Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
File: 9oXcPBRGS4xAgXUl2aJUtO06ijo.mft (raw, json)
Hash identifier: v7LmFNnCCop4jDDwZ6ojE1ngO1HVf5yShMf0utmWNfk=
Subject key identifier: 2C:52:58:08:46:82:74:26:75:0E:DD:7F:E3:B3:04:0C:9B:E9:F6:D9
Authority key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
Certificate issuer: /CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Certificate serial: 0197B7455F876CC7C73DB60FD5D9CE7E4E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
Manifest number: 0F
Signing time: Sat 28 Jun 2025 16:01:06 +0000
Manifest this update: Sat 28 Jun 2025 16:01:06 +0000
Manifest next update: Sun 29 Jun 2025 16:01:06 +0000
Files and hashes: 1: 9oXcPBRGS4xAgXUl2aJUtO06ijo.crl (hash: 5VnHQja6MoD0GvoM2Fc1IQADDmBRX8VnARwGCapDgtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:5f:87:6c:c7:c7:3d:b6:0f:d5:d9:ce:7e:4e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Validity
Not Before: Jun 28 16:01:06 2025 GMT
Not After : Jun 29 16:01:06 2025 GMT
Subject: CN=2c52580846827426750edd7fe3b3040c9be9f6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:3b:b1:90:9d:87:bb:19:2b:98:20:4e:a9:
f2:07:51:3c:c7:2e:cc:d4:86:1d:db:a0:e0:5f:b5:
75:d0:5f:f0:78:0b:3c:80:8b:5d:b6:61:be:f0:ff:
49:28:02:61:52:9c:97:91:5e:90:90:d8:63:b3:27:
d7:f1:1f:10:5b:03:4e:0e:ba:43:b8:a2:67:b7:e0:
f8:31:7d:24:db:5b:11:12:f1:da:8f:39:f2:db:cf:
c4:c3:4e:cd:61:35:df:01:9b:66:65:54:db:82:9c:
f4:6b:c4:2d:06:3c:43:68:5d:37:8f:a0:2a:4f:63:
13:78:8f:41:ec:8a:63:cf:d3:a6:cf:c5:92:22:73:
8c:da:b5:59:fb:13:f0:92:fe:54:dc:f3:e5:ed:58:
cc:9a:bd:ea:98:8e:fd:5c:75:42:0b:cc:87:7f:c3:
1f:78:13:a3:bb:9e:ee:f5:ab:1b:3f:7d:0d:05:0e:
01:b4:8d:bd:41:3c:4e:dc:d3:c3:03:65:1a:99:3f:
2c:b1:e1:6e:a4:0b:6f:38:d7:62:f2:f3:79:ab:24:
71:61:9e:1c:ae:03:09:b9:3c:da:67:c4:ca:b3:d7:
f3:15:03:f9:28:a6:4a:1c:3f:b2:59:f4:bc:b4:fc:
e9:36:72:78:9a:d0:d8:17:c9:95:10:af:f1:0f:63:
6f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:52:58:08:46:82:74:26:75:0E:DD:7F:E3:B3:04:0C:9B:E9:F6:D9
X509v3 Authority Key Identifier:
keyid:F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a4:81:85:20:c5:ca:da:c7:57:36:cf:29:0f:2e:dc:77:02:
52:fb:41:41:cd:c7:79:62:06:83:bd:b2:8a:56:f8:7d:c6:b8:
b2:1f:b9:66:ee:ee:72:57:a3:3a:6f:0b:6a:a4:e5:44:4c:54:
1c:b5:2e:cf:46:3c:c6:75:e1:5f:69:e0:7f:71:c9:27:2f:e3:
89:10:76:83:ad:b8:d2:0d:90:73:e7:ba:67:68:b5:d5:f2:92:
fe:d3:a3:9a:86:5f:83:6c:30:f4:61:fa:31:1c:4b:b5:43:85:
f8:0b:0a:4e:59:0d:e6:d3:eb:35:28:fd:b2:f1:98:b2:0d:9c:
bd:01:b7:a0:7b:83:76:ec:cc:fe:84:71:5c:3b:74:4f:20:13:
62:8a:5b:8b:07:ff:79:5f:c4:1d:2f:12:d4:71:af:90:60:82:
09:11:3e:71:8e:04:5c:4a:9a:9b:53:d4:dd:d1:d0:9b:ef:12:
3a:21:40:46:85:ed:6b:71:c1:ed:d6:7d:60:ca:33:6d:32:09:
18:35:1d:82:30:57:df:db:53:6b:7b:a2:7a:51:cd:a9:c6:fd:
ac:b1:96:73:6f:2e:75:c5:85:b3:58:12:34:29:70:ee:a2:fc:
12:77:67:c0:52:51:62:10:51:b4:0b:3a:14:a4:12:1f:2f:1b:
68:8e:07:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:15:06 2025 by rpki-client