Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
File: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft (raw, json)
Hash identifier: jH6ylLh6xAecjQGRVSbIBxQQiQR3cVFXPgXId6ePwfg=
Subject key identifier: 1A:A7:52:9C:70:C8:3A:6F:B4:39:09:59:12:C4:61:94:D5:35:A5:BE
Authority key identifier: 08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
Certificate issuer: /CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Certificate serial: 0197B5FC83452A2C2D5E3945247F28750FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 10:01:54 +0000
Manifest this update: Sat 28 Jun 2025 10:01:54 +0000
Manifest next update: Sun 29 Jun 2025 10:01:54 +0000
Files and hashes: 1: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl (hash: Ij8C6Hgi+iDawMhTa44ogyrJ7yR26m98Hkhb9rkv2bA=)
2: QBvaKUProLFwUadr8JLWlBh2UrE.roa (hash: xpxsGWmbgKM4U5yVDwdEgOHu1jns29KEhnZ49U4Y2OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:83:45:2a:2c:2d:5e:39:45:24:7f:28:75:0f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Validity
Not Before: Jun 28 10:01:54 2025 GMT
Not After : Jun 29 10:01:54 2025 GMT
Subject: CN=1aa7529c70c83a6fb439095912c46194d535a5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:04:f8:2d:a1:29:09:0c:e7:bd:d5:33:85:73:
72:42:94:74:b6:3c:22:c4:ba:14:a8:12:35:f5:03:
2f:2f:38:e7:80:98:cb:fe:97:92:25:83:2d:07:4c:
5a:ee:81:6a:c1:d1:51:b6:43:77:ef:93:d8:ae:7f:
9f:be:77:eb:4e:00:b9:ad:e1:1d:0c:8f:e8:88:cb:
90:2f:99:c7:8b:fd:eb:f4:15:d6:52:7f:53:9e:7b:
17:35:67:e8:16:d4:f7:3b:7c:69:3b:b4:4b:6d:9d:
62:87:41:fe:ae:4d:33:21:e6:1a:79:46:8c:02:81:
b4:cf:c0:a0:a4:93:54:5d:06:84:40:48:42:2d:d6:
40:c4:bc:a7:3f:e3:08:a3:e6:92:db:0b:e9:05:1a:
ee:e6:de:dc:94:6c:8f:49:ad:c7:53:87:fa:89:20:
52:cc:f9:eb:45:a0:ff:db:11:98:dc:19:d5:77:d9:
fa:23:83:dd:18:5d:9c:a5:22:2f:73:df:ee:2c:83:
4f:2d:b9:ee:6f:27:7e:8f:58:07:8b:46:a8:2a:1e:
9a:ae:2d:ab:7a:98:b3:5b:af:9d:5f:3e:c5:7c:f0:
0b:64:e1:bd:63:8c:1f:fb:ff:64:b8:39:fc:9a:0f:
f7:aa:d4:ae:49:1d:c1:51:97:ed:43:a5:56:ab:0d:
29:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A7:52:9C:70:C8:3A:6F:B4:39:09:59:12:C4:61:94:D5:35:A5:BE
X509v3 Authority Key Identifier:
keyid:08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c3:15:bd:e8:a2:43:bc:df:f1:3e:80:c0:f5:f0:f1:f1:c0:
c0:87:48:01:a8:53:da:19:ac:18:d7:53:e8:30:ca:66:bc:80:
b9:41:89:fe:5b:cb:d8:6e:f1:0a:03:6b:97:8a:0a:5e:c7:d8:
73:82:74:7c:0c:63:10:28:97:69:ae:54:84:45:44:3e:1a:c4:
4a:51:f7:9c:1c:a5:c4:4c:6f:40:e5:89:17:8b:af:f2:c3:e2:
bf:81:65:a1:d3:9e:04:1e:6f:61:d1:d7:2d:ac:d3:38:d0:9a:
dc:30:eb:c8:57:d3:53:dd:5a:b5:6a:d3:2d:83:ab:38:cf:d8:
a8:3f:8a:8d:1b:ae:01:74:5c:02:15:2d:1f:63:46:67:83:eb:
32:ea:35:98:96:6d:f8:69:23:c2:df:f0:72:3e:c3:8f:25:0e:
98:a4:b1:c8:3d:d8:7a:12:0f:5d:b4:55:ba:cb:7c:51:c7:83:
47:65:41:75:1f:c0:dd:4c:ea:20:a8:85:fe:69:01:8e:18:1e:
40:a2:70:a3:79:f6:d6:0c:1d:62:9e:e4:dd:c8:29:c8:f9:4b:
d0:2a:ab:08:7e:51:01:b7:ef:2d:54:fe:af:d4:4b:bd:5a:05:
46:7c:81:c9:c4:4f:25:c2:02:cc:6a:36:d0:62:54:39:ec:1c:
02:39:1e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:45 2025 by rpki-client