Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
File: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft (raw, json)
Hash identifier: c4rXPjsvxLGqruFTJCGFMEg5PtPVDBZwsyTB+00gRuI=
Subject key identifier: 09:FA:8B:41:6F:B8:BE:8D:DF:7F:62:CD:AC:43:46:C7:40:35:4A:81
Authority key identifier: FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
Certificate issuer: /CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Certificate serial: 019777535C1F1C2C14556A01B361C7210E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
Manifest number: 1403
Signing time: Mon 16 Jun 2025 06:00:40 +0000
Manifest this update: Mon 16 Jun 2025 06:00:40 +0000
Manifest next update: Tue 17 Jun 2025 06:00:40 +0000
Files and hashes: 1: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl (hash: YVF03afC8Atz0987jX9Xjeiz4rn0AqcuCLKw/tx6F4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:53:5c:1f:1c:2c:14:55:6a:01:b3:61:c7:21:0e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Validity
Not Before: Jun 16 06:00:40 2025 GMT
Not After : Jun 17 06:00:40 2025 GMT
Subject: CN=09fa8b416fb8be8ddf7f62cdac4346c740354a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ea:57:90:d2:57:d0:91:06:79:8d:8b:e2:01:
e5:5e:d5:d2:cd:7f:7a:6a:c5:e5:72:e6:56:d0:8b:
62:cc:23:25:fa:91:54:36:fa:60:31:2b:08:9c:05:
26:46:7c:c3:a5:2f:7e:cf:cd:59:99:5f:cd:e2:4e:
99:92:51:df:5e:c4:55:b8:c1:eb:6b:d5:1d:ed:f6:
96:0b:7b:b5:60:fd:4d:ca:66:08:a2:c9:aa:f3:2b:
07:2c:70:f8:3b:98:c8:1b:a6:d0:d6:9f:a4:84:96:
0b:ff:57:61:63:e7:10:1f:42:5a:22:ed:8c:1f:24:
90:49:ba:20:8b:6d:57:49:c7:b3:2a:e8:65:52:86:
fa:e3:4a:4f:05:36:94:33:a0:f0:61:d3:ae:a6:0d:
ae:c9:6d:56:ce:aa:8f:17:79:b0:10:ef:7a:09:9c:
15:22:de:e2:29:c1:cc:86:72:a5:c5:85:76:38:6c:
fd:4d:75:9c:92:05:62:26:9b:12:be:4c:57:9d:47:
59:05:c8:07:7c:6d:73:fc:fb:ab:d0:70:ce:42:8a:
9d:ed:ed:80:d6:43:93:9b:89:cc:94:e4:99:e0:8d:
b4:38:1d:e1:48:d9:97:86:89:5d:c7:fc:b1:c1:8d:
b0:c5:82:be:ea:46:6d:aa:9e:9a:1f:bd:b5:ae:74:
81:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FA:8B:41:6F:B8:BE:8D:DF:7F:62:CD:AC:43:46:C7:40:35:4A:81
X509v3 Authority Key Identifier:
keyid:FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:14:b9:b4:a4:de:35:7e:a9:06:13:ea:a2:5a:e5:50:0f:ba:
9c:c7:31:d2:ae:34:68:5f:5d:91:36:42:35:cd:34:95:56:7a:
44:46:59:50:97:7c:5d:95:50:fa:27:8d:0f:fd:ff:22:20:18:
31:20:6e:4a:a4:80:7f:14:65:11:83:51:65:bb:2a:96:48:f2:
43:97:bd:2d:e0:3e:4a:51:1e:5e:f2:33:4a:f7:d5:0d:a5:e8:
90:11:6e:df:54:84:a5:c1:0b:a7:64:f0:84:5d:17:00:9e:4a:
94:9b:39:f6:6f:00:c0:8d:65:07:95:2b:94:af:e0:bb:b2:97:
6c:87:ac:cf:11:19:8b:d1:25:cf:84:1b:d1:aa:60:d5:21:bf:
26:7e:06:94:c0:33:80:ed:44:6a:4d:f4:8d:6f:db:1a:44:08:
37:1f:4d:12:89:ac:8b:32:16:0f:db:bf:cd:6f:5c:31:c0:8b:
d0:76:e2:bc:8f:25:d2:16:33:69:91:bb:13:56:d8:52:b4:ab:
39:23:9f:74:5a:a7:b9:71:79:0e:ec:59:86:fe:1b:8f:c7:25:
42:4d:c8:5d:69:c8:24:22:c8:6d:6f:14:62:ee:93:21:1b:c3:
35:4f:19:18:6f:65:fd:5c:28:a2:4f:3a:77:db:bf:c0:71:f7:
3c:26:dc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:22:58 2025 by rpki-client