Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
File: 9kixVYLTS9UXCp3RO4EyW6uuXjo.mft (raw, json)
Hash identifier: zhLFs8On0/SCiCZWAvn7iqcHWDf+hbtTKx5vq2BCDgM=
Subject key identifier: 96:7B:1B:56:27:1C:37:F3:56:28:9C:DB:0D:EC:54:1E:CD:74:FB:45
Authority key identifier: F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
Certificate issuer: /CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Certificate serial: 0197B7EA460D5897D9EE2FC200D30FB5C881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:13 +0000
Manifest this update: Sat 28 Jun 2025 19:01:13 +0000
Manifest next update: Sun 29 Jun 2025 19:01:13 +0000
Files and hashes: 1: 9kixVYLTS9UXCp3RO4EyW6uuXjo.crl (hash: MP7etLHR++LCw/eTI0Vvoms6Ty/0DDlFMX0RN5pxPN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:46:0d:58:97:d9:ee:2f:c2:00:d3:0f:b5:c8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Validity
Not Before: Jun 28 19:01:13 2025 GMT
Not After : Jun 29 19:01:13 2025 GMT
Subject: CN=967b1b56271c37f356289cdb0dec541ecd74fb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:2f:ec:d5:97:42:d5:8c:fc:a8:c4:9f:6d:
8e:db:66:4a:14:9c:14:28:ae:21:fa:c5:5f:a6:d3:
a5:06:59:85:c4:30:64:64:57:7e:9a:82:ff:48:4d:
89:8e:b7:c8:ae:0f:59:a4:3a:59:0f:c8:e1:b8:3d:
5d:3a:f5:d4:44:ca:2c:ab:40:c5:2f:d1:fa:bf:63:
6d:fc:9b:f3:45:7a:99:76:73:5b:8a:3a:0b:9e:89:
49:54:f2:7e:c0:a4:72:fa:80:86:7c:bb:34:47:6c:
e8:b7:82:29:63:24:41:23:1b:35:95:df:19:74:77:
f8:d1:bb:52:9a:20:19:e9:e9:7a:bc:3d:6e:2e:0e:
e4:32:42:43:5b:d0:01:d7:e3:ee:25:04:cf:99:df:
78:42:f0:ab:55:9c:d4:e3:39:69:ba:e0:ef:b9:86:
7e:55:1c:de:21:17:de:01:ee:8a:fa:fc:56:8f:3f:
f2:c4:2b:3c:d5:b6:db:36:09:b2:ed:ec:d9:db:ff:
ac:f3:0c:24:4c:f7:99:45:ef:db:9b:64:19:81:70:
6a:dc:e3:27:df:10:0f:d6:96:a5:fc:b9:c5:49:3a:
32:0d:ec:85:a4:32:0e:a1:76:fd:86:5c:28:16:4f:
a1:4e:a2:ed:29:79:a9:2d:b3:f6:a4:a1:58:1d:a8:
42:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7B:1B:56:27:1C:37:F3:56:28:9C:DB:0D:EC:54:1E:CD:74:FB:45
X509v3 Authority Key Identifier:
keyid:F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b8:52:fa:1b:d0:3e:4a:40:2e:90:82:ae:e9:d1:12:70:75:
9d:17:47:f2:36:ab:64:bd:31:d1:62:66:d5:8f:a2:d6:6b:d5:
2b:d6:5b:4d:38:33:f6:a5:a3:90:9d:52:6d:e8:cf:6a:d6:bc:
d2:d0:60:2f:cd:27:6a:6d:68:97:5c:50:24:a8:91:8c:8c:a1:
bf:8d:3a:30:05:f9:5f:60:b9:51:22:56:24:4d:6e:1f:f2:14:
ee:68:16:c4:36:dd:7d:ab:bc:95:7c:f6:21:d8:95:34:30:16:
ce:91:57:a8:a1:8c:6b:6a:30:87:4b:a9:59:61:bd:f2:67:24:
a7:dc:77:72:94:2f:8a:28:de:75:28:ff:99:7a:96:d2:00:eb:
df:75:d1:82:8f:5c:1d:9d:70:1a:c7:e1:da:3f:af:8e:94:4b:
9d:bb:20:fa:8a:8a:53:f6:17:18:a8:48:1d:79:29:96:3e:60:
94:91:0d:c1:93:fa:8a:fe:7f:c0:fd:2d:cd:66:cd:7f:dc:63:
1f:fa:88:cc:84:c7:26:cc:32:52:37:41:ef:69:6d:89:b5:78:
74:96:a2:b2:62:88:f6:f6:20:cf:a8:1a:40:05:d3:41:18:c8:
f3:da:2d:44:8a:ff:cc:64:30:36:18:fe:9a:03:80:b7:ce:37:
64:59:a5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:24:01 2025 by rpki-client