Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
File: 9IOBPbTT97DwLDH4W1JDww9F4lI.mft (raw, json)
Hash identifier: hHtO8/O5BC0dEKCSvr5K2SgFtl0syv8/LEiSJqtBLHI=
Subject key identifier: C1:68:7D:FA:B6:D7:11:56:C4:24:AC:F0:27:18:03:25:85:86:6E:C2
Authority key identifier: F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
Certificate issuer: /CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Certificate serial: 01976D3D41C4D8DFCEF9F2DD7A66BA3106C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 07:00:20 +0000
Manifest this update: Sat 14 Jun 2025 07:00:20 +0000
Manifest next update: Sun 15 Jun 2025 07:00:20 +0000
Files and hashes: 1: 9IOBPbTT97DwLDH4W1JDww9F4lI.crl (hash: TYS0iiR+bTTOjk7zuxcD3l/d95qi959fFGxx5TLKANI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:41:c4:d8:df:ce:f9:f2:dd:7a:66:ba:31:06:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Validity
Not Before: Jun 14 07:00:20 2025 GMT
Not After : Jun 15 07:00:20 2025 GMT
Subject: CN=c1687dfab6d71156c424acf02718032585866ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8f:4a:95:23:45:5b:e2:6d:5d:cf:31:de:4b:
22:54:6c:56:8b:72:2c:ea:d3:aa:b9:b7:b5:ec:7f:
ce:a0:d8:a0:89:ff:9c:20:ff:f4:c1:fc:3c:52:54:
b7:44:9f:71:de:69:8a:e5:d8:92:7b:00:4c:b1:9a:
1c:c2:47:80:6d:76:06:48:05:97:14:92:eb:e8:58:
47:10:41:d7:0b:03:66:69:81:77:a0:b7:cc:52:ec:
17:08:2d:b0:73:8b:1f:59:d0:05:f6:c8:cb:d4:ef:
5f:4c:cc:7c:f0:01:f7:88:0e:ab:27:2a:17:f5:82:
46:7b:05:9b:9a:ae:0c:7b:c4:1a:a5:ea:35:f8:46:
83:81:0c:99:46:b5:ca:cf:72:c6:1a:32:48:54:7a:
4e:f2:33:cb:1a:0e:b9:16:e0:fa:98:dd:4f:f3:20:
8a:f2:11:ce:5e:59:a2:87:5a:1e:42:7d:76:55:65:
62:6c:8c:c3:16:08:64:06:d5:ef:b6:7a:d4:f4:d4:
2a:08:c3:d9:21:d9:08:30:3d:48:f1:62:ae:e3:73:
56:0b:b3:86:fd:dd:16:da:c5:fb:31:61:72:b7:c5:
e9:5e:bf:8f:b5:21:2b:ed:40:e8:00:22:69:f4:ef:
4c:55:88:06:d3:61:62:e6:04:c0:dc:6b:32:0c:66:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:68:7D:FA:B6:D7:11:56:C4:24:AC:F0:27:18:03:25:85:86:6E:C2
X509v3 Authority Key Identifier:
keyid:F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:86:b3:51:52:28:85:a8:ed:e6:0f:5b:6b:75:ca:b6:fd:2d:
25:6d:fa:36:35:be:39:d3:93:02:62:3f:73:b6:46:e4:38:a4:
3f:19:01:11:38:77:ba:67:05:34:0b:9a:d3:8f:61:39:c2:ba:
56:a2:22:39:0d:7e:7e:19:72:55:1d:a1:8b:c9:15:1b:0f:c1:
c1:15:c9:39:11:b3:7d:19:e9:dd:eb:7a:2a:16:2a:89:f7:bd:
b0:3f:78:de:28:15:e9:b1:c2:d2:6c:b7:e1:f1:fc:2f:cb:c8:
66:93:41:5e:d2:57:fe:96:b2:5e:65:b9:f7:52:0b:8c:95:01:
7b:90:22:13:ed:0e:37:88:9d:c3:f7:99:1e:81:88:0f:75:39:
94:61:21:a8:73:88:ec:30:a6:0b:b7:4e:f2:b7:52:6e:73:ac:
5b:01:29:ed:02:d5:32:b1:21:fc:e3:fa:96:65:79:a8:37:f2:
5a:8c:38:29:a4:a6:c6:1f:67:49:a7:5e:e6:f9:c2:ee:73:a4:
a5:06:95:ac:9a:6f:ed:ab:5e:8c:6a:6b:2f:59:64:51:e9:3d:
5e:f8:fc:97:50:27:59:cc:dd:d9:70:15:e6:a0:67:ec:96:7e:
b9:f4:6a:af:35:80:77:9b:56:c9:b9:da:ef:16:33:cf:bc:dd:
ce:1b:ae:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:01:24 2025 by rpki-client