Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
File: CdR3O7Q9trKeh94C42U_p9jyb2U.mft (raw, json)
Hash identifier: F+KCRWCvyCemjjtwmS6b2YKij+1+SBCLXeJ7oCW2wsE=
Subject key identifier: 97:FE:74:AF:37:2C:FD:00:7B:8B:85:8C:D8:99:09:4F:B6:B5:AF:72
Authority key identifier: 09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
Certificate issuer: /CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Certificate serial: 01976BF45BBF4DC7EDF42E7B758EF77C7F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
Manifest number: 012E
Signing time: Sat 14 Jun 2025 01:01:05 +0000
Manifest this update: Sat 14 Jun 2025 01:01:05 +0000
Manifest next update: Sun 15 Jun 2025 01:01:05 +0000
Files and hashes: 1: CdR3O7Q9trKeh94C42U_p9jyb2U.crl (hash: dqsBzVMgB6BHNZ14sGlYrCmJP7lqfU5leyK8H6vry1A=)
2: H2ZOh9fIAnQ96NovacR2PdzVa0g.roa (hash: +nBuIb1Jhz2syXSr6RgoJwf6cbGP9SV27ZeU9ljDCeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:5b:bf:4d:c7:ed:f4:2e:7b:75:8e:f7:7c:7f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Validity
Not Before: Jun 14 01:01:05 2025 GMT
Not After : Jun 15 01:01:05 2025 GMT
Subject: CN=97fe74af372cfd007b8b858cd899094fb6b5af72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:de:67:a2:dc:ae:19:f6:f6:24:af:28:ad:8a:
fb:17:b7:6d:21:0d:2d:dd:a2:42:6f:ba:34:28:59:
3c:b1:a2:fd:24:98:0b:21:61:1e:ac:e4:2c:62:4d:
7b:be:6f:aa:64:f0:54:0a:0d:02:36:b0:22:85:d4:
0a:f2:38:be:b9:a9:dc:46:4c:41:f4:a7:10:ab:59:
b8:68:ce:5b:26:5c:de:f8:3c:7f:ed:18:8a:09:01:
ea:4a:e7:23:41:ac:d7:b0:64:85:d7:1d:bf:2e:db:
22:b2:e5:56:38:44:2f:2b:1b:d2:be:16:29:d4:95:
78:eb:f5:6e:c1:df:49:a9:7c:21:32:86:b6:56:85:
96:38:e5:f4:16:24:ce:74:ab:8c:8c:c3:8e:52:f9:
2c:89:94:56:2b:d8:b5:9e:11:8b:fd:50:f1:2c:83:
49:b6:d2:bb:e5:ad:bc:93:0b:13:8a:f9:55:17:05:
2c:7d:6d:39:0c:2b:b5:7e:6f:b0:86:59:7c:8b:0c:
33:71:db:d8:7f:d2:fe:2d:33:0c:8b:df:22:0d:d8:
3e:be:d0:9f:2c:a4:a5:e7:6d:c3:d5:b8:77:9d:c1:
19:41:d5:45:bc:8d:d0:77:65:c6:82:81:60:78:18:
4f:ee:1b:46:e2:bc:1e:23:c1:dc:cc:46:d1:d0:40:
b1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FE:74:AF:37:2C:FD:00:7B:8B:85:8C:D8:99:09:4F:B6:B5:AF:72
X509v3 Authority Key Identifier:
keyid:09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e1:43:75:96:57:94:9a:40:f1:32:31:2c:a3:60:be:e5:04:
70:9e:be:fd:c1:2e:2c:ca:45:54:30:e8:12:ab:0d:5b:e4:99:
51:87:e5:69:27:6e:c0:ae:33:ee:3a:53:f0:a5:9c:ee:21:ce:
41:8e:46:4e:49:ed:42:07:9b:4a:75:0f:45:f0:c9:5b:fd:a8:
46:63:48:23:37:10:59:28:60:00:d4:da:09:12:c0:44:1b:c6:
5e:5f:27:77:2e:3f:c7:90:e2:8b:86:e0:6e:fe:84:a1:a5:03:
da:0e:57:89:ba:21:15:72:56:ed:fb:21:f5:67:f5:ce:eb:39:
f0:c6:70:ec:e0:77:04:86:3d:78:2c:51:56:81:59:a3:ab:4d:
f9:7b:ed:77:4e:40:4a:82:b9:94:10:89:7b:b3:38:e5:ba:a2:
44:a8:d1:bf:71:8b:57:26:a7:9b:03:80:f1:fe:50:2c:a4:29:
2d:a5:98:bf:b3:7b:3e:8e:fc:00:51:46:99:55:8e:b1:85:2b:
34:f1:86:d9:6b:55:24:67:42:03:12:b0:24:2c:db:f1:08:39:
f3:13:b3:34:e6:a7:cc:f2:a2:b6:3b:99:e9:3b:f9:20:cd:4c:
38:aa:a4:af:09:33:95:e8:78:ff:64:4f:70:37:50:c0:ca:03:
58:57:07:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:18:42 2025 by rpki-client