Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
File: CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft (raw, json)
Hash identifier: vlznN/SSgtPjykNLjayln54f9ALqB84mJaLMwOzpvQo=
Subject key identifier: F9:58:06:D5:0B:6D:C4:0B:AB:BF:30:57:48:8E:1C:FA:82:DA:3A:2D
Authority key identifier: 09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D
Certificate issuer: /CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
Certificate serial: 0197B7B343D50E9AEC786AD6F3FDC0B3FD80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
Manifest number: 0354
Signing time: Sat 28 Jun 2025 18:01:08 +0000
Manifest this update: Sat 28 Jun 2025 18:01:08 +0000
Manifest next update: Sun 29 Jun 2025 18:01:08 +0000
Files and hashes: 1: CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl (hash: BJkU489FvMrtH0Y0ALMLXFMZJ7i0qJa+A/4WicjRbX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:43:d5:0e:9a:ec:78:6a:d6:f3:fd:c0:b3:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
Validity
Not Before: Jun 28 18:01:08 2025 GMT
Not After : Jun 29 18:01:08 2025 GMT
Subject: CN=f95806d50b6dc40babbf3057488e1cfa82da3a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:f9:f4:36:73:70:c9:35:51:6e:ab:21:cb:
31:2a:d8:48:60:9f:ef:61:07:6e:c2:2c:cb:e9:f9:
8b:89:17:b0:ba:8e:aa:de:02:f4:b9:96:9e:06:34:
ca:41:6a:18:46:fc:01:2d:dc:03:e3:8e:f0:cc:ed:
1b:14:47:40:30:68:f5:e2:5f:c0:d1:9d:7b:22:67:
90:10:71:62:07:47:53:66:b0:88:d0:58:db:a0:32:
a0:1c:54:0c:a8:09:8b:fd:e5:d6:68:44:62:1e:f1:
90:17:24:2a:6c:c4:a3:d6:9a:88:6a:73:c7:90:d9:
2f:fa:72:ff:0d:cf:50:96:13:82:f3:ed:b6:35:9b:
0e:d1:70:e2:d1:48:80:cc:bb:77:b0:1e:5e:39:da:
61:a0:d6:db:04:5d:9b:ba:bc:93:ec:38:27:90:cd:
70:45:69:1b:43:23:69:5a:37:b9:02:ee:63:67:c7:
b6:f9:8e:00:b3:11:66:f5:78:5d:1b:d4:22:ed:88:
e1:b1:80:0d:49:b5:ef:f4:40:72:20:47:46:87:80:
28:4e:b9:bf:3f:d2:fc:15:13:02:cd:62:db:63:f2:
be:0f:b9:47:86:69:7d:dd:14:f2:3e:ae:1e:63:84:
e4:c0:2d:9c:9b:d2:3b:4a:f9:9d:ff:4c:c5:37:ca:
47:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:58:06:D5:0B:6D:C4:0B:AB:BF:30:57:48:8E:1C:FA:82:DA:3A:2D
X509v3 Authority Key Identifier:
keyid:09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9b:0b:0a:2f:c3:fe:fc:28:b9:e2:4d:9f:c7:1a:b0:75:ae:
de:2e:7f:d7:4f:83:23:d7:4a:73:2c:fe:d5:0d:37:01:15:4b:
a9:bb:ae:a1:e7:bd:cb:38:81:a0:3c:bd:08:44:23:4f:aa:f4:
ce:43:09:c1:36:13:94:13:97:cf:89:f6:09:c7:85:11:9a:08:
61:be:f9:49:e8:d8:ab:2b:55:b6:16:33:41:10:93:a0:24:18:
a1:ac:ce:77:75:07:c9:9a:9c:a1:f7:1a:0d:21:de:c4:2e:2f:
2a:3e:10:6d:3d:f0:f1:4c:3b:cf:80:ef:93:4e:ba:14:9e:40:
97:e7:f9:93:77:6f:c2:97:1f:14:87:56:c4:d5:7f:67:40:55:
27:1a:1f:45:0d:f8:c1:65:f1:11:1a:7e:5c:9b:fa:37:a8:c7:
e3:9a:92:5c:90:04:0b:3d:9f:06:2f:0d:d2:f3:ae:aa:53:6b:
63:48:57:2f:d3:76:ae:7d:4d:f8:bf:3e:4e:5a:7a:bb:df:56:
40:26:76:0c:28:90:50:3e:97:95:8e:70:d8:5c:e3:80:3a:10:
f2:61:e1:85:5d:7a:7c:a8:13:ab:53:5f:f3:49:ab:d6:3b:8c:
28:c1:3d:da:a9:4b:f3:00:e2:dc:b2:35:69:30:f9:8e:a9:ce:
18:70:f4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:21 2025 by rpki-client