Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.mft
File: 9QtjTgs8aefagY27mc3jjqhJj3E.mft (raw, json)
Hash identifier: tlIAJEehq5b9Owt1h6UDrFEiKVR2SbSnadS8h8hN0Og=
Subject key identifier: D0:6D:ED:BD:1C:47:47:B5:F1:FF:C0:CC:06:9D:62:07:DA:D6:09:1E
Authority key identifier: F5:0B:63:4E:0B:3C:69:E7:DA:81:8D:BB:99:CD:E3:8E:A8:49:8F:71
Certificate issuer: /CN=f50b634e0b3c69e7da818dbb99cde38ea8498f71
Certificate serial: 0197B6A142EF5DA5E59BB7B3EDB9B1757EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtjTgs8aefagY27mc3jjqhJj3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.mft
Manifest number: 0AAD
Signing time: Sat 28 Jun 2025 13:01:51 +0000
Manifest this update: Sat 28 Jun 2025 13:01:51 +0000
Manifest next update: Sun 29 Jun 2025 13:01:51 +0000
Files and hashes: 1: 9QtjTgs8aefagY27mc3jjqhJj3E.crl (hash: ay27YffrH+xewWvn/Og949mChCRmllJlH0+VeGJy75o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QtjTgs8aefagY27mc3jjqhJj3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:42:ef:5d:a5:e5:9b:b7:b3:ed:b9:b1:75:7e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b634e0b3c69e7da818dbb99cde38ea8498f71
Validity
Not Before: Jun 28 13:01:51 2025 GMT
Not After : Jun 29 13:01:51 2025 GMT
Subject: CN=d06dedbd1c4747b5f1ffc0cc069d6207dad6091e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:82:31:b9:db:91:c7:de:aa:aa:11:8a:d7:
2c:d0:a2:58:ba:5e:1e:83:7f:1f:22:0a:53:d4:8b:
4a:d2:f7:76:ee:e7:6f:39:20:d5:64:66:f1:63:d0:
b2:bc:f3:91:21:54:57:59:11:b1:9d:6c:d2:c8:4f:
5c:c3:32:76:36:38:b7:2e:f8:f9:b5:ca:cf:9a:76:
88:30:55:28:5e:a4:c8:78:1f:09:83:82:95:59:e0:
a1:7d:f4:87:9c:be:9c:90:0d:dd:bc:2c:53:4a:59:
5a:06:8d:53:21:3c:98:14:af:44:60:72:88:bd:6d:
fe:11:a7:9e:6c:ec:ad:3a:8e:94:b2:b2:ac:4a:f4:
0a:d1:7b:4e:33:2d:b1:8a:3d:a7:e5:46:7e:5c:35:
d1:7e:28:04:f7:55:60:06:23:cc:45:61:12:82:fb:
8b:86:2a:f7:44:4f:5d:4e:66:ee:23:9a:60:6b:05:
16:75:54:d5:43:e5:d1:8d:21:d9:3b:e6:5f:bb:b2:
28:c1:44:ba:db:f0:14:1f:ec:27:25:16:96:08:90:
c2:ca:35:c0:dc:b4:fe:2b:c9:a6:33:2e:e1:ff:bb:
f3:eb:94:67:49:c5:59:52:2c:bd:08:01:11:b1:07:
cf:f3:01:72:45:ab:1c:93:dd:58:16:70:59:3f:43:
92:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6D:ED:BD:1C:47:47:B5:F1:FF:C0:CC:06:9D:62:07:DA:D6:09:1E
X509v3 Authority Key Identifier:
keyid:F5:0B:63:4E:0B:3C:69:E7:DA:81:8D:BB:99:CD:E3:8E:A8:49:8F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtjTgs8aefagY27mc3jjqhJj3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5a:6d:10:cd:72:00:2e:d6:b6:e6:2c:ac:0e:d9:29:eb:91:
7e:70:bf:77:0f:7c:a5:6c:17:45:ab:88:fe:27:54:63:05:e3:
db:86:5d:44:6d:fb:51:cc:b5:6a:65:e7:b9:c2:87:bc:a9:bc:
ab:11:4f:f0:c7:37:b7:30:f2:e1:ca:25:93:85:29:de:0f:c8:
6b:99:a3:a7:f2:e5:93:c5:ee:ac:af:eb:05:90:9a:ee:c9:36:
42:f1:ed:f2:26:5a:1f:0b:5b:00:10:fd:b1:1d:d6:26:97:f8:
6b:c5:62:2a:59:a8:9a:ad:29:74:7a:2b:85:30:2d:07:14:d8:
ef:35:56:e0:66:68:2a:1b:d5:20:d1:e9:22:43:61:14:50:ca:
e1:38:8e:26:c4:42:9f:54:f1:6e:c2:cb:ca:f5:fe:6e:5b:bd:
50:67:0a:f3:8c:ec:e6:1c:72:d1:90:35:f3:07:fc:a2:f8:f1:
13:5e:69:d8:29:f9:d7:25:93:bc:52:fd:c4:9b:c1:c4:6a:4e:
52:0e:c2:94:54:da:72:5d:9e:ae:bd:9c:54:e5:81:95:73:f5:
28:1e:ef:c9:29:55:32:2e:28:a1:25:35:5c:b9:0e:c4:3e:2b:
33:c0:94:5f:1f:3a:12:a8:d0:4a:25:b2:ca:dc:db:69:f9:83:
78:7a:e7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:58 2025 by rpki-client