Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
File: 9L51BK-IrnweNulm1Ztl3EBXJfE.mft (raw, json)
Hash identifier: fwe+dGcZ6MlHdewWeNl8osJ9m//ITZRnSGMHykiku1s=
Subject key identifier: F9:B5:20:F3:55:52:BD:77:A0:1F:87:28:FD:47:DA:6F:60:B7:21:3B
Authority key identifier: F4:BE:75:04:AF:88:AE:7C:1E:36:E9:66:D5:9B:65:DC:40:57:25:F1
Certificate issuer: /CN=f4be7504af88ae7c1e36e966d59b65dc405725f1
Certificate serial: 0197B70E8A01A711429546C8113D7E3641AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
Manifest number: 1322
Signing time: Sat 28 Jun 2025 15:01:12 +0000
Manifest this update: Sat 28 Jun 2025 15:01:12 +0000
Manifest next update: Sun 29 Jun 2025 15:01:12 +0000
Files and hashes: 1: 9L51BK-IrnweNulm1Ztl3EBXJfE.crl (hash: r/aADow8iUsSUoA3mnxH5nOEDXOIvpdrUpklJrZL3oA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:8a:01:a7:11:42:95:46:c8:11:3d:7e:36:41:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4be7504af88ae7c1e36e966d59b65dc405725f1
Validity
Not Before: Jun 28 15:01:12 2025 GMT
Not After : Jun 29 15:01:12 2025 GMT
Subject: CN=f9b520f35552bd77a01f8728fd47da6f60b7213b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:9b:6c:41:4c:9d:96:63:aa:90:c5:29:30:
89:79:9b:6e:d8:f0:69:bb:01:ba:f7:43:37:d1:0e:
60:ba:b8:7a:3d:7c:39:fa:8d:ac:37:e9:15:6c:8a:
52:46:fc:51:10:97:ee:ae:3c:68:37:7a:40:bb:49:
ba:09:0d:db:4e:70:e3:0d:f4:fc:2b:69:1f:6b:0d:
3a:31:c1:81:56:1c:ac:a6:ed:14:e2:1e:72:86:84:
a0:da:9a:2d:9b:78:8b:f6:61:cb:21:d3:b0:6d:7b:
00:37:fc:bf:9e:bf:5b:40:49:04:49:c7:18:d2:5d:
3d:5b:b1:a6:04:2b:00:bd:b8:1e:d4:aa:44:f6:8e:
40:d0:43:09:2d:99:b9:bc:71:89:b5:a1:47:ac:b2:
03:43:83:8d:37:d1:c7:fd:f5:87:37:8e:98:4c:2e:
bc:d1:c8:9d:28:dd:f2:5d:a2:2f:d4:06:e9:f8:9f:
8f:fc:25:70:a7:0d:66:85:0f:3a:57:e0:e9:47:f6:
11:81:23:8a:40:9a:31:14:e3:21:f4:bf:a6:7b:d7:
67:ba:d9:28:70:f4:af:d7:1e:2a:17:bb:1e:67:ec:
c6:43:fd:fc:3a:34:14:27:7d:87:2f:99:3c:62:cd:
a2:cb:1d:ea:f4:7a:0f:47:2b:3a:6f:df:62:ae:f2:
7b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B5:20:F3:55:52:BD:77:A0:1F:87:28:FD:47:DA:6F:60:B7:21:3B
X509v3 Authority Key Identifier:
keyid:F4:BE:75:04:AF:88:AE:7C:1E:36:E9:66:D5:9B:65:DC:40:57:25:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b5:48:5b:7d:ea:c1:99:85:74:36:76:a3:d4:35:5b:af:2a:
0b:79:cc:da:d2:e9:0b:5e:8c:05:8f:dc:6d:23:17:0a:45:4d:
01:12:fe:21:f1:e5:6c:40:48:bb:09:38:45:73:ca:b1:29:39:
7f:de:a0:1d:7b:ad:bb:d0:d8:00:d9:b5:ac:d6:7d:73:5a:29:
2c:4b:69:92:b5:24:51:06:57:ef:c5:46:e2:70:0f:61:c1:62:
37:9f:67:5d:df:94:25:55:c1:68:6d:06:bc:62:72:8f:35:65:
85:24:46:23:3c:5f:5b:3e:8e:5a:53:f1:2b:b6:0e:dc:57:7b:
a5:d9:a5:9b:63:76:e6:4e:6c:3c:e5:88:c4:1b:7f:aa:39:8c:
b0:4a:cb:af:ba:a4:48:bb:f3:c8:86:c7:23:59:f3:42:80:a8:
72:fd:d0:20:b9:0b:a1:f9:70:c8:16:c0:69:f5:29:82:95:66:
08:dc:bd:a6:8b:47:7b:38:5c:3a:be:5c:d6:87:af:a6:48:72:
b5:5f:d8:0f:4e:2a:90:8a:bd:fa:5c:7e:02:be:fe:1f:ab:31:
47:c5:fb:04:a0:54:ba:6b:9d:dd:39:f4:39:28:8f:c4:49:ed:
2f:58:c2:80:14:ab:89:0c:89:ac:72:eb:e1:42:72:a9:fa:e7:
39:d6:e5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:11 2025 by rpki-client