Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
File: s48zUI2SUxNJ3z0L6bVF_I4fXms.mft (raw, json)
Hash identifier: WH2RQc4Xr2qUaKD4gjfNCUtZm6+qizPG1dfJOZ/SMqU=
Subject key identifier: 9F:BF:7F:33:5D:DD:8C:1A:A0:4F:89:DA:7D:BB:0E:E8:E8:67:F7:D8
Authority key identifier: B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B
Certificate issuer: /CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
Certificate serial: 01976BF3FD15E48D4D91833F8F4138B24D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
Manifest number: 09DB
Signing time: Sat 14 Jun 2025 01:00:41 +0000
Manifest this update: Sat 14 Jun 2025 01:00:41 +0000
Manifest next update: Sun 15 Jun 2025 01:00:41 +0000
Files and hashes: 1: s48zUI2SUxNJ3z0L6bVF_I4fXms.crl (hash: 608o9XcZWN4nIl3eU3/5NwymfZP1YpnhYV7fN/xnzrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:fd:15:e4:8d:4d:91:83:3f:8f:41:38:b2:4d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
Validity
Not Before: Jun 14 01:00:41 2025 GMT
Not After : Jun 15 01:00:41 2025 GMT
Subject: CN=9fbf7f335ddd8c1aa04f89da7dbb0ee8e867f7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ba:17:19:81:08:6f:0e:8d:6e:c7:48:13:c7:
c0:f4:23:a7:8d:e0:94:d6:dd:41:c3:66:6d:61:5f:
05:ce:29:bf:81:07:ff:ed:a7:b0:58:cb:a8:1c:ea:
27:a0:31:e6:28:f5:c1:ab:f6:35:a8:52:76:56:8d:
e8:7e:2d:b1:d7:c5:ca:40:dc:89:3c:99:e2:fa:9d:
d8:c9:24:cb:15:ce:4b:76:67:79:91:4d:2a:47:2a:
65:65:fc:20:bb:e7:f4:d5:0c:be:50:7f:1a:29:64:
01:ea:ff:ad:f7:bb:40:0e:9d:12:49:29:56:bb:b7:
96:b1:f1:09:61:f6:61:82:3c:3d:bc:77:e3:9f:40:
4c:17:82:8d:23:eb:c5:82:d7:40:db:50:a9:77:79:
99:4a:84:92:8e:99:a1:7c:c9:44:a3:31:aa:91:34:
9d:eb:dc:b1:74:e7:1a:f5:a7:35:d9:f1:3d:61:b7:
44:30:30:b6:8d:03:ef:b8:09:d3:cb:10:dd:8f:08:
f0:8b:7f:ae:bb:01:f8:ab:69:48:a9:8d:29:68:e3:
57:c1:23:63:bd:b4:1f:28:8d:c2:5b:65:62:73:02:
54:68:48:75:81:e2:7b:37:9b:d6:ee:38:3d:d5:8a:
eb:ad:d9:03:3a:c1:fd:5f:0f:28:1d:16:a0:be:c7:
46:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BF:7F:33:5D:DD:8C:1A:A0:4F:89:DA:7D:BB:0E:E8:E8:67:F7:D8
X509v3 Authority Key Identifier:
keyid:B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:86:b8:02:9a:05:a2:dc:30:65:41:fb:d8:ae:5c:16:96:86:
08:68:42:52:08:8e:c5:2c:02:a4:7b:87:dc:b9:62:3f:3d:11:
dc:57:1d:28:69:7c:7c:2d:12:6f:78:bb:72:48:a7:c2:bf:4e:
74:b8:bc:cf:51:ab:6f:9c:ed:12:af:0f:3d:13:61:af:47:e0:
cf:51:6c:9d:e5:78:da:5a:f2:db:1d:eb:f3:ad:47:ea:c9:2a:
44:fd:d1:19:ad:30:b2:55:c8:f1:45:48:60:a4:82:14:af:1e:
6e:44:c1:dc:20:8c:ab:7c:17:c1:23:9b:e9:c1:eb:0d:3f:89:
73:d0:0d:a1:db:81:8d:e7:09:9c:ae:75:92:d4:b8:14:14:c4:
74:c0:ec:6a:33:f0:db:20:5b:81:0a:84:2b:db:8d:9d:b7:fa:
42:c1:77:f2:01:b6:82:30:c2:bf:af:cb:d2:67:0f:3d:78:65:
38:66:63:3e:ad:6d:b2:cf:99:da:13:96:24:aa:6e:5b:a2:23:
59:97:a1:29:a1:41:44:51:b7:72:bd:1e:7d:3e:b9:cf:12:1b:
db:ae:97:26:1c:0c:5b:a9:1d:5d:cb:de:ec:cf:e7:3b:a3:b2:
23:c1:34:de:09:b2:d3:54:5c:0c:1a:26:17:8a:1d:16:4f:b8:
13:5f:ea:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:24:53 2025 by rpki-client