Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
File: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft (raw, json)
Hash identifier: XSlsvj3Lnnv4tAGAWIQCa7t8MDyNpjvw9cVA9pmPiEs=
Subject key identifier: D9:AB:E8:F4:1F:88:D0:BC:78:4A:66:91:26:BC:6C:04:A8:BA:89:41
Authority key identifier: 08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
Certificate issuer: /CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Certificate serial: 01976C98713026D3BD252EC93B4310533EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 04:00:19 +0000
Manifest this update: Sat 14 Jun 2025 04:00:19 +0000
Manifest next update: Sun 15 Jun 2025 04:00:19 +0000
Files and hashes: 1: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl (hash: J2+vM1rDnc00x20RhdrxcmXH2RSlaKgaYyPcF8HAlt8=)
2: QBvaKUProLFwUadr8JLWlBh2UrE.roa (hash: xpxsGWmbgKM4U5yVDwdEgOHu1jns29KEhnZ49U4Y2OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:71:30:26:d3:bd:25:2e:c9:3b:43:10:53:3e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Validity
Not Before: Jun 14 04:00:19 2025 GMT
Not After : Jun 15 04:00:19 2025 GMT
Subject: CN=d9abe8f41f88d0bc784a669126bc6c04a8ba8941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:9e:0e:86:3f:22:26:7b:0b:01:44:95:26:
56:d1:04:43:13:65:05:ac:ef:47:df:7b:43:07:39:
d0:01:2b:75:43:38:bb:2b:c1:ab:eb:fd:3c:17:cc:
78:9e:8e:d8:04:0c:67:a1:56:99:62:ba:5a:92:6c:
b0:c5:20:e9:b8:c6:90:94:aa:28:3e:85:1e:f1:a7:
de:4b:8d:41:9e:7c:8c:93:a3:2f:9a:e4:a4:54:4f:
5a:3f:14:24:9c:09:ef:1a:d9:27:ea:d7:01:c9:ea:
cd:5b:a2:d3:ef:90:f3:27:06:e2:37:7d:a0:43:33:
04:5f:d6:c5:fa:5b:d5:b3:78:2b:34:8f:4d:a8:14:
98:9a:8f:28:82:69:42:f0:07:52:4c:f6:66:6f:94:
02:9d:16:7e:eb:1e:43:16:95:36:81:60:72:71:82:
2f:f3:ff:2c:35:1a:67:da:75:08:fa:73:c9:ef:94:
70:af:bf:bf:8f:90:da:35:84:d0:3c:fc:01:3b:f4:
ab:fb:3a:a4:cc:c8:2f:cb:9c:a1:e2:25:c5:24:22:
4a:49:80:c6:37:3d:12:29:fd:a4:89:ca:36:c4:0c:
a5:8f:0e:44:00:76:18:ae:ea:4b:9a:c3:76:f3:bf:
da:9a:49:b8:ca:26:ca:df:88:7c:c2:ae:c2:1c:43:
6c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AB:E8:F4:1F:88:D0:BC:78:4A:66:91:26:BC:6C:04:A8:BA:89:41
X509v3 Authority Key Identifier:
keyid:08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:42:45:55:a8:86:90:d8:ae:08:85:3a:b0:c8:f9:95:ac:80:
29:86:b4:33:f5:bd:8b:bb:cb:1d:fd:af:b3:d6:e0:ee:91:df:
fb:34:90:42:5d:1c:81:99:71:8f:27:16:10:35:92:6e:e0:56:
88:55:17:e1:06:6e:28:cf:7d:92:ee:75:ce:00:84:1e:3d:75:
68:8f:3a:49:a9:4e:29:78:72:a4:de:de:0e:3a:71:3d:87:10:
31:3a:8c:60:b4:15:d9:59:32:33:29:d7:a2:3d:ca:8a:61:c6:
19:d3:76:3b:25:04:f4:a4:94:8b:de:57:4f:ba:c1:0d:fc:80:
b5:f4:29:03:b9:d0:81:2a:60:c8:e2:99:26:15:c7:28:8d:c4:
0f:81:b4:e8:32:c9:e9:9a:0c:7f:55:07:df:e9:98:01:15:28:
b2:20:25:1a:71:f9:6c:e8:bb:83:3b:02:b4:2f:43:30:0d:9f:
ad:47:fd:76:a6:d8:1d:85:7f:32:a0:d9:fa:6c:b6:b2:a5:19:
49:ee:98:8f:8d:9a:48:c6:04:43:6b:31:ff:df:a9:42:29:2a:
1c:6a:ee:23:e1:99:1c:23:ed:02:8c:24:f9:8a:20:d5:ad:dd:
cd:10:8a:95:11:62:ca:3f:28:d9:cf:77:de:b7:9f:0f:26:25:
c9:a4:28:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:03:57 2025 by rpki-client