Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
File: 9PpnFz_1YpCIuXCWGuG-dGldxmE.mft (raw, json)
Hash identifier: DyLEQvqy3zfcp8Ttltc/zflIHAdbUjJxCy3Myz35geA=
Subject key identifier: 89:6D:D3:F4:7A:44:F9:68:94:D9:6C:DC:76:F6:6F:44:9F:0E:00:34
Authority key identifier: F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
Certificate issuer: /CN=f4fa67173ff5629088b970961ae1be74695dc661
Certificate serial: 01976D3D8F816B67941537BBB85E9FFB0731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 07:00:40 +0000
Manifest this update: Sat 14 Jun 2025 07:00:40 +0000
Manifest next update: Sun 15 Jun 2025 07:00:40 +0000
Files and hashes: 1: 9PpnFz_1YpCIuXCWGuG-dGldxmE.crl (hash: Tuk/Vo9ypJbUjdKkiXmGlOGAQdv9dpCNGGN8AqOxgQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:8f:81:6b:67:94:15:37:bb:b8:5e:9f:fb:07:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4fa67173ff5629088b970961ae1be74695dc661
Validity
Not Before: Jun 14 07:00:40 2025 GMT
Not After : Jun 15 07:00:40 2025 GMT
Subject: CN=896dd3f47a44f96894d96cdc76f66f449f0e0034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:e3:d4:09:8f:2c:5d:39:ee:eb:41:fb:55:
4b:03:ba:76:7a:6c:55:e4:cb:98:96:c6:5b:7e:d0:
1f:31:89:3c:ff:f8:12:ef:33:11:ee:01:a3:d6:4c:
7e:66:a2:86:37:83:d3:7c:a5:25:14:5d:5c:70:0a:
b9:96:ae:c4:16:0b:ce:2c:19:99:28:63:02:e0:53:
8f:95:fe:23:eb:23:5b:bb:f6:88:f9:fa:43:b6:7b:
2b:34:c2:4e:6f:7e:d5:c3:54:b0:b7:dd:d9:6c:d5:
68:34:f1:57:01:7e:87:73:85:6c:7f:9b:56:0f:49:
78:85:e9:69:3f:ab:aa:55:a1:15:75:e8:ac:68:42:
87:ce:cf:83:52:44:a0:ec:a9:26:5a:76:58:20:cd:
0f:8e:ce:57:77:07:04:8a:7b:26:f6:3e:29:77:22:
65:7d:aa:26:86:07:da:d3:9b:02:55:80:cd:f0:20:
89:29:48:28:ce:c6:22:57:31:8f:29:1b:b3:36:64:
b1:e5:a4:9b:8a:de:3e:0f:06:91:e7:c0:18:63:37:
19:bd:43:9b:02:a8:71:d2:b5:5c:e5:c2:af:a4:d9:
53:f6:95:77:cb:70:d6:a4:c4:08:5d:29:41:fb:38:
c6:5f:71:91:33:f4:55:2f:13:71:e2:ef:6f:c9:7d:
1b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6D:D3:F4:7A:44:F9:68:94:D9:6C:DC:76:F6:6F:44:9F:0E:00:34
X509v3 Authority Key Identifier:
keyid:F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:cf:70:1a:f6:f3:d2:23:bc:9d:11:ed:48:7d:01:98:42:d6:
39:a3:33:f5:01:fb:74:35:c3:da:fa:3c:c3:bf:9f:11:68:43:
92:4d:f0:7b:78:f2:f0:87:7e:03:e2:5c:70:62:c4:dd:4e:f0:
11:ef:16:2a:ed:97:ec:9a:a1:68:8c:f3:6a:c9:7c:b4:fb:bb:
f4:15:b1:f2:de:b3:4d:8d:a6:3b:49:82:04:4e:20:39:d5:93:
3d:a9:47:25:57:42:c6:62:9e:cb:01:a5:0d:39:75:1d:8e:bd:
52:6f:67:1e:18:63:ab:f6:7e:10:09:5f:76:e3:2d:48:16:f1:
a2:ed:24:f9:de:33:b4:5b:83:16:a0:71:bb:c7:a8:1e:95:d2:
19:94:3d:40:bf:bc:57:65:47:50:77:fb:a1:d0:15:3f:42:52:
bd:c2:e1:e7:5c:df:b0:88:79:94:13:87:2f:45:40:0d:1e:19:
59:9d:2e:b8:7a:27:b3:fd:e4:68:b1:f6:f1:5f:f3:e0:4e:6a:
4b:61:48:b7:14:9e:47:59:ce:06:c6:82:1f:3c:69:88:33:7f:
88:80:9b:6d:11:ea:8f:88:eb:56:7f:81:59:3f:72:8f:03:e3:
9a:21:9b:b7:8e:c9:34:18:88:fe:41:7c:29:99:91:0d:2e:b0:
8c:8e:0f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:48 2025 by rpki-client