Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
File: 9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json)
Hash identifier: 9VhltKT3h0lf2q/2giA87INt1CHt47yBqnwIoNg6Pwc=
Subject key identifier: 0F:1A:95:21:8A:A8:36:D5:32:D9:4F:D0:B4:B2:DD:FD:71:42:12:A6
Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
Certificate issuer: /CN=f6b112d4bedba6f358528a837141b74b09298593
Certificate serial: 0197B7EA2EAE1DFF2DF9E3BE6E4D6010F23E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
Manifest number: 1505
Signing time: Sat 28 Jun 2025 19:01:07 +0000
Manifest this update: Sat 28 Jun 2025 19:01:07 +0000
Manifest next update: Sun 29 Jun 2025 19:01:07 +0000
Files and hashes: 1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: BVl5sr73CtpdcR8lwX+JV48Tuvr4Yc3WmUl1pcnJ4Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:2e:ae:1d:ff:2d:f9:e3:be:6e:4d:60:10:f2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593
Validity
Not Before: Jun 28 19:01:07 2025 GMT
Not After : Jun 29 19:01:07 2025 GMT
Subject: CN=0f1a95218aa836d532d94fd0b4b2ddfd714212a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:dc:3b:16:e6:d8:60:f2:a2:ac:2e:51:12:
27:13:7b:20:b8:0d:21:dc:bc:8e:f3:a3:3d:56:3d:
67:53:20:ff:ed:fc:27:bf:c8:99:26:50:8f:4b:bd:
55:21:46:da:1b:4a:7f:5d:3c:1a:1e:9c:0d:3f:78:
37:5a:23:4a:f6:1c:bb:3a:99:82:49:14:40:2e:53:
f5:0a:e7:3d:69:37:8b:ff:7d:a8:5a:07:6c:56:97:
df:f4:86:f8:5e:49:9b:6d:b1:ff:17:e9:95:29:9a:
38:29:a9:f5:3e:78:9b:ce:d6:7c:ba:23:5b:61:e1:
bc:ce:46:3b:5b:52:ab:a0:58:9d:25:ee:bd:3d:4a:
34:77:0f:c7:9b:90:c5:4c:c0:0c:f9:10:e2:93:17:
a0:ae:aa:be:94:07:f9:17:3b:1d:7c:70:27:0e:dd:
87:8f:69:70:ea:3d:e1:e8:87:cd:cf:b7:1c:ac:cb:
32:91:95:67:8e:ec:56:fe:27:a8:2c:9a:ff:5d:7a:
74:82:1e:36:f9:a2:b3:4a:05:1b:3b:04:21:42:00:
72:19:35:fa:dc:48:a8:c4:12:99:df:ec:b2:13:08:
04:37:6e:53:dd:c5:b4:b6:aa:7c:cf:a6:21:b8:b5:
3b:3f:3f:37:8e:7e:b6:f1:94:63:fc:7e:a4:f3:af:
da:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1A:95:21:8A:A8:36:D5:32:D9:4F:D0:B4:B2:DD:FD:71:42:12:A6
X509v3 Authority Key Identifier:
keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2d:98:b5:ac:f2:32:85:cd:40:ec:4e:ca:0d:82:f6:ea:47:
2f:9f:af:b8:c9:74:bf:7a:00:54:ec:0b:36:42:ad:07:85:fa:
5b:b8:f0:44:f2:88:45:30:2a:20:61:46:ef:50:df:ff:45:6e:
d7:de:d0:8b:ab:42:93:76:48:03:a3:e2:2c:e0:88:14:21:e1:
92:13:d1:ea:28:a6:e5:f8:13:4a:d9:58:b8:a8:52:a0:e6:a7:
55:a3:fb:6a:ba:f6:06:8f:61:b2:e7:f3:5b:a5:d8:e2:82:ee:
ff:70:43:d9:ef:43:e3:d5:7d:bf:42:75:65:a5:12:9d:a8:38:
d8:8f:f5:ff:ec:48:b4:77:74:b2:6b:01:71:db:9f:e9:eb:1c:
45:76:74:68:5e:bb:74:0c:dd:2c:6e:44:9a:41:f2:f6:7d:fe:
d2:17:f6:42:c7:34:9b:49:40:4a:50:c8:68:bd:8e:6c:6d:32:
77:06:99:8c:e4:57:0e:18:ba:38:5c:ba:a2:fa:60:a7:9d:cc:
ff:1f:07:f1:06:90:1d:ab:2e:d3:d5:a0:6f:1d:7a:28:f6:3f:
87:c9:29:59:0e:ce:d5:ea:36:06:0d:a9:31:7e:af:a6:c1:c4:
0f:07:d7:21:61:d4:55:fc:8c:e3:89:e4:7e:16:4f:d3:ed:3b:
7d:64:21:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:36 2025 by rpki-client