Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
File: 9IFCCQRj_g9JoTDRUYZql3F9RCo.mft (raw, json)
Hash identifier: tl3wFZ0izP2m4O7U+/jUCn6K+CplLwKfuNI57L683+w=
Subject key identifier: CC:43:A7:63:30:9C:AC:F0:D3:7D:66:23:06:46:3C:10:CD:9C:FD:6B
Authority key identifier: F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A
Certificate issuer: /CN=f48142090463fe0f49a130d151866a97717d442a
Certificate serial: 0197B6D75A064867E8B4A4A8B18DE737F20D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
Manifest number: 0304
Signing time: Sat 28 Jun 2025 14:00:55 +0000
Manifest this update: Sat 28 Jun 2025 14:00:55 +0000
Manifest next update: Sun 29 Jun 2025 14:00:55 +0000
Files and hashes: 1: 9IFCCQRj_g9JoTDRUYZql3F9RCo.crl (hash: yUIeo0OeXT4VQInd9jpMcdu6Vwwd9sbAOJRVam1m6j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:5a:06:48:67:e8:b4:a4:a8:b1:8d:e7:37:f2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48142090463fe0f49a130d151866a97717d442a
Validity
Not Before: Jun 28 14:00:55 2025 GMT
Not After : Jun 29 14:00:55 2025 GMT
Subject: CN=cc43a763309cacf0d37d662306463c10cd9cfd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:35:a6:b5:f1:51:08:9e:30:bb:89:8c:6c:46:
19:a9:f6:42:73:8d:df:6c:00:af:da:ca:78:a2:68:
78:93:eb:0c:02:7b:70:41:78:0d:42:87:15:ed:3f:
c5:f4:3d:44:fe:1d:73:08:8f:9d:af:7e:a3:00:a3:
13:b8:f3:93:f3:5a:83:1e:0e:75:46:78:ff:5b:d4:
89:22:d8:67:ce:d9:88:47:4a:d6:5c:4d:8d:5e:37:
99:3e:76:e7:7a:e8:b7:66:97:69:4b:c1:81:53:4e:
9f:1a:73:0a:90:d3:e4:95:7d:df:9d:9a:c6:fa:d7:
bb:56:0d:e0:1a:f7:c0:49:d1:e9:c2:b4:90:ba:6b:
58:5a:e9:84:e0:5d:54:ef:99:85:63:3e:bd:00:1e:
82:0e:a7:eb:40:22:c1:e1:e1:e8:d0:0d:13:9d:05:
cd:a0:0c:1d:c0:6e:ec:c1:6f:ba:74:ef:10:13:a2:
8b:6f:91:01:75:25:c7:1a:69:2c:52:04:e2:f8:8d:
fa:c4:63:6e:71:1f:95:3e:5c:20:b8:52:7c:3c:d0:
cf:bd:3d:2d:51:62:c1:4c:76:93:23:3f:b2:b0:1e:
d4:df:3d:b5:c2:0c:10:13:56:ac:27:62:cf:cc:1b:
fb:77:20:a3:60:f8:f0:91:04:31:e6:09:b0:3c:42:
80:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:43:A7:63:30:9C:AC:F0:D3:7D:66:23:06:46:3C:10:CD:9C:FD:6B
X509v3 Authority Key Identifier:
keyid:F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:47:14:38:5b:08:5e:27:4a:22:18:d1:1e:1e:84:66:a4:85:
b4:53:23:c2:29:29:ea:2a:43:77:a8:1f:a0:95:33:ea:3d:a7:
fc:86:16:39:71:b9:4d:94:8a:14:d9:4f:eb:b0:2c:ee:aa:b9:
e2:c9:73:17:df:46:9f:00:23:f3:f5:ec:ee:5b:33:1b:f3:4f:
a7:1c:26:33:d2:65:cf:5f:7e:74:be:15:1e:f5:c7:52:45:07:
67:f1:75:2c:68:5d:2d:ef:df:31:83:f4:8a:5d:5f:92:65:4d:
18:ab:32:56:74:74:c7:10:fc:ed:47:ef:99:f7:30:f1:76:66:
20:41:a0:4f:68:33:f0:83:7f:a8:59:5d:cb:15:89:3d:df:6e:
3e:4e:15:b7:4b:c5:fd:88:87:2e:aa:67:a5:7b:b5:5f:b5:de:
e6:77:3d:f4:5d:cb:27:7e:d8:b8:71:5f:66:0f:5b:87:ae:f5:
66:ad:e5:05:62:e9:48:38:65:15:cd:0a:6d:1e:d5:10:a9:b7:
b4:b7:fc:b1:3c:94:7d:0f:83:d0:db:97:e8:85:45:33:96:28:
69:d8:c1:d6:40:b3:5d:3a:38:37:d1:a4:cb:0c:f5:19:f7:a8:
2f:06:6e:e5:6a:11:7e:76:3f:1c:ec:11:35:0f:7c:27:a5:7d:
32:fd:69:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:32 2025 by rpki-client