Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
File: 1-99pi190ocbR4AmLIlGb3FgwBVo.mft (raw, json)
Hash identifier: jc5ikq0hiYu4LLSS9+Xu8m4ANEA/E7B46uk1+Jyi/fc=
Subject key identifier: B9:D0:78:DC:66:B9:27:5B:51:FD:CB:9F:2D:2B:F8:03:44:6F:CF:09
Authority key identifier: FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
Certificate issuer: /CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Certificate serial: 0197B8C59860ECC5052D06B8C7E9FED5F7CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
Manifest number: 09C7
Signing time: Sat 28 Jun 2025 23:00:46 +0000
Manifest this update: Sat 28 Jun 2025 23:00:46 +0000
Manifest next update: Sun 29 Jun 2025 23:00:46 +0000
Files and hashes: 1: 1-99pi190ocbR4AmLIlGb3FgwBVo.crl (hash: GLML9dMQr7aN3vgfzvMSrGRAfdb1TJ+AURPTULSRJ98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:98:60:ec:c5:05:2d:06:b8:c7:e9:fe:d5:f7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Validity
Not Before: Jun 28 23:00:46 2025 GMT
Not After : Jun 29 23:00:46 2025 GMT
Subject: CN=b9d078dc66b9275b51fdcb9f2d2bf803446fcf09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d6:3e:5b:40:74:91:1c:ce:ae:db:c7:ba:b8:
99:2a:6c:88:c9:71:e8:fc:b0:dc:03:11:52:30:44:
75:a9:15:f5:c4:48:98:3b:c5:98:b5:8e:df:11:10:
31:3f:95:5a:c8:7a:b5:ac:93:d2:1e:b2:31:98:23:
74:eb:3b:a9:12:9e:2e:06:79:10:98:d0:ab:ec:46:
02:fa:52:a3:d6:fa:0e:b7:8d:83:0b:dc:ed:42:92:
a0:e5:6d:97:ce:20:bd:5c:c7:bf:5f:30:d1:8d:51:
78:31:cb:38:46:88:5e:75:cc:5a:85:e1:bd:ed:2c:
cf:a2:dd:ac:09:ce:f2:a3:68:6f:8d:cb:b5:7b:f4:
72:4d:ed:78:2f:3f:e8:ae:80:48:62:b8:f3:bd:a2:
e9:bb:14:03:91:6f:d3:a6:8f:e5:70:e7:6f:34:6f:
59:d6:b2:62:cb:08:ba:18:13:f0:0e:5a:97:85:19:
ba:28:4a:9c:ac:b2:4f:41:a2:19:4c:44:06:70:70:
b7:7f:c3:a6:fa:2e:8e:41:56:fd:92:db:d7:35:bc:
f6:41:39:ce:50:b2:a1:c5:ff:c5:81:e6:22:de:37:
31:3c:fb:14:23:e0:9c:d5:cc:05:e1:8e:f6:8e:0c:
ca:c9:b0:14:f2:cf:a2:02:5a:4a:89:5b:bc:d8:17:
d6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D0:78:DC:66:B9:27:5B:51:FD:CB:9F:2D:2B:F8:03:44:6F:CF:09
X509v3 Authority Key Identifier:
keyid:FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:59:e0:5c:ab:5c:c1:58:7c:9a:81:06:c8:f7:52:69:59:bd:
ef:43:dc:1b:8f:8d:4f:58:14:c2:c3:11:2a:9e:a2:28:96:5c:
1d:28:93:bf:9a:9c:6c:6f:88:e5:b8:29:85:b8:c7:12:d8:8a:
c6:c2:06:61:db:c2:9c:99:44:ae:d6:e3:40:59:37:c7:3a:0d:
0e:6a:05:07:aa:ad:84:79:48:5d:38:76:c0:a1:7a:0d:e6:e3:
e2:d3:93:f9:1e:c7:e7:2b:1a:d8:26:80:2c:c4:0d:c8:a0:93:
21:73:a6:c0:36:3d:86:9e:9b:4d:7a:cb:f9:62:65:81:80:9d:
bf:e3:29:fb:ab:19:cd:65:52:a9:1b:55:68:32:cb:db:86:10:
38:7c:69:d8:ac:4a:91:2a:d4:9a:d9:5f:3e:8b:59:dd:e0:cb:
e3:43:68:41:dd:fe:ba:83:df:fa:0c:b1:2f:5f:6b:44:49:c5:
11:c9:a8:99:eb:b3:30:ea:d1:e4:16:ac:6e:1c:a2:d7:c2:28:
de:1f:c5:84:0a:f4:8a:de:56:6b:7c:f3:5a:b3:9c:b2:46:ed:
c6:df:d0:86:90:03:5b:b0:c8:98:e8:07:04:c1:82:cd:ae:71:
e6:0b:a5:de:c7:cf:5d:1d:36:b2:13:2c:ae:0e:74:60:72:a8:
cb:00:b1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:59:51 2025 by rpki-client