Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
File: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft (raw, json)
Hash identifier: Rup0oeXulBESbygJ+bsbDhxRQG9S9ESIjB+poyv998U=
Subject key identifier: 69:7C:7A:5A:03:DF:CF:9B:DD:4D:E7:7E:A3:EF:19:10:1E:08:BD:06
Authority key identifier: 9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
Certificate issuer: /CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Certificate serial: 019768BBFDB2F138FB7307C29D529A6C9D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
Manifest number: 0433
Signing time: Fri 13 Jun 2025 10:00:39 +0000
Manifest this update: Fri 13 Jun 2025 10:00:39 +0000
Manifest next update: Sat 14 Jun 2025 10:00:39 +0000
Files and hashes: 1: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl (hash: Lpu1bE625to274UGVlIVGReKU7L+YG+cAvCsHRdSvr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:fd:b2:f1:38:fb:73:07:c2:9d:52:9a:6c:9d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Validity
Not Before: Jun 13 10:00:39 2025 GMT
Not After : Jun 14 10:00:39 2025 GMT
Subject: CN=697c7a5a03dfcf9bdd4de77ea3ef19101e08bd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:6f:b1:de:51:5d:4b:66:d4:94:08:c5:ea:
8a:75:d6:96:dd:4e:9c:47:07:e4:3c:b3:a2:7b:92:
81:d8:85:78:c6:75:23:97:6c:37:44:aa:4b:d5:49:
34:03:9d:b1:22:12:ab:47:db:39:28:9b:2d:70:8f:
e3:86:42:ab:10:bf:1a:4b:9f:6f:29:8d:fc:1b:a1:
bf:44:d0:7f:f2:3d:34:5c:c1:13:5b:09:e6:a3:7b:
50:ac:1a:30:2f:93:ad:ef:24:64:d6:aa:a1:8a:ec:
04:38:57:0c:52:78:95:d4:1d:6d:64:ad:dc:56:f4:
2e:5a:88:62:43:d0:b1:26:a8:f4:cc:28:c9:1d:25:
a2:ab:b5:38:51:dc:3c:70:b5:40:8f:3e:46:cc:e8:
f2:4f:e8:bb:00:83:50:61:fb:1e:d0:02:30:ef:14:
a7:e0:e2:88:a0:c1:50:aa:09:cc:26:b9:05:02:ae:
6e:51:d5:ce:69:eb:0c:61:7e:2f:95:e1:5f:08:e2:
9d:e5:8b:8d:1d:e5:66:31:5f:6a:b6:a0:ed:01:1b:
32:c3:92:5b:cd:e7:c3:38:6e:6e:4f:ce:66:83:29:
98:25:95:10:63:01:17:5b:c6:bf:b8:58:ad:f1:3b:
cb:17:93:0a:99:b2:d9:73:05:83:9d:e9:07:d4:af:
6f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7C:7A:5A:03:DF:CF:9B:DD:4D:E7:7E:A3:EF:19:10:1E:08:BD:06
X509v3 Authority Key Identifier:
keyid:9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:83:bd:4a:19:e4:38:72:c0:2a:d9:93:5d:1c:2e:66:ba:ef:
47:19:86:4e:83:91:70:39:50:73:b2:91:f3:47:c7:77:fa:81:
d3:70:45:71:bb:b7:3e:fa:12:41:26:45:6c:ba:82:3d:c2:ce:
a9:d6:63:ff:27:a6:ce:75:13:12:47:bb:4e:08:79:4a:68:79:
0c:30:36:fe:34:83:5f:71:a6:0b:3f:9b:89:3a:e1:07:56:21:
89:a7:19:bf:48:94:98:d0:1d:68:54:8f:b1:fa:58:72:23:42:
53:fd:4f:b8:f7:85:bd:2d:3b:a4:20:c2:a1:8b:31:53:4a:9d:
af:37:c4:fe:93:80:40:41:95:10:f9:5f:24:a4:25:16:8b:03:
1e:82:fc:fa:a3:7c:14:14:3f:a8:eb:f1:3f:61:f4:63:22:00:
48:ce:ea:94:e5:64:1d:84:b7:c0:e1:51:e8:cf:ec:25:b5:9d:
e6:17:79:da:88:aa:b2:bd:54:42:21:8b:fa:84:1d:de:be:42:
5e:7f:a9:3a:2e:a9:e6:06:22:3a:2e:63:c8:db:c9:d7:e7:b7:
ad:64:9c:cb:5f:9e:08:e0:47:36:4a:63:d7:c2:79:01:b1:e9:
c4:a8:7e:65:53:7d:c0:84:a6:31:4d:f3:c9:cf:9d:28:1f:cd:
11:35:3e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:43:08 2025 by rpki-client