Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
File: 9IFCCQRj_g9JoTDRUYZql3F9RCo.mft (raw, json)
Hash identifier: KHIo6SeqH9EkMWqbO5FHILexvGulstxX6VOyfqknbEk=
Subject key identifier: 3E:55:9B:48:7E:62:19:49:F6:B7:E3:6D:45:75:E7:5F:9C:B8:D7:00
Authority key identifier: F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A
Certificate issuer: /CN=f48142090463fe0f49a130d151866a97717d442a
Certificate serial: 01977ED5C1A9141EE6DE7939C1E54CC6B058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
Manifest number: 02E7
Signing time: Tue 17 Jun 2025 17:00:27 +0000
Manifest this update: Tue 17 Jun 2025 17:00:27 +0000
Manifest next update: Wed 18 Jun 2025 17:00:27 +0000
Files and hashes: 1: 9IFCCQRj_g9JoTDRUYZql3F9RCo.crl (hash: Hxsotg1TRSCWedUKImX0M3dFbmpwLDJnDKekPxKPU6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:d5:c1:a9:14:1e:e6:de:79:39:c1:e5:4c:c6:b0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48142090463fe0f49a130d151866a97717d442a
Validity
Not Before: Jun 17 17:00:27 2025 GMT
Not After : Jun 18 17:00:27 2025 GMT
Subject: CN=3e559b487e621949f6b7e36d4575e75f9cb8d700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:59:5b:47:8c:1e:e5:a6:8a:2e:8c:78:e3:
3b:6c:04:a2:71:ac:4c:b0:aa:bc:cf:7d:ab:64:4a:
a6:7f:7a:04:07:c1:3f:17:58:49:ec:92:91:06:a5:
e4:cc:10:ed:fc:be:a3:aa:ff:b3:a6:83:6d:b8:81:
bf:00:7e:2b:cc:39:32:59:e4:70:2d:67:68:5d:fe:
95:5e:a6:e0:dd:47:c1:b0:c6:7a:3d:d2:b5:1d:13:
de:57:48:7c:02:52:48:6e:5a:0e:c1:f9:43:23:73:
ca:31:2f:4d:ea:4b:5e:42:10:80:c3:f5:bd:77:78:
33:97:7a:6b:b2:b2:37:57:8d:0f:06:8c:08:1a:64:
b5:31:9d:a7:eb:7b:cf:45:6c:90:45:c6:53:6b:bf:
c1:18:10:fd:8e:09:67:4e:ee:46:d3:16:3d:6e:c9:
77:5c:a4:d4:f7:e4:1b:f4:40:af:53:9d:fe:68:6d:
12:d0:17:fd:dd:45:64:7f:2c:4b:a0:f3:6a:73:5b:
e5:99:48:e8:3d:83:7a:6a:95:03:d1:81:b8:15:48:
2c:7d:55:f1:05:e8:b9:cc:a2:f2:34:1c:2a:d2:49:
c3:f3:db:74:a3:81:28:42:75:cc:c1:3c:ea:46:40:
bf:7a:bf:39:17:5f:ec:b4:c2:bf:83:3c:28:c4:fb:
6b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:55:9B:48:7E:62:19:49:F6:B7:E3:6D:45:75:E7:5F:9C:B8:D7:00
X509v3 Authority Key Identifier:
keyid:F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3e:d7:bd:ca:56:10:b3:d1:f3:03:3d:e6:db:00:dd:3e:54:
9a:c5:c3:5e:b7:42:e3:1c:b0:a9:29:82:a7:93:77:98:27:ba:
02:4b:3c:a1:f1:bc:40:9b:fa:99:45:3f:9a:dc:32:38:72:dc:
6b:58:50:ae:28:7d:73:f6:4d:d7:5c:d6:2d:73:4d:f1:e3:d6:
f0:5c:5e:2c:be:72:48:fa:6f:46:ac:e8:36:84:85:a7:e0:42:
20:cd:c0:37:9d:06:e3:7c:3a:29:fe:5a:29:c8:99:55:cd:b7:
e0:f2:a3:a0:a8:8c:58:8c:6a:98:44:3e:78:83:a4:47:f0:99:
a3:e1:41:67:1e:b4:26:76:a2:1f:bc:f0:01:c2:d4:ef:e9:26:
4d:43:0f:1f:82:11:e8:10:f2:cf:17:a6:bf:55:26:3c:84:c2:
d4:01:90:82:f0:88:64:8d:9c:bc:33:f3:ba:b5:b2:83:95:3b:
cc:ab:3e:ae:f0:75:c9:1b:aa:da:7e:c9:be:70:3b:b0:cc:da:
45:15:a9:8a:a5:8f:0a:88:67:bb:5b:5a:de:27:00:3f:b9:e2:
09:73:ed:ba:d3:41:c2:71:e1:4e:30:81:b2:a9:d0:14:6f:ff:
99:34:a6:ba:09:43:f5:52:7a:a3:49:f4:f2:73:c2:e5:a3:73:
95:a5:7c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 19:42:24 2025 by rpki-client