Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
File: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft (raw, json)
Hash identifier: 2+S7nFPKA6x3c+jXVYHKjo01hNSmkjwWscq58LijJsE=
Subject key identifier: 4D:71:A0:2B:C8:61:F0:F7:10:C3:1B:29:A7:CD:66:8B:2A:D3:E4:76
Authority key identifier: 73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
Certificate issuer: /CN=73d85f8438d73b5668e89cc692646f9487965fa9
Certificate serial: 0196C8DFB3A0A7443EA32DDC6C3F9DF3C4B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
Manifest number: FD
Signing time: Tue 13 May 2025 09:00:25 +0000
Manifest this update: Tue 13 May 2025 09:00:25 +0000
Manifest next update: Wed 14 May 2025 09:00:25 +0000
Files and hashes: 1: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl (hash: RNao8HIiLcrVqezisiUKI3rzPCqC52X63GMZjjU3V+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:df:b3:a0:a7:44:3e:a3:2d:dc:6c:3f:9d:f3:c4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d85f8438d73b5668e89cc692646f9487965fa9
Validity
Not Before: May 13 09:00:25 2025 GMT
Not After : May 14 09:00:25 2025 GMT
Subject: CN=4d71a02bc861f0f710c31b29a7cd668b2ad3e476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:6a:ae:53:db:3f:42:be:c2:fa:26:d4:b9:
94:cc:f7:02:4a:56:50:f8:6e:9f:e8:47:29:5a:2a:
59:e8:bd:b5:6f:cc:30:67:86:80:9d:ca:7d:31:df:
67:92:3b:51:e3:bc:ec:12:ac:a4:e6:fd:de:1b:4e:
4f:97:4f:34:fa:62:9b:c8:ef:ee:4f:df:13:5d:26:
2d:86:b4:5c:bd:57:6d:26:bb:ed:09:ce:66:61:7f:
78:2c:9d:95:07:82:17:6e:69:da:a8:07:19:d4:d9:
24:75:f3:8d:ae:c8:6b:be:8d:84:40:f5:ba:0c:28:
a0:9b:73:a1:9d:c7:eb:ca:c1:df:c9:3d:e4:58:55:
0a:d9:fb:e6:78:ef:11:18:31:60:c4:cb:e5:aa:a9:
29:1f:50:fc:4f:ba:75:89:58:3a:67:87:80:f3:00:
ed:5d:4d:e3:ec:42:19:32:95:6a:98:61:4c:ba:36:
ea:a3:d1:49:80:37:5d:ca:d5:c9:d2:27:cf:3a:d2:
ba:4b:6b:fd:6c:8d:f7:e3:fb:96:60:4f:30:e3:85:
06:3e:93:b3:7c:2c:72:db:01:27:38:5d:ef:7d:58:
eb:fa:09:fc:3c:93:d7:ad:21:41:7f:81:65:c2:12:
9c:b7:81:b5:54:68:60:67:45:ad:e4:8d:3f:68:e7:
2a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:71:A0:2B:C8:61:F0:F7:10:C3:1B:29:A7:CD:66:8B:2A:D3:E4:76
X509v3 Authority Key Identifier:
keyid:73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:90:b1:39:c0:6e:ae:87:0d:89:35:da:b4:4a:03:44:f7:36:
2b:37:41:f5:de:87:84:88:1a:81:5f:4a:88:81:45:af:66:5a:
29:18:c2:89:25:de:6d:9d:24:4d:99:20:57:9c:1e:13:c0:f4:
c1:ce:ea:8d:08:fe:45:3a:37:52:a7:74:f7:99:79:bf:f4:90:
fb:a0:0b:dd:f8:d0:22:95:bd:25:c2:71:40:0d:bf:86:20:b3:
b1:b4:9c:8b:da:37:3a:1e:6e:bd:94:e5:c4:78:78:d5:ee:87:
c0:34:a5:30:40:18:6a:cf:50:f8:1a:69:78:6b:05:50:a5:63:
e5:47:22:6d:19:22:70:75:06:4b:89:28:64:58:0b:e7:96:a6:
3c:4f:8c:a9:23:41:76:2e:c3:e3:db:2f:e0:0b:46:26:4e:f6:
44:0b:59:81:63:b6:e0:e1:4b:18:7e:25:03:0f:21:ce:69:f3:
5b:c4:51:5b:6a:26:8c:c7:9d:a6:55:67:d4:e7:d5:90:77:2c:
31:12:ba:87:2d:a9:20:52:43:49:ce:8d:e2:1d:48:6b:aa:8e:
d2:8a:b1:77:bf:b4:88:53:7e:6c:84:d0:23:2f:55:d3:6b:4e:
a0:e1:c6:85:1e:fc:eb:1f:af:7c:22:86:9c:63:d3:71:3f:e6:
b5:cb:34:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:49:36 2025 by rpki-client