Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json)
Hash identifier: u3Nv1129+8UcyNbL9PIWFba1v51HBhDqd4f+pYnZ/LI=
Subject key identifier: 3A:AA:D1:2D:87:72:A4:20:76:3B:98:ED:D3:F4:64:9A:85:04:02:EF
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 019769611B55E37463A77950BA5D95C15BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
Manifest number: 05F4
Signing time: Fri 13 Jun 2025 13:01:01 +0000
Manifest this update: Fri 13 Jun 2025 13:01:01 +0000
Manifest next update: Sat 14 Jun 2025 13:01:01 +0000
Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: oDQNIhnGE+iShr/HlP4AReBPTI2f/klBd2quKg9VfA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:1b:55:e3:74:63:a7:79:50:ba:5d:95:c1:5b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: Jun 13 13:01:01 2025 GMT
Not After : Jun 14 13:01:01 2025 GMT
Subject: CN=3aaad12d8772a420763b98edd3f4649a850402ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:b5:35:86:90:c8:79:fd:26:32:95:37:49:
2b:31:64:15:af:58:44:8b:3a:1a:45:28:49:50:34:
3e:3e:22:d9:a9:4b:01:9c:14:80:0b:15:1e:07:7c:
0a:56:9a:c0:d2:eb:0d:cc:86:f5:f3:97:d7:6a:74:
d9:ff:f4:92:78:ae:f9:b1:ae:b9:4e:02:58:2b:82:
82:3b:c8:0b:78:b8:68:67:90:70:8c:79:b7:ef:a6:
f2:9c:5d:3a:4b:e0:fe:aa:ed:9c:b3:c2:7c:f8:29:
33:a2:ea:7a:8a:a1:64:17:e8:3c:c9:fe:a9:a4:07:
e8:a5:5a:03:50:9c:2a:1f:ec:17:50:e7:3e:d6:a8:
e6:3f:e5:57:89:e6:46:0d:47:e7:05:83:37:ae:e0:
90:6f:14:af:24:7e:6b:82:e0:6b:39:a0:a0:4a:f4:
1e:27:e2:5e:a5:84:b2:2a:0f:9a:63:4f:77:cb:98:
6f:38:c2:5e:4f:7a:24:ec:de:82:90:fe:90:ca:43:
5c:2e:e0:9b:44:6b:3a:0a:1a:90:15:cb:d9:52:69:
9e:f3:12:6e:be:76:33:f3:a5:7d:5b:07:7d:16:41:
a1:09:aa:85:3f:2d:20:b7:ab:fa:bf:c4:ef:40:1f:
c0:4d:11:4f:1f:83:bf:6f:06:d6:ff:eb:43:27:7d:
94:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AA:D1:2D:87:72:A4:20:76:3B:98:ED:D3:F4:64:9A:85:04:02:EF
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c9:e7:05:59:6a:93:b8:a4:ff:de:f6:93:f9:c5:81:eb:8f:
e5:e1:d0:10:0d:fa:a9:be:52:c9:ed:7f:a8:35:63:7e:ab:98:
22:a1:03:a9:40:f9:64:dd:ac:ac:cd:92:e8:fd:f8:70:b3:88:
53:33:9a:0a:c8:b9:4d:65:7e:2f:5e:89:d3:dd:6d:4d:d5:34:
a1:b0:01:d9:9a:79:0b:f0:3a:ad:5e:5f:b4:8c:5c:03:80:7d:
5a:7c:b7:a8:ee:f1:26:fd:95:93:16:b1:2f:2d:65:92:19:e9:
65:5b:70:70:36:9e:90:56:af:4a:d5:75:b9:01:f2:21:b1:c9:
a9:62:f9:85:95:93:b5:8c:92:e3:5c:6b:b7:95:ce:ac:22:bd:
b5:15:67:34:05:e6:c4:14:c6:4d:57:d9:83:e9:9c:b4:cd:62:
c4:dc:c8:64:07:62:59:ce:ae:b8:20:1c:08:75:e1:62:ea:f3:
f3:6f:98:e1:b2:ae:35:0f:56:00:6c:42:9f:3e:93:03:a1:11:
0c:05:b5:96:6b:65:9e:7a:4a:c7:fc:bc:37:4a:31:dc:dc:37:
33:ab:87:c5:f8:1c:0a:47:35:49:d2:a6:96:38:46:9d:cd:de:
e6:c4:41:65:df:e9:64:10:5d:bf:94:bc:b5:55:a3:83:8e:10:
05:63:b1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:26:33 2025 by rpki-client