Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
File: c4i9uc1_a6So9hjFpCp2quiSWc8.mft (raw, json)
Hash identifier: Qda9i+pGXq57AWDf+4yRs4I9sHEFcHr9VKVVXG4FoiE=
Subject key identifier: 9D:2A:4C:00:BD:EE:63:C8:64:1F:1D:CB:91:AF:DA:56:35:B1:26:A0
Authority key identifier: 73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF
Certificate issuer: /CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
Certificate serial: 0197BA7DAE5F89FA4F67277A2E8B5168332F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
Manifest number: 15B3
Signing time: Sun 29 Jun 2025 07:01:28 +0000
Manifest this update: Sun 29 Jun 2025 07:01:28 +0000
Manifest next update: Mon 30 Jun 2025 07:01:28 +0000
Files and hashes: 1: c4i9uc1_a6So9hjFpCp2quiSWc8.crl (hash: PCH3aGkLghOZf0CkJ/aEnX/MRUfFp63ZrzdcTKVmRZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:ae:5f:89:fa:4f:67:27:7a:2e:8b:51:68:33:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
Validity
Not Before: Jun 29 07:01:28 2025 GMT
Not After : Jun 30 07:01:28 2025 GMT
Subject: CN=9d2a4c00bdee63c8641f1dcb91afda5635b126a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:22:02:40:bd:b7:4d:7b:9e:6d:17:ea:e7:
a2:c2:bb:cc:5b:af:bc:06:84:3c:91:80:ac:c8:26:
ea:ee:8a:5d:8d:d1:c1:42:84:c9:9e:b8:15:cf:2f:
db:de:4a:6d:08:89:97:35:83:23:3b:a6:74:6d:2e:
30:ba:8a:53:d1:23:6c:c1:11:72:15:87:c0:9d:ea:
d4:24:07:89:01:07:04:ad:b1:19:84:50:f9:90:04:
97:fc:02:fc:9a:ce:7f:82:69:06:f6:bc:67:31:dc:
c9:bd:08:ab:5d:7c:64:61:c7:5f:da:e1:dd:75:ff:
a4:3e:e5:c4:a0:73:d3:0d:e8:f1:5e:a2:22:43:46:
a4:99:1d:7e:12:44:e6:5f:93:c1:04:63:97:c4:ee:
eb:38:3f:f2:ce:75:d3:71:b8:18:5f:74:2b:06:1f:
1c:46:22:42:48:63:34:a8:7c:0a:b3:24:30:fd:60:
c7:ac:20:e5:df:6a:6c:08:b7:aa:7a:a8:c6:5a:b8:
44:03:0b:b5:6f:81:df:fc:a9:8f:a0:a1:4c:fd:fd:
e5:fa:d6:39:2e:de:70:89:16:af:a0:db:1d:e7:04:
85:0a:19:3a:84:6d:90:8d:78:af:b3:98:56:9b:49:
23:cf:8e:1e:68:7c:81:1c:04:e8:61:c9:95:1e:e1:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2A:4C:00:BD:EE:63:C8:64:1F:1D:CB:91:AF:DA:56:35:B1:26:A0
X509v3 Authority Key Identifier:
keyid:73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4f:23:56:fb:4b:99:eb:2c:68:8c:71:ae:1f:b4:cf:51:05:
7e:be:a7:e1:67:e9:d6:80:a2:f8:af:3b:e8:70:16:18:06:e0:
f1:7c:d4:fb:d9:f0:1e:b6:67:2d:27:65:12:ac:d7:e5:5a:1e:
12:06:d3:ab:94:9a:5b:6a:52:55:ac:50:a2:8b:a8:15:ec:c2:
99:06:cc:3d:59:b4:8a:2c:2e:b6:fb:09:d0:d9:35:33:25:f4:
58:53:e6:b3:18:7b:b0:ec:70:a4:9f:4b:9b:0d:78:75:37:29:
88:fa:97:c9:46:36:30:54:b3:7a:32:44:2a:4f:d0:36:19:f1:
74:6c:35:42:c9:36:81:8f:02:19:2a:57:36:ba:cf:0f:35:e2:
96:32:0e:bf:48:6f:97:cf:e9:07:4a:6d:54:21:3d:5b:c5:d7:
82:ed:b0:71:e4:71:ce:44:95:06:e2:c2:17:da:ef:a5:53:f5:
27:51:54:16:d1:71:f8:63:0f:fd:0a:13:b6:19:81:c6:58:6f:
ef:ce:6d:79:a9:20:d8:47:2f:5a:db:fe:9f:65:c7:30:9a:42:
71:e0:65:8d:3d:8f:44:f7:71:00:d7:c7:47:c7:7f:5a:7f:21:
3a:ff:07:3b:01:81:47:42:d3:b8:70:a0:7e:c4:77:28:4a:9c:
e7:52:61:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:31:25 2025 by rpki-client