Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
File: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft (raw, json)
Hash identifier: 24Pc7epZqQ4zvPYCqjl108RxapaLFedK5dILZay/SEc=
Subject key identifier: 1E:F8:01:4D:DD:6E:53:08:53:D1:A9:F7:D1:54:E3:60:09:0B:C0:8D
Authority key identifier: F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
Certificate issuer: /CN=f57766f0726cff8618af968258f5bb229e937c6e
Certificate serial: 0197B5FC0D6D58D53CCFB4BE4958C78E936B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
Manifest number: 0CE1
Signing time: Sat 28 Jun 2025 10:01:23 +0000
Manifest this update: Sat 28 Jun 2025 10:01:23 +0000
Manifest next update: Sun 29 Jun 2025 10:01:23 +0000
Files and hashes: 1: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl (hash: MqlsiMFlareADgsu1XEyJUWXOieUvcEexW+7MACi7wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:0d:6d:58:d5:3c:cf:b4:be:49:58:c7:8e:93:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57766f0726cff8618af968258f5bb229e937c6e
Validity
Not Before: Jun 28 10:01:23 2025 GMT
Not After : Jun 29 10:01:23 2025 GMT
Subject: CN=1ef8014ddd6e530853d1a9f7d154e360090bc08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:a2:f7:e1:d1:f1:05:e3:0c:fb:59:55:84:
02:ac:15:1c:eb:b8:f4:da:35:19:05:14:e4:fe:a1:
fe:4f:a2:05:da:2a:e3:46:02:3b:0a:00:06:05:b1:
cf:ec:12:79:12:c9:16:58:57:20:a4:1c:70:3d:bd:
45:b7:8f:8c:19:f6:b3:ba:37:20:d5:6f:14:9b:da:
53:2a:74:56:6e:06:19:75:dd:19:fa:54:23:94:15:
8e:fa:f7:ea:8c:9d:0a:ac:72:8d:13:4e:c8:4f:c1:
6f:0c:b8:de:1c:a7:12:43:75:a4:cf:8c:b4:c8:d0:
b9:88:64:57:47:57:ab:89:a1:cd:f4:c2:2d:c7:1f:
33:ef:02:f7:91:87:93:9e:23:b3:30:c2:b8:9d:cb:
e6:a9:e9:82:ac:ff:e6:e4:91:47:ab:8d:0a:ac:b2:
c4:5b:5b:74:3f:5e:bf:b0:68:a7:ea:cb:c3:50:56:
89:98:a6:a8:78:40:90:e4:96:ad:d9:f6:a6:e3:31:
fc:dd:1c:5d:a4:89:b5:2d:02:a4:4f:52:ee:8a:8f:
e8:2d:6a:9c:3c:ff:34:0a:36:f4:c3:48:3a:5c:25:
af:d4:a3:98:4c:44:e7:d5:08:ee:a9:7f:2a:8a:ed:
72:e6:81:66:c3:6e:79:1a:0c:55:4c:5b:e6:b1:c7:
eb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F8:01:4D:DD:6E:53:08:53:D1:A9:F7:D1:54:E3:60:09:0B:C0:8D
X509v3 Authority Key Identifier:
keyid:F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:53:54:3b:e0:fe:48:dc:93:df:aa:2b:60:43:82:00:ac:49:
dd:71:71:bd:c6:2c:7c:2a:e4:b7:2e:bd:53:ac:99:e6:f3:5f:
a5:15:75:86:ac:9b:d9:60:29:bf:7a:06:a3:91:1a:17:5b:46:
8f:90:9d:ec:de:31:f4:df:7c:1b:35:4f:8d:89:7a:ef:9d:6e:
11:2c:d4:37:07:14:ae:55:ec:56:a6:20:76:2c:ac:6b:6d:90:
be:6c:ad:aa:cf:fe:6f:6e:4f:8a:ad:db:f2:57:c8:d1:b5:88:
b2:2c:ce:bb:2e:de:86:56:63:6a:c9:46:35:7d:cf:86:83:86:
0a:dd:b7:c8:ab:d5:21:45:bc:9c:52:fd:19:45:82:a7:9c:79:
e7:27:6f:c7:f3:bb:c9:8e:93:96:c5:06:bf:68:65:a2:e0:76:
76:88:c7:51:be:c0:3a:60:2d:36:4e:57:70:70:3a:00:ea:ed:
03:ce:95:ca:78:25:a9:c0:e1:7e:e9:90:d3:ec:9f:74:bb:dc:
e7:fc:20:f8:b9:9b:f4:75:e3:a2:dc:4b:b6:0f:3c:72:48:2f:
e8:0c:19:d8:97:9c:f6:bf:3b:b9:f3:a6:e9:4d:4c:25:02:3a:
8d:f7:c6:25:c5:8f:2f:92:cb:f7:f9:c0:6a:3d:1a:e6:c6:87:
6e:20:f2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:10 2025 by rpki-client