Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
File: Eht9Dci8pP9OdTa9OANAJCLo4mw.mft (raw, json)
Hash identifier: 5BufqbqsobbZoSd+xBluC0wwL65Fc0/YRLUGqTJ3ccc=
Subject key identifier: 3B:26:1D:53:97:A4:51:23:D4:B3:4D:C7:4E:56:6C:D5:C4:5D:AE:7D
Authority key identifier: 12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
Certificate issuer: /CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Certificate serial: 019771BFAF1DE079513CC44F417C30014302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
Manifest number: 0910
Signing time: Sun 15 Jun 2025 04:01:16 +0000
Manifest this update: Sun 15 Jun 2025 04:01:16 +0000
Manifest next update: Mon 16 Jun 2025 04:01:16 +0000
Files and hashes: 1: Eht9Dci8pP9OdTa9OANAJCLo4mw.crl (hash: DnwGthZosJtN7y7Ckl98ya5ni09YXmcHd+ghlmBffW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:af:1d:e0:79:51:3c:c4:4f:41:7c:30:01:43:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Validity
Not Before: Jun 15 04:01:16 2025 GMT
Not After : Jun 16 04:01:16 2025 GMT
Subject: CN=3b261d5397a45123d4b34dc74e566cd5c45dae7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:db:b5:00:6e:c3:3a:d1:a1:ce:3c:f4:0d:
0b:63:32:3c:bc:54:d9:6c:7e:70:0c:91:bd:26:cd:
09:8f:20:e2:9e:fe:d6:51:4d:b3:28:7b:ff:1d:cf:
f5:40:e9:62:39:b6:c9:49:65:1d:61:d2:88:eb:3d:
40:21:1c:d7:6f:61:55:33:f4:f9:0f:bc:94:4c:e1:
d8:f3:c5:b3:bf:d3:6b:e7:5c:e3:a8:10:df:d5:9d:
82:4f:15:85:91:47:f9:32:8e:cf:a8:ed:79:3f:e6:
23:5c:27:d1:40:6b:f7:67:bd:c0:af:ea:b5:24:47:
6a:40:e6:6e:75:53:af:e3:7d:85:1e:2e:10:a2:53:
66:77:43:05:32:6c:ee:39:94:fd:1c:a5:89:18:a4:
2a:c7:cf:69:31:41:84:e0:e6:09:52:2e:ae:e8:31:
81:84:e1:db:63:5d:c8:6d:19:c8:38:de:87:90:31:
a8:61:0f:6f:26:8c:d7:d4:5e:dc:f4:aa:89:09:ea:
46:7c:21:de:fa:68:dc:f7:1c:d8:08:3e:4d:85:27:
5f:b6:24:e5:2f:37:f8:7e:9d:21:ad:ea:b8:58:46:
08:20:a1:7f:37:da:43:0b:7a:0f:37:97:2c:5b:16:
5e:09:ba:30:28:63:0b:80:c5:38:7e:b7:e9:cb:1f:
a3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:26:1D:53:97:A4:51:23:D4:B3:4D:C7:4E:56:6C:D5:C4:5D:AE:7D
X509v3 Authority Key Identifier:
keyid:12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:69:aa:8e:8e:52:93:d8:64:4d:16:72:f0:97:21:65:52:0f:
f2:b5:b8:be:24:f3:d7:d6:7f:eb:d6:92:ab:f6:05:53:9b:23:
7e:e3:05:83:1a:0d:91:61:9d:3e:00:4a:d2:83:06:c2:68:36:
bb:29:34:37:94:59:9a:cf:b9:e5:f8:f3:59:e5:d1:2e:9b:4f:
1c:e6:92:14:bd:e7:9b:b7:fa:a8:bc:e4:36:99:0d:c0:ae:e4:
4a:b9:84:b7:eb:1e:31:20:96:48:19:83:f2:be:88:3c:a4:52:
b2:b4:f8:ac:ee:8a:1c:84:da:f2:33:a1:b7:16:7d:30:13:99:
a4:5c:fa:33:e8:b2:47:36:93:59:cb:b8:b1:0b:b1:59:33:3e:
72:03:2d:e3:62:f4:08:e7:b0:99:99:f6:35:89:f7:32:4b:40:
e7:d3:2c:03:2b:79:23:f9:94:e8:bd:32:2b:59:ca:ae:51:30:
c2:74:9c:21:40:31:46:27:18:ea:40:fb:28:94:32:e3:96:35:
32:2c:23:8c:27:3d:54:68:5e:49:67:c4:7e:7b:9a:3e:73:7e:
ea:f2:3e:cd:d5:d4:77:c6:ce:e0:c3:89:98:03:00:52:59:94:
97:ae:c6:f9:56:18:96:4d:af:2d:31:18:0c:ea:ac:b9:88:fb:
4e:5c:26:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:58:15 2025 by rpki-client