Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
File: 9rG5O-fUO4bWT4tLljvJFWJfI_I.mft (raw, json)
Hash identifier: cnJTvPLKQwc5DgRsnJHIKVErVaNezxGEBuxGl/dJmc0=
Subject key identifier: 24:24:B9:8C:1C:64:AC:42:52:73:A2:94:F7:A7:8A:19:D4:F0:75:40
Authority key identifier: F6:B1:B9:3B:E7:D4:3B:86:D6:4F:8B:4B:96:3B:C9:15:62:5F:23:F2
Certificate issuer: /CN=f6b1b93be7d43b86d64f8b4b963bc915625f23f2
Certificate serial: 019769299D86B52BCF357DEE8B6E6C33172A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
Manifest number: 021E
Signing time: Fri 13 Jun 2025 12:00:24 +0000
Manifest this update: Fri 13 Jun 2025 12:00:24 +0000
Manifest next update: Sat 14 Jun 2025 12:00:24 +0000
Files and hashes: 1: 9rG5O-fUO4bWT4tLljvJFWJfI_I.crl (hash: 6iN5deQpeBYJ0sZprcL5RRFDvEPXqYOnImF7EOSdRJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:9d:86:b5:2b:cf:35:7d:ee:8b:6e:6c:33:17:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b1b93be7d43b86d64f8b4b963bc915625f23f2
Validity
Not Before: Jun 13 12:00:24 2025 GMT
Not After : Jun 14 12:00:24 2025 GMT
Subject: CN=2424b98c1c64ac425273a294f7a78a19d4f07540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:5c:10:a1:35:d3:56:0e:32:50:19:f0:0d:
d7:3a:16:48:fe:33:a5:1f:41:c8:1e:8c:b7:8c:af:
31:2e:77:64:c9:0d:c3:7b:b6:9c:a1:8f:b5:c8:d1:
37:56:82:01:4c:90:df:f4:b3:d4:d3:a6:01:40:ea:
5b:f5:da:48:3a:57:1f:ca:e9:bb:90:f8:51:4f:76:
5d:da:f3:e7:4a:d2:6e:a2:75:c3:e4:ea:5e:fe:1f:
c2:30:3c:06:3f:82:d9:46:9d:a2:e7:59:b2:1f:4a:
89:c8:6e:cd:62:5e:2d:c7:80:e7:c9:f8:c2:e6:d8:
af:05:f7:8d:57:a0:7f:6e:5d:5c:21:85:e2:5b:1a:
17:cd:60:1f:64:33:ce:72:89:4a:16:c8:fb:1c:39:
19:0e:0a:e7:53:ee:59:8e:39:c6:12:40:4c:5f:87:
5e:be:04:55:b0:b6:51:a2:ef:ba:cd:d9:a1:33:ae:
58:c4:0d:70:2b:1c:59:18:4e:f2:63:0c:c4:b5:79:
37:c1:10:6b:77:1a:ce:b9:21:27:8f:c8:34:df:4e:
20:e6:9b:8f:1d:9e:5b:ed:15:ac:fe:47:5f:30:ab:
c6:e0:cb:6b:0d:99:ca:77:9b:6d:b3:39:bc:da:17:
af:36:3a:32:5b:25:49:bb:27:30:b7:10:51:95:45:
f1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:24:B9:8C:1C:64:AC:42:52:73:A2:94:F7:A7:8A:19:D4:F0:75:40
X509v3 Authority Key Identifier:
keyid:F6:B1:B9:3B:E7:D4:3B:86:D6:4F:8B:4B:96:3B:C9:15:62:5F:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e7:ea:92:d9:7b:69:29:e5:93:ec:13:57:c1:a1:c1:dc:19:
99:2a:89:76:33:ca:ec:ac:3d:8f:88:d3:27:ba:ed:64:6c:d2:
f7:c1:10:64:12:1e:e5:1b:f2:9a:7f:3f:04:02:b4:d6:32:66:
51:f5:43:aa:cd:fa:85:df:8a:32:4b:3b:63:e8:51:ce:22:04:
20:5b:ae:79:34:bd:18:60:e0:f6:90:34:1a:79:9f:7f:7a:37:
6f:ba:80:06:a2:6b:33:b6:de:2f:9c:f1:d2:3c:88:08:5e:06:
9d:1c:47:2e:3a:16:d3:7b:cd:b3:8e:37:eb:c6:62:11:ab:7f:
49:90:0d:78:de:0a:92:1b:e8:d6:cc:0e:be:52:6d:4d:ce:51:
d0:e6:62:4e:58:bf:96:49:34:9c:e6:47:04:78:dc:4e:c2:93:
68:0d:92:be:73:a5:25:33:e8:72:f1:5b:aa:8b:dd:8b:a1:2b:
f6:39:13:44:ee:c5:91:c3:c0:db:81:de:2f:b0:6e:c7:d3:ee:
1e:52:78:ae:f2:7b:3e:3e:8c:dc:42:b9:ae:6d:75:6e:68:ea:
ea:86:d1:86:a9:1d:12:0d:12:ff:15:78:0b:37:42:09:b3:76:
40:68:24:87:46:d4:89:42:02:1a:6a:02:b4:3e:35:c6:55:c9:
6e:37:04:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:14 2025 by rpki-client