Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
File: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft (raw, json)
Hash identifier: 7CIEz84mnOeJMszWZGtLVtuV2mQhOTf2u8bLv2o7prY=
Subject key identifier: 07:AE:72:79:1B:7E:6C:0E:07:0D:85:F5:C6:D4:C9:BD:88:30:27:3E
Authority key identifier: F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
Certificate issuer: /CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Certificate serial: 0197B70EB12F9BDCDE4964C5F731034F53BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 15:01:22 +0000
Manifest this update: Sat 28 Jun 2025 15:01:22 +0000
Manifest next update: Sun 29 Jun 2025 15:01:22 +0000
Files and hashes: 1: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl (hash: 7a4Of0WXUQMSSdHRZoLee4BgEVBD5LTJW5heqG3Mi5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b1:2f:9b:dc:de:49:64:c5:f7:31:03:4f:53:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Validity
Not Before: Jun 28 15:01:22 2025 GMT
Not After : Jun 29 15:01:22 2025 GMT
Subject: CN=07ae72791b7e6c0e070d85f5c6d4c9bd8830273e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f7:4a:06:85:d0:29:71:b2:e6:c8:26:16:6f:
a4:e0:e3:6f:aa:3f:3b:a9:4f:f9:8f:25:ab:6c:07:
1d:d8:41:18:60:27:26:ec:e9:7f:c0:08:d1:7b:e6:
0c:6b:72:9a:b0:f1:e5:47:eb:93:ed:14:e9:56:46:
57:0e:d8:5c:27:f5:bf:59:fd:82:53:e9:24:67:8b:
b4:5c:e1:a8:73:cc:3a:e9:c4:52:eb:8c:50:a6:89:
01:ed:92:36:ae:f4:1c:c7:38:4e:e9:be:12:f2:8b:
40:d1:b9:19:01:e4:8a:c3:4c:97:76:cf:2c:f5:91:
b4:6a:fe:6c:84:2d:5a:4d:98:54:16:ff:33:1b:dd:
23:65:33:a8:cf:06:f2:84:76:33:f4:95:81:f1:ab:
33:7c:95:1a:74:8a:79:ba:72:dd:29:bd:84:3c:dd:
56:37:a1:fb:43:92:4d:41:2c:f3:3d:4f:5c:58:67:
e2:84:dc:f6:2e:7e:75:93:0f:4b:3a:fb:9f:ba:fe:
8a:29:a5:a3:75:1f:8a:f6:8c:1f:6d:70:12:f0:81:
46:8b:51:1a:a7:ef:77:64:e1:eb:88:f5:46:1d:a0:
a8:eb:6e:e7:3a:48:f8:2e:2a:9b:59:1a:33:ab:44:
9a:c9:a1:4d:09:26:d8:be:b5:58:de:f8:19:6d:ba:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AE:72:79:1B:7E:6C:0E:07:0D:85:F5:C6:D4:C9:BD:88:30:27:3E
X509v3 Authority Key Identifier:
keyid:F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:96:a0:f1:56:9f:4a:99:3f:73:99:52:8b:28:74:80:f7:5f:
08:d2:cd:f8:83:39:05:3b:4b:73:dd:1f:fa:65:31:5d:89:83:
b9:65:8d:79:ee:9d:b3:e5:c7:de:5d:eb:6b:64:da:ad:2a:d1:
fd:b0:ac:dc:63:14:c3:85:8a:b6:56:9c:3a:bd:21:82:ea:0e:
ba:69:fb:79:39:e3:5f:61:90:d8:7a:cf:61:e0:23:f3:f3:f2:
8f:62:1e:cb:0c:23:2a:1b:f6:9d:9c:4c:61:19:d7:3a:6d:9e:
04:e1:55:fe:92:75:e7:2a:14:a3:e4:4f:65:78:ae:79:a6:44:
06:26:30:e2:d8:79:5b:b5:0a:58:3c:de:b8:0d:34:c4:3d:92:
f0:da:3a:50:57:47:69:6c:3f:de:17:95:cd:41:ec:e8:2e:18:
1f:06:d4:d2:9c:97:64:71:db:dd:d0:13:98:b9:b6:3b:e6:db:
45:59:18:65:32:ec:51:c5:a6:e8:d5:ab:1c:3b:8a:54:46:22:
ee:b8:03:80:d8:1e:a9:85:f7:2d:e4:e1:11:6b:85:5c:d1:8c:
1f:be:65:86:0f:b7:81:be:89:3c:c1:c4:24:5f:07:48:04:0c:
13:c9:ac:17:9e:52:0f:54:e3:3c:41:6b:d3:1a:5b:8c:1a:58:
6d:64:6e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:41:33 2025 by rpki-client