Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
File: 9TK715EK8VrXBk20ptO9ZKfoJ8E.mft (raw, json)
Hash identifier: +o1Hq+/ztOzoBCN0CqSrJhntCTruKN4t/xF0UFfh4nk=
Subject key identifier: D7:DC:47:4C:3F:AF:66:B1:99:2B:CA:50:F6:A5:15:C0:F4:57:7F:60
Authority key identifier: F5:32:BB:D7:91:0A:F1:5A:D7:06:4D:B4:A6:D3:BD:64:A7:E8:27:C1
Certificate issuer: /CN=f532bbd7910af15ad7064db4a6d3bd64a7e827c1
Certificate serial: 01977941885D8645AA02AD6416432E577360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
Manifest number: 041D
Signing time: Mon 16 Jun 2025 15:00:27 +0000
Manifest this update: Mon 16 Jun 2025 15:00:27 +0000
Manifest next update: Tue 17 Jun 2025 15:00:27 +0000
Files and hashes: 1: 9TK715EK8VrXBk20ptO9ZKfoJ8E.crl (hash: yHWnk58AZ0xn/BPrjiBU49Ifgf3SyhI+E0KkxaWRt7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:41:88:5d:86:45:aa:02:ad:64:16:43:2e:57:73:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f532bbd7910af15ad7064db4a6d3bd64a7e827c1
Validity
Not Before: Jun 16 15:00:27 2025 GMT
Not After : Jun 17 15:00:27 2025 GMT
Subject: CN=d7dc474c3faf66b1992bca50f6a515c0f4577f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9f:9b:74:44:3e:18:6d:a2:1c:36:95:56:cb:
9c:40:b9:a0:26:22:fc:9e:63:c2:13:18:8f:58:da:
13:8e:27:47:20:40:37:6b:de:31:9d:6f:65:90:f4:
51:68:9d:10:1e:9b:a2:c2:63:9e:82:27:a8:ff:78:
aa:8b:af:07:6a:da:85:4b:a4:a1:ad:d8:66:de:0d:
75:7c:6e:66:41:f4:e1:e5:45:f2:c6:f3:b4:62:fa:
64:57:28:d3:af:3e:ea:bf:a0:66:cc:40:e5:0e:4b:
3d:b7:51:9c:e5:e0:8a:25:d8:61:64:46:2c:8b:a7:
41:a0:f4:85:c2:c9:d5:99:fc:75:ad:97:bb:6a:a4:
af:13:21:f6:63:0a:89:4f:cd:53:30:42:38:20:21:
3f:6c:3f:35:ca:07:29:40:9c:b0:e3:cd:91:30:76:
a5:7a:b1:38:54:36:6b:c7:9c:b7:9a:96:18:89:8f:
7d:0d:82:9d:21:e7:07:65:13:79:79:55:d3:58:46:
e4:79:e6:6e:2a:e1:e3:c8:24:0c:94:61:2b:60:9b:
63:84:4b:4b:52:1f:76:a4:cb:43:28:6b:c8:29:8d:
17:e0:0e:fd:de:da:dc:97:f2:e5:44:b7:ac:01:d0:
fb:96:aa:da:75:46:18:b8:ae:44:68:6b:43:cf:c9:
ce:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DC:47:4C:3F:AF:66:B1:99:2B:CA:50:F6:A5:15:C0:F4:57:7F:60
X509v3 Authority Key Identifier:
keyid:F5:32:BB:D7:91:0A:F1:5A:D7:06:4D:B4:A6:D3:BD:64:A7:E8:27:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2c:f8:fa:a4:06:c1:f8:b7:b1:3b:cf:65:0d:17:ad:23:0a:
3c:8b:0f:1a:4d:ad:f9:f7:8f:b0:5f:64:5b:7c:96:c4:b8:7f:
76:4c:8a:de:f1:88:4e:83:f3:98:33:e0:a4:cc:d8:a6:fb:21:
17:ee:33:3f:f0:12:cc:ef:79:1f:da:7e:c6:73:f7:02:26:56:
66:85:74:58:2f:de:65:8d:c3:3f:80:c2:79:dc:d1:ad:b3:d9:
46:20:61:e4:b2:ab:b3:50:fb:34:83:b3:dc:e4:4c:24:bb:5c:
71:21:98:0e:0d:9a:f7:37:76:25:7a:a8:8a:81:a1:8c:45:5b:
72:f7:c2:e4:93:14:ce:b9:6e:37:34:cf:ff:a2:76:7b:5e:76:
f9:16:c7:ce:e3:52:38:cc:33:ee:c0:08:6c:44:43:7d:56:48:
d3:a1:1f:42:71:60:60:93:71:13:05:4d:68:f8:e7:63:b5:7f:
76:c6:a9:0c:19:74:cb:15:bc:77:ab:cf:b2:e2:21:69:3e:22:
25:d7:65:87:fb:4c:34:87:c2:fc:dc:d5:a8:11:c5:8a:45:23:
26:9c:f8:8c:46:a9:44:a3:59:21:7e:b4:28:c7:27:bc:5f:42:
12:d7:a5:c8:7a:6e:f6:5d:c4:0d:48:0b:4d:12:8e:a8:b7:b7:
7d:aa:c6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:28:22 2025 by rpki-client