Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
File: 9n1n2ohguDIsTyBNYRsAYTjxs5E.mft (raw, json)
Hash identifier: x+8TUQChqfl6J5uyp7BElMqmj1LgxIgGEr9geFOYM9Q=
Subject key identifier: BF:60:3D:6D:EF:8A:DA:93:74:72:A7:93:69:94:12:4B:CA:DB:D5:9B
Authority key identifier: F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
Certificate issuer: /CN=f67d67da8860b8322c4f204d611b006138f1b391
Certificate serial: 0197B7453EDF1A4DA8820C92D82AD9023C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
Manifest number: 02B4
Signing time: Sat 28 Jun 2025 16:00:57 +0000
Manifest this update: Sat 28 Jun 2025 16:00:57 +0000
Manifest next update: Sun 29 Jun 2025 16:00:57 +0000
Files and hashes: 1: 9n1n2ohguDIsTyBNYRsAYTjxs5E.crl (hash: gND7mlfWR6OSQdkOQn6T/wy/52N5swrqv1SftxFEOoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:3e:df:1a:4d:a8:82:0c:92:d8:2a:d9:02:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67d67da8860b8322c4f204d611b006138f1b391
Validity
Not Before: Jun 28 16:00:57 2025 GMT
Not After : Jun 29 16:00:57 2025 GMT
Subject: CN=bf603d6def8ada937472a7936994124bcadbd59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:53:27:ea:76:7f:38:49:09:05:9c:87:99:
21:71:1e:e2:a1:b7:8a:08:17:3e:3d:2a:f4:d0:ab:
26:e0:11:dc:a6:11:76:f9:f2:86:94:73:ae:63:6a:
68:3f:55:c2:78:f2:0a:3f:15:b0:94:b4:73:6d:ac:
2c:dc:91:72:9a:76:0c:66:d7:67:50:34:93:37:f8:
e2:fd:1d:c0:53:0b:a6:da:2b:34:9b:ec:3c:17:c8:
15:9a:8b:18:32:84:fb:87:7e:0b:08:b2:07:d7:be:
f5:4a:31:08:ca:4b:da:65:6c:39:db:fd:f3:85:89:
e1:34:33:0b:e6:6c:6d:e1:43:13:37:8e:a5:8a:ca:
08:8d:29:2f:6c:fe:20:07:a4:c7:d6:d0:74:05:41:
17:06:7b:4f:98:3b:5c:cb:10:45:2f:24:0f:34:e9:
2b:4a:6c:dd:22:2b:c3:97:ee:c6:3a:ad:95:49:ca:
7b:33:c6:47:c1:c6:2e:f5:4f:c9:92:dc:1a:da:1b:
5e:c9:c9:b8:f7:42:bc:96:4f:e5:12:30:da:df:c4:
af:8a:aa:51:22:3b:32:f4:fa:11:53:ba:5e:36:a7:
7a:e8:c4:79:c7:99:30:86:09:0f:1a:7b:23:a4:f6:
6a:50:ee:b6:23:07:07:4e:6c:93:68:62:6c:3a:07:
f4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:60:3D:6D:EF:8A:DA:93:74:72:A7:93:69:94:12:4B:CA:DB:D5:9B
X509v3 Authority Key Identifier:
keyid:F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:a4:ce:cb:1a:63:a8:e9:4f:e1:2e:c3:c8:11:ae:b7:95:02:
7f:5c:24:47:f6:8e:71:18:67:14:4f:f6:59:ac:b6:ce:6c:4f:
88:39:68:a9:9a:5e:06:a7:d8:85:62:7f:5b:78:bb:58:35:ee:
fd:f3:d2:5c:94:ee:18:80:2d:57:6a:7d:f6:0a:12:72:e3:d4:
36:cf:c1:96:f8:29:b6:92:28:8c:f9:da:e9:bf:94:d8:7e:4c:
22:87:ff:c0:92:84:26:75:75:9f:3f:1f:d1:a3:a5:87:75:a8:
33:2d:c5:cd:4a:c0:b7:f7:6e:25:ef:4b:ea:09:53:aa:03:56:
b0:d7:cc:20:68:2c:5f:9f:17:32:b3:41:be:8a:e9:3c:b4:e4:
63:b1:78:5e:47:24:d6:67:5f:5a:2b:ab:5d:c9:09:b9:97:be:
ac:73:5b:97:41:83:e6:30:bc:1c:32:1a:b2:e1:90:ef:23:b5:
f6:27:d7:8e:a6:3e:31:68:dc:d5:67:e9:78:4a:41:28:4c:be:
e5:e2:3d:fa:13:5a:4f:13:d8:71:53:70:1d:b4:6e:80:b5:90:
e9:40:b4:d1:4f:ea:8e:40:9b:92:f9:b6:94:43:ea:fb:6e:3d:
96:10:fe:86:78:18:2f:fc:06:d6:30:95:34:4c:af:64:3d:cb:
24:79:ac:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:17 2025 by rpki-client