FE:DE:CA:5A:A1:40:7D:85:B4
Authority key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
Certificate issuer: /CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Certificate serial: 0198748719B5DB9EE61D3D88E06CBD1BCF58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
Manifest number: 71
Signing time: Mon 04 Aug 2025 10:01:07 +0000
Manifest this update: Mon 04 Aug 2025 10:01:07 +0000
Manifest next update: Tue 05 Aug 2025 10:01:07 +0000
Files and hashes: 1: 9oXcPBRGS4xAgXUl2aJUtO06ijo.crl (hash: BJ5HdSfrKnPOvnjcTPc/ZqOQ+VokfEKayD0EMUyn87w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:19:b5:db:9e:e6:1d:3d:88:e0:6c:bd:1b:cf:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Validity
Not Before: Aug 4 10:01:07 2025 GMT
Not After : Aug 5 10:01:07 2025 GMT
Subject: CN=ce2c0cb3575ee25fab61c3fedeca5aa1407d85b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:0d:f2:af:21:63:ed:3c:fc:57:15:24:16:
ab:5a:0f:c8:4a:e8:cc:6e:8a:ad:3e:86:cf:76:cc:
e9:15:ca:b3:42:5f:bd:69:24:3b:f1:ee:46:d6:4f:
1d:2a:20:f0:a6:d8:01:8b:da:f9:f7:79:ea:bf:24:
60:00:cb:ac:b7:3d:50:02:b1:eb:fb:97:47:ff:49:
26:4c:8b:1d:5e:f6:19:54:a7:ff:f5:a7:ec:0f:42:
fb:72:15:1d:1d:06:52:b6:c5:4e:2d:71:93:ff:94:
6e:76:f3:34:a6:fd:cd:6f:10:10:89:75:d5:c8:09:
ce:de:5a:e7:45:12:1a:bf:ca:59:e7:38:83:58:6d:
68:45:26:34:a2:43:7d:86:43:06:ea:1d:ec:78:56:
03:b3:cb:02:49:62:89:31:e7:e4:89:b1:28:8b:54:
27:c1:da:11:42:2e:03:d3:92:e7:06:f8:47:4d:91:
04:8c:b4:7a:3b:18:1c:fe:f7:7c:50:16:b0:d5:39:
db:32:29:a1:e8:9e:48:cd:e6:24:bc:9b:4a:73:8e:
5e:92:64:7a:93:fd:06:72:00:13:91:87:9d:31:a7:
85:41:8d:14:54:7d:fa:80:92:5f:f8:f8:58:b5:67:
df:5a:b7:e1:ef:1b:38:15:98:b6:0c:d8:d8:2e:dc:
64:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2C:0C:B3:57:5E:E2:5F:AB:61:C3:FE:DE:CA:5A:A1:40:7D:85:B4
X509v3 Authority Key Identifier:
keyid:F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ee:52:5c:47:8d:bc:8c:ae:71:a6:b2:93:91:c1:87:37:61:
04:b0:69:65:95:c8:cb:b3:e0:96:41:52:84:34:6e:b4:24:bc:
70:8f:ff:19:38:b3:fa:73:01:1d:09:e3:31:c0:5e:61:4b:f1:
3f:5c:a5:08:d1:48:38:a5:a2:7d:cb:d7:fd:c5:5e:df:c0:23:
21:bc:36:fe:5b:fd:fd:41:1b:d3:57:1b:41:a0:0a:8e:cc:57:
e7:6c:bc:b9:c5:36:50:2a:7f:01:e3:19:f7:68:11:be:93:ac:
3c:ba:2b:96:f6:f9:27:cd:e7:c3:27:b6:d0:b0:2e:65:1e:b8:
a6:06:89:c3:7d:d0:d6:22:f9:40:3f:33:bc:ef:79:85:ea:0b:
58:83:f9:7e:f5:0e:77:08:3b:98:99:8a:a5:11:3a:ec:9a:1c:
b7:36:d4:be:c0:61:44:50:78:d3:bd:b7:ff:cc:bb:c8:cd:32:
df:ce:21:77:e1:c9:71:29:ce:83:09:48:73:79:40:59:c0:18:
43:e4:ab:09:58:d7:00:21:7d:e0:36:9e:39:0a:f9:fb:81:15:
6b:d2:ad:cc:e1:51:51:bc:17:77:4e:5b:6d:bc:2b:42:27:00:
ed:0b:a6:43:6b:9b:1a:28:a3:bc:0d:0d:14:0b:81:ed:71:26:
0c:7e:bf:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:48 2025 by rpki-client