Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
File: u9Qr14Mqar4W4VIqLX5OQNProKI.mft (raw, json)
Hash identifier: a80+gCiH6ebzDQ1lSy7Gz0Ry32S4ZVyo34ZKF6zZJBk=
Subject key identifier: 34:3A:B6:2E:3B:33:2C:14:8C:CC:F3:05:F0:1B:27:0A:84:C0:E5:F4
Authority key identifier: BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2
Certificate issuer: /CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2
Certificate serial: 01976A05D14888FCD914F1A79CB184E0012C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 16:00:55 +0000
Manifest this update: Fri 13 Jun 2025 16:00:55 +0000
Manifest next update: Sat 14 Jun 2025 16:00:55 +0000
Files and hashes: 1: u9Qr14Mqar4W4VIqLX5OQNProKI.crl (hash: y5y549I3LHzTAsqgBceWmGCnsfwT6lTEhdhFUT2Os3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:d1:48:88:fc:d9:14:f1:a7:9c:b1:84:e0:01:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2
Validity
Not Before: Jun 13 16:00:55 2025 GMT
Not After : Jun 14 16:00:55 2025 GMT
Subject: CN=343ab62e3b332c148cccf305f01b270a84c0e5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a4:de:dc:18:c6:8e:eb:2d:2c:c7:5d:9a:91:
ed:1a:cd:3b:e0:4f:37:e6:f6:48:43:ef:eb:d2:69:
06:45:45:ac:6b:97:9c:99:bf:8a:de:45:c7:32:0e:
87:cf:fb:cc:39:43:98:c9:1d:75:2a:30:cc:30:1c:
6b:c7:7b:f0:bf:14:eb:2c:12:98:12:57:7a:0e:cc:
cd:ba:23:dd:68:6c:03:47:8f:01:e8:c7:6c:d8:8d:
3f:bc:85:97:fe:53:30:78:a8:6e:75:b5:0f:2d:54:
ff:3b:d7:46:84:f0:a3:6b:e8:38:a5:ab:6e:55:6d:
58:41:84:43:54:50:99:4f:93:08:75:34:c9:8a:e1:
fd:5e:fd:14:4a:d8:7e:c2:36:7e:8e:07:3b:05:bb:
ef:5d:e5:00:07:12:90:3d:4f:8c:79:ad:5b:0d:46:
f3:f9:cf:62:de:cc:28:7d:90:e9:41:e5:48:cc:7f:
b2:4a:9a:24:51:dd:59:4e:35:e6:6a:e1:7c:6c:cf:
9f:22:44:32:03:43:96:c3:2b:78:3f:e8:f1:43:7d:
af:38:8b:23:be:62:b3:be:c9:a4:1d:41:a1:4b:1c:
6b:b7:52:d9:e2:62:62:46:67:52:a5:9c:b5:60:b5:
bd:5b:4c:c9:22:3c:59:30:f9:6d:be:32:52:d6:ed:
95:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3A:B6:2E:3B:33:2C:14:8C:CC:F3:05:F0:1B:27:0A:84:C0:E5:F4
X509v3 Authority Key Identifier:
keyid:BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:13:4a:bb:36:49:35:f8:40:eb:da:e6:00:8f:92:8f:7c:b4:
3d:01:4d:bf:9d:bc:77:ad:b6:eb:48:c0:a7:6e:0c:7f:94:c2:
65:13:f5:38:82:1e:ad:73:56:f7:5e:17:f2:2a:7d:88:79:eb:
af:77:49:29:f0:f1:37:45:99:14:21:56:c6:f3:23:5f:43:25:
73:3f:cb:38:97:f2:a8:c7:ed:cf:d2:82:39:af:75:6b:63:4f:
8a:d7:c4:af:f0:aa:c9:82:5a:99:56:91:0d:03:56:62:d2:3e:
e1:6a:c5:b1:a0:7a:61:ce:9a:ed:42:a7:c9:9a:24:5b:c3:22:
c7:6e:00:e7:96:3b:94:d2:1a:d3:1d:68:da:98:e1:1a:5b:67:
3c:54:a5:21:bd:2f:d8:77:43:29:df:bb:5d:1d:7b:84:19:2c:
ab:06:b3:80:21:45:3b:bb:62:2f:6b:7b:be:00:29:72:95:2b:
1f:47:3a:0a:0d:b0:c8:5f:b2:ba:61:c8:26:29:c8:0b:03:d2:
0e:ea:1a:33:9c:60:2a:d9:b6:08:ad:e9:29:26:38:0e:fb:7a:
16:92:c0:9c:f7:64:2d:d3:57:bf:4d:9f:25:99:b2:46:83:58:
00:c9:fd:05:9a:c9:4f:52:ff:83:52:63:51:d1:75:a0:ce:5f:
9b:88:c4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:03 2025 by rpki-client