Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft
File: n34J7YuBilTMw-tCb2elWhOKuH0.mft (raw, json)
Hash identifier: pZHeXb/Nla+R+jSnOhntlX/nkjdwsp06KH7eHdBDhmo=
Subject key identifier: 8D:B4:E3:F2:CA:64:E0:A7:52:1F:55:A5:44:BF:85:5A:BB:E7:CD:9E
Authority key identifier: 9F:7E:09:ED:8B:81:8A:54:CC:C3:EB:42:6F:67:A5:5A:13:8A:B8:7D
Certificate issuer: /CN=9f7e09ed8b818a54ccc3eb426f67a55a138ab87d
Certificate serial: 0197711A3081789E318C9F6796DE8B84F04E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n34J7YuBilTMw-tCb2elWhOKuH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft
Manifest number: 099D
Signing time: Sun 15 Jun 2025 01:00:31 +0000
Manifest this update: Sun 15 Jun 2025 01:00:31 +0000
Manifest next update: Mon 16 Jun 2025 01:00:31 +0000
Files and hashes: 1: n34J7YuBilTMw-tCb2elWhOKuH0.crl (hash: CchGLMG9LM1iCfyxSl/cHz1GXN720uAKY6xo4DIA3yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/n34J7YuBilTMw-tCb2elWhOKuH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:30:81:78:9e:31:8c:9f:67:96:de:8b:84:f0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7e09ed8b818a54ccc3eb426f67a55a138ab87d
Validity
Not Before: Jun 15 01:00:31 2025 GMT
Not After : Jun 16 01:00:31 2025 GMT
Subject: CN=8db4e3f2ca64e0a7521f55a544bf855abbe7cd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:55:f7:77:f1:f6:51:ff:13:57:74:dd:bf:46:
f3:da:cb:80:a5:ef:6a:fc:e9:ff:8e:3b:b9:12:86:
b1:19:80:b2:1e:72:2b:a1:bb:f6:48:48:dd:22:f3:
57:d9:7c:aa:78:b7:36:f8:91:5e:72:94:a0:d4:a3:
07:44:a9:98:27:6d:bb:a9:29:7d:25:eb:6a:5e:50:
46:a2:45:28:1e:ae:6b:c9:4b:df:8a:e9:dd:5e:86:
96:83:dc:e7:7d:61:9d:da:e6:59:a4:21:0b:4a:1a:
33:c4:d3:bf:15:d9:8b:e6:a2:48:43:04:e2:1c:a9:
1c:c8:0b:d8:65:91:14:25:19:bc:db:63:a3:51:bd:
8e:c1:a7:3a:94:d6:09:45:2c:6f:74:db:c7:b0:be:
50:80:75:08:98:9a:79:65:61:03:ba:3c:3a:05:6e:
ea:e4:72:bc:2f:9d:b4:ee:e5:aa:67:d7:9e:15:a6:
5e:e1:29:f8:2f:f0:07:6f:8a:8d:65:28:df:f1:1b:
2c:bf:7d:d0:5d:79:a8:a6:65:14:c6:ea:05:97:8e:
44:c7:3a:43:05:2a:6a:d9:d8:64:8e:b2:d1:4a:51:
72:1d:31:97:3d:4a:7b:1b:d2:c0:fd:28:00:1f:2b:
fa:17:d5:e0:03:57:a3:d0:51:f7:5b:19:10:6d:19:
b3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B4:E3:F2:CA:64:E0:A7:52:1F:55:A5:44:BF:85:5A:BB:E7:CD:9E
X509v3 Authority Key Identifier:
keyid:9F:7E:09:ED:8B:81:8A:54:CC:C3:EB:42:6F:67:A5:5A:13:8A:B8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n34J7YuBilTMw-tCb2elWhOKuH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:13:87:c4:ff:b9:e3:a3:65:95:4f:8f:20:38:f0:ea:3a:1c:
b7:74:1d:69:53:2d:a4:70:38:9f:c9:f5:e3:ae:dc:58:6f:ff:
79:b6:9c:e9:d4:89:a5:14:d8:e1:60:a6:7d:ba:c4:d9:07:fd:
a2:95:2c:f0:c4:8f:5e:d1:c8:59:ab:e4:35:e2:58:6e:8a:fd:
b0:9e:0f:16:be:cb:e2:f8:a7:63:45:94:6c:9c:0d:34:9e:9e:
5c:82:ff:26:c7:59:26:56:de:8b:e5:92:9d:bb:c9:6d:43:dd:
9d:8f:6c:96:ac:ee:86:8f:77:62:8a:90:03:1d:c8:6d:ee:b8:
7f:7b:cb:88:ef:39:1a:2d:86:7f:f4:3d:ba:ad:69:3d:a6:f2:
1f:7a:06:0a:5c:ef:ee:bc:19:fe:2f:35:a9:49:aa:8d:8e:3c:
d3:e1:7f:28:ed:e8:09:c2:ba:49:77:9f:27:bd:4d:06:d9:09:
47:6f:de:a9:b2:19:85:27:eb:57:64:5c:24:60:23:22:1e:e8:
7e:2b:bd:44:d6:2c:05:cc:8f:10:78:dc:a7:1a:32:a4:ba:e5:
7d:78:03:cc:a0:47:0a:52:3d:8c:0b:d3:02:30:0e:bf:82:3e:
55:da:57:ee:18:8f:06:a0:ea:09:2f:8b:90:00:85:a8:71:16:
de:19:ae:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:04:10 2025 by rpki-client