Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
File: 9PpnFz_1YpCIuXCWGuG-dGldxmE.mft (raw, json)
Hash identifier: bePvOlEZdr0biOwbYFwF6pXXB6Z60poLtdAuPK86hik=
Subject key identifier: 45:C8:0E:1C:F7:E3:D8:73:5C:19:08:52:B9:25:3B:40:41:DA:D3:19
Authority key identifier: F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
Certificate issuer: /CN=f4fa67173ff5629088b970961ae1be74695dc661
Certificate serial: 01987F79626D627015AD18CB115FCD1B8E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
Manifest number: 1619
Signing time: Wed 06 Aug 2025 13:01:58 +0000
Manifest this update: Wed 06 Aug 2025 13:01:58 +0000
Manifest next update: Thu 07 Aug 2025 13:01:58 +0000
Files and hashes: 1: 9PpnFz_1YpCIuXCWGuG-dGldxmE.crl (hash: nBhkCBNdOcGKQ/cmsLI1BPdlTpskk1Zuj69eyjWuAGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:79:62:6d:62:70:15:ad:18:cb:11:5f:cd:1b:8e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4fa67173ff5629088b970961ae1be74695dc661
Validity
Not Before: Aug 6 13:01:58 2025 GMT
Not After : Aug 7 13:01:58 2025 GMT
Subject: CN=45c80e1cf7e3d8735c190852b9253b4041dad319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:a7:52:1f:99:28:50:1b:81:fa:ab:d2:33:
96:b7:36:30:39:c5:67:e5:65:bf:4c:08:5e:85:05:
fe:68:43:03:bc:a0:73:f6:24:6c:c8:12:f3:1c:5d:
94:8d:f3:24:85:fa:c4:09:36:2a:23:0e:11:6c:9f:
4f:8b:55:bc:e0:68:88:ab:bf:ed:a2:dc:60:32:7b:
76:7b:d4:a6:56:b2:a6:66:5b:a4:7d:0e:a6:3c:ce:
ee:bf:f9:38:10:c0:62:0c:08:7a:76:ec:8e:f7:ef:
9b:e6:70:ca:ce:5f:4e:8c:a0:05:7d:31:e5:c7:e8:
35:d5:fb:c0:05:32:61:fb:27:97:40:6a:6f:90:f0:
e3:15:82:6d:6e:b9:52:71:df:e2:42:98:c5:ec:29:
f2:d8:a9:85:8d:27:a5:6d:2e:d0:fe:4b:e7:f0:85:
c4:9b:29:ba:03:88:a5:28:03:1e:ec:70:e5:ae:63:
8e:2d:8a:21:6c:60:8a:05:1b:0a:c8:0c:b7:60:6d:
8f:59:b5:f6:15:ee:9c:68:1d:36:4a:f2:18:98:a6:
87:00:97:d1:6b:e9:f7:98:25:ad:be:0f:19:a5:54:
31:96:3f:1b:3e:b9:4f:22:0c:bf:91:3d:f1:26:bf:
e5:5a:aa:d9:eb:40:b7:ea:fb:2c:5e:41:be:67:10:
4c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C8:0E:1C:F7:E3:D8:73:5C:19:08:52:B9:25:3B:40:41:DA:D3:19
X509v3 Authority Key Identifier:
keyid:F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:df:bc:a1:a9:d3:95:93:87:9e:f1:9f:d8:9b:a2:a1:ea:ec:
6f:9e:85:1a:28:e3:d9:d5:38:85:47:45:47:9e:42:bf:17:ca:
34:da:37:a4:46:75:fa:72:3b:4c:14:bc:63:d0:d3:f5:b8:8f:
e2:ed:7c:b8:3e:6f:9f:f0:19:72:ca:ba:c6:e5:b0:5c:5c:42:
61:98:06:94:86:15:62:2a:f5:b7:49:d8:9e:96:87:d4:36:c8:
2b:f6:6b:ee:c5:7c:64:19:41:59:d8:fc:41:74:9e:63:d1:43:
77:e5:1d:00:34:a5:31:05:cc:d0:96:9a:cf:bb:63:f2:33:c7:
72:b9:16:07:cd:0e:ff:ac:eb:20:35:cb:87:71:7e:7d:f9:db:
3a:01:cb:fc:1b:54:9f:75:fb:9f:7f:eb:55:65:f3:ed:29:a3:
fa:a2:ae:67:53:a2:1d:7c:29:79:85:29:0d:bb:a9:eb:94:97:
71:a3:6d:cd:b6:f9:49:8b:57:4c:05:3d:0e:2e:83:1a:d6:43:
a2:79:a9:ed:e9:45:f4:b6:f0:3b:14:dd:e9:a4:39:eb:77:62:
34:4a:6a:f4:b4:56:4d:06:0c:e0:dd:f7:12:f7:4f:b6:5a:f4:
ea:ec:a0:ec:9b:36:38:eb:dd:f2:9d:58:c0:ee:26:a6:81:2f:
0a:14:bd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:39:49 2025 by rpki-client