Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
File: 9bJzfl2X4RCOsEmQTemxbzauseA.mft (raw, json)
Hash identifier: kCMbijh/Rs9jT/t8z+lqM+t0eXp73ifiaquj+R//alk=
Subject key identifier: 1A:D7:9F:56:BA:16:8F:7C:85:57:44:86:DC:EC:D4:17:BD:94:53:D4
Authority key identifier: F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0
Certificate issuer: /CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0
Certificate serial: 01977E9EC1832A52B932815480441C1C20CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
Manifest number: 1596
Signing time: Tue 17 Jun 2025 16:00:22 +0000
Manifest this update: Tue 17 Jun 2025 16:00:22 +0000
Manifest next update: Wed 18 Jun 2025 16:00:22 +0000
Files and hashes: 1: 9bJzfl2X4RCOsEmQTemxbzauseA.crl (hash: M2S+pq0ytv72MxpLU27w0qZXxRZOfqs/UyHsYLN6DLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:9e:c1:83:2a:52:b9:32:81:54:80:44:1c:1c:20:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0
Validity
Not Before: Jun 17 16:00:22 2025 GMT
Not After : Jun 18 16:00:22 2025 GMT
Subject: CN=1ad79f56ba168f7c85574486dcecd417bd9453d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:fc:2f:97:d8:fd:6a:48:9d:7f:5d:c8:2a:
c4:51:75:cd:e0:58:3d:23:27:35:1d:32:4a:df:bb:
4d:59:9b:cc:c3:d3:d2:d9:d1:9f:18:6c:fe:f8:54:
bf:7e:df:6f:69:41:24:3f:a9:10:47:5e:f3:3a:ba:
eb:96:d1:f3:5f:e4:4c:b3:05:90:9b:bb:1e:5d:9e:
c3:06:81:79:3d:9d:af:01:2e:6c:10:0a:37:24:88:
14:94:1f:44:f5:39:5c:0d:db:98:a8:ca:56:ec:55:
88:77:2f:5d:71:64:d7:02:50:61:98:68:4b:46:58:
ea:09:17:5b:bc:94:5c:f3:78:09:83:3d:66:5a:c4:
f9:bb:a6:7f:02:45:1d:d6:74:94:46:89:52:68:c0:
2a:eb:be:60:49:97:a2:81:a7:3b:a3:e6:cd:bb:e8:
87:be:2a:c9:57:f9:b8:67:58:30:cc:b1:35:8d:e6:
b3:2b:63:65:00:a5:d1:fd:a4:e8:ba:fd:6e:89:e3:
ee:1b:86:a8:d1:c0:e5:39:d6:24:6f:a0:57:7a:75:
38:51:14:be:83:9c:0a:f6:be:e9:1b:22:99:e7:9e:
7d:ab:4b:00:b8:87:40:a6:31:e3:55:14:23:f1:d3:
7e:b2:a4:d0:47:a4:11:f6:c8:21:c5:46:a1:2c:15:
ab:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D7:9F:56:BA:16:8F:7C:85:57:44:86:DC:EC:D4:17:BD:94:53:D4
X509v3 Authority Key Identifier:
keyid:F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a7:6b:37:59:84:b5:a7:a7:0b:4b:21:38:1b:f2:c1:c7:dd:
55:b1:d2:77:00:f7:e9:b0:96:7a:6d:a3:2d:af:94:3c:99:be:
28:74:16:32:60:30:f6:97:31:1a:64:06:95:de:02:04:b7:5a:
58:1e:50:8e:42:2e:f4:c3:18:ba:17:6c:9a:3c:d6:45:bd:e1:
15:06:b8:8b:52:c6:65:65:0e:a0:30:17:7e:da:a2:f0:a4:2f:
7d:f7:d1:90:d5:c8:90:b8:00:f7:72:f1:9b:6d:62:b0:0a:5c:
01:ff:12:de:ed:eb:a7:a5:66:8b:e5:46:0c:4c:ca:98:96:fa:
04:3d:85:de:f3:c9:46:e1:7a:6b:e6:c8:88:09:8f:b6:8d:05:
5c:b6:fc:05:a9:9b:45:fd:5d:71:2f:1f:0e:b5:42:cc:f3:de:
e6:d5:88:6e:b1:36:a8:fe:0e:63:e0:60:84:1b:04:66:a4:80:
6b:d9:6e:bb:81:32:3d:24:89:51:c7:31:63:cc:6f:1e:62:df:
72:b4:53:59:9c:f4:c8:31:f2:76:da:20:e5:38:48:6d:10:95:
e8:6b:12:fe:d6:1d:6f:6b:4e:b5:43:33:9d:cb:5a:ea:28:cf:
9b:2b:4d:8e:7c:dd:dc:6f:ec:5e:2f:89:9b:1e:48:87:b3:1c:
13:65:cc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:50:48 2025 by rpki-client