Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
File: 1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft (raw, json)
Hash identifier: lEFnTk3X4OXgiC+ycoMWVL6g8tz1blymoj6b2hE/lOM=
Subject key identifier: B9:A4:B2:6C:B7:0C:83:88:E6:C3:DB:5A:79:52:70:F6:E4:AA:26:CD
Authority key identifier: F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F
Certificate issuer: /CN=f89e882276f80e6750490eef006de943dacb6e0f
Certificate serial: 0197B7457DB918DB0B500364918B02F527D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
Manifest number: 0866
Signing time: Sat 28 Jun 2025 16:01:14 +0000
Manifest this update: Sat 28 Jun 2025 16:01:14 +0000
Manifest next update: Sun 29 Jun 2025 16:01:14 +0000
Files and hashes: 1: 1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl (hash: /9QmU3J4iyBIbEzMjXtAdxzjZGrzi2wcAjK0TPuXV7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:7d:b9:18:db:0b:50:03:64:91:8b:02:f5:27:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89e882276f80e6750490eef006de943dacb6e0f
Validity
Not Before: Jun 28 16:01:14 2025 GMT
Not After : Jun 29 16:01:14 2025 GMT
Subject: CN=b9a4b26cb70c8388e6c3db5a795270f6e4aa26cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:53:d2:10:ea:1f:e4:99:82:6c:a8:ed:ca:
89:c1:f9:c8:8c:e7:9c:a1:82:27:d0:db:ba:0e:a7:
a6:09:42:5d:ca:ff:4e:5d:3b:a5:ca:a1:c6:f6:fe:
52:e4:91:db:b7:ac:f1:95:79:50:a1:2b:53:28:32:
86:8f:13:48:b3:c9:5d:1c:8c:d0:e8:61:6e:4c:37:
bf:f3:f2:d8:9a:71:6f:47:73:9a:04:82:16:16:e6:
b8:e3:09:53:1b:8d:d0:47:bd:43:14:12:9e:32:b2:
e1:1e:55:fb:0e:9f:f1:d7:2b:73:22:86:cf:9d:a8:
a1:c4:58:27:94:15:24:79:e9:0d:ee:38:a9:a9:78:
ae:55:10:92:c3:0d:50:e8:de:21:37:28:32:77:5c:
20:f3:e5:3c:55:bf:f0:f1:6f:db:e3:c3:ca:fc:3b:
62:07:d5:b0:97:46:e2:5f:6a:18:23:18:c3:b2:f0:
e9:66:91:0f:7c:90:a4:26:28:f5:0e:28:39:91:af:
ce:8c:4d:6c:64:75:45:2a:3d:fd:a0:66:3a:be:e7:
60:67:2f:66:63:f7:44:83:65:dc:2b:e5:ec:c0:58:
cd:b4:ed:ca:35:36:53:4f:a9:af:9a:d4:64:f1:cd:
29:81:c3:e1:aa:72:20:a9:60:4a:e3:3c:be:17:45:
c3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A4:B2:6C:B7:0C:83:88:E6:C3:DB:5A:79:52:70:F6:E4:AA:26:CD
X509v3 Authority Key Identifier:
keyid:F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1d:c3:62:f1:eb:05:0e:cd:19:2b:e1:34:e4:06:3b:d0:87:
ad:31:92:15:4c:0f:69:b4:b0:e1:11:af:27:19:fb:b0:2e:4a:
13:cf:c7:85:de:fe:89:5b:05:2e:fd:03:54:dc:20:9e:04:c1:
97:3a:28:f5:3f:95:3a:d1:f0:c1:09:9e:b2:cf:aa:ad:15:be:
34:da:17:7d:b5:8a:a2:28:68:f0:c2:d5:7c:32:7b:3a:f4:1b:
e2:24:41:b1:b1:f0:dd:79:0d:dd:d5:87:93:ee:71:0b:30:ee:
19:8f:4c:99:b1:bc:46:43:71:33:22:c9:7d:38:e7:f1:15:9c:
e6:9c:64:d4:94:9b:79:61:12:2c:76:51:55:11:7e:0f:c5:da:
c5:bf:3c:8c:8c:47:2c:dd:1b:c8:c7:a3:48:7f:a6:ee:e8:87:
1e:0f:39:3b:4f:dd:b9:7f:b6:6c:10:ca:9a:b3:98:7e:04:19:
73:d8:ae:ad:db:f8:c3:9a:63:8d:e8:7f:2c:1f:ac:d6:56:e8:
f8:08:6a:dd:73:6f:b4:91:ec:8c:07:9c:5c:2d:c8:cd:2f:67:
2f:b7:aa:b6:94:bd:08:0e:e6:50:27:1b:56:32:86:a3:7f:93:
d9:66:db:70:12:61:1f:70:4b:43:05:55:9d:2b:84:e0:5c:9f:
cd:a2:63:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:34 2025 by rpki-client