Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
File: i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft (raw, json)
Hash identifier: rp2104Q8LqEO9hnqsy2lL8BNC0D78X/wAymp72c49uo=
Subject key identifier: 65:75:57:C2:DF:FE:4C:D5:B9:75:69:A0:DB:1A:A2:1F:89:06:0F:0F
Authority key identifier: 8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24
Certificate issuer: /CN=8bd8931f63579428bf08ccb199a3a98dcba6b824
Certificate serial: 0197C75D6A133D0DAACC79BBEBA51198071E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
Manifest number: 0A95
Signing time: Tue 01 Jul 2025 19:01:17 +0000
Manifest this update: Tue 01 Jul 2025 19:01:17 +0000
Manifest next update: Wed 02 Jul 2025 19:01:17 +0000
Files and hashes: 1: i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl (hash: srzvKHO5DXIHV1ok+sEEW1tR8CmqFiiu9cPb4nyWoNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:5d:6a:13:3d:0d:aa:cc:79:bb:eb:a5:11:98:07:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd8931f63579428bf08ccb199a3a98dcba6b824
Validity
Not Before: Jul 1 19:01:17 2025 GMT
Not After : Jul 2 19:01:17 2025 GMT
Subject: CN=657557c2dffe4cd5b97569a0db1aa21f89060f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:24:6b:27:ef:8d:4a:df:51:80:a8:f7:07:e3:
48:84:fe:d1:8e:d2:70:2f:fb:ad:5e:d5:bd:42:81:
bc:db:4f:e1:cb:17:88:d4:03:72:17:77:b6:e0:ed:
3a:c5:1e:2d:69:04:5a:63:47:1d:dc:cf:af:56:42:
fa:85:0c:f3:b6:bc:92:9a:d3:eb:11:c0:0d:41:0a:
0e:a1:0e:38:d7:a4:61:20:9f:b5:0b:fb:fd:de:06:
9b:16:01:fb:75:78:ce:cc:6e:e7:30:df:d9:4a:5f:
d6:d9:61:86:f0:9f:43:c2:07:6c:fc:97:f4:56:af:
d9:f4:de:b2:45:e1:bf:0e:f8:24:39:ca:c0:3f:da:
97:52:a4:9f:12:0c:2a:99:07:a0:65:c2:ed:d2:7f:
e3:a3:c9:27:67:03:2b:72:96:21:ce:52:f2:c0:9c:
a6:c6:ce:2c:2a:c6:03:19:a7:e8:c7:57:4a:27:a4:
96:12:26:3f:f7:29:df:03:84:28:59:86:e3:4b:bd:
44:79:5f:e1:bf:ee:06:85:69:78:4e:27:13:a7:ca:
cd:72:dd:9d:8c:22:3d:6c:62:81:88:e6:3a:b6:65:
c5:2f:9b:03:9a:08:4b:a3:70:c2:26:87:df:32:8b:
52:93:8a:06:ab:c5:82:72:ac:45:22:51:d2:43:9c:
cf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:75:57:C2:DF:FE:4C:D5:B9:75:69:A0:DB:1A:A2:1F:89:06:0F:0F
X509v3 Authority Key Identifier:
keyid:8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:34:71:01:cb:d7:8e:e1:f6:31:d2:49:d8:64:c7:82:6b:ad:
a3:7e:e8:6b:37:8d:50:ad:af:81:08:64:46:81:0f:a7:11:16:
b0:b1:36:16:57:e3:30:4d:e6:8c:ed:7e:be:df:c7:f3:d7:e3:
b8:2f:01:80:fa:ba:f5:7b:1a:80:1c:a8:d0:7c:5c:03:68:e5:
71:91:0d:fc:97:de:49:c6:67:14:6e:97:bf:4d:97:e8:17:9a:
2c:84:35:c4:2b:7d:b4:ff:02:1a:78:f5:14:29:bf:1b:45:f7:
61:0a:8b:4c:a3:ca:f3:44:11:a3:58:8e:36:f6:b0:c1:0e:d3:
e2:b1:24:cd:a3:3f:89:e3:39:07:e4:73:a6:e4:ae:cf:69:d3:
f4:95:9e:8e:94:40:72:06:59:93:53:e4:4e:27:2d:a7:11:99:
d0:9d:99:2d:6b:66:2c:39:27:d5:d1:57:e6:4a:6b:ce:27:39:
46:2f:de:6e:dd:35:14:71:cf:dd:5d:4b:79:77:60:47:10:38:
3e:ed:7e:60:e3:15:96:c3:99:ca:f6:e2:e3:dd:f2:6f:8d:07:
00:c7:83:4c:5c:e4:f1:12:95:6f:87:2f:42:bf:a3:ea:18:5f:
d6:be:5d:a0:22:05:f5:0d:55:30:88:f7:3d:b5:87:af:e6:39:
22:f8:de:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:39:48 2025 by rpki-client