Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
File: h3YEKrfwcZWY6znlPvkuCsz6T6M.mft (raw, json)
Hash identifier: D30H0AdJ5FaaZOoyPj+uGPxFPfNby8EC8a0v+L/tT6o=
Subject key identifier: 01:E1:1F:96:F6:11:40:3C:DD:49:F6:54:43:69:7A:49:8C:90:30:86
Authority key identifier: 87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3
Certificate issuer: /CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3
Certificate serial: 0197B6A13CE3FBB96F694C788E808A70991E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
Manifest number: 09B6
Signing time: Sat 28 Jun 2025 13:01:49 +0000
Manifest this update: Sat 28 Jun 2025 13:01:49 +0000
Manifest next update: Sun 29 Jun 2025 13:01:49 +0000
Files and hashes: 1: h3YEKrfwcZWY6znlPvkuCsz6T6M.crl (hash: LPN4RdHqbJMpKely2OkypEfxKcGz83dfSkZfiFDCQgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:3c:e3:fb:b9:6f:69:4c:78:8e:80:8a:70:99:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3
Validity
Not Before: Jun 28 13:01:49 2025 GMT
Not After : Jun 29 13:01:49 2025 GMT
Subject: CN=01e11f96f611403cdd49f65443697a498c903086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:df:49:1f:1a:4f:91:09:b9:54:de:c7:d0:56:
4c:82:90:97:a7:49:32:60:03:f8:c8:4b:75:28:62:
b8:5b:d3:ec:84:87:39:4e:6f:2c:05:eb:d5:c4:ed:
79:15:d1:b5:21:e4:99:d3:0a:ea:10:71:5e:31:52:
ae:a0:3c:68:5b:23:e0:ca:95:f1:77:a7:ed:00:20:
af:9b:bb:a5:e5:bf:f8:15:67:04:88:df:51:91:42:
69:35:bb:0b:f7:7e:30:9d:c6:7e:08:6f:de:61:a3:
54:0a:d3:9f:26:c9:02:14:cd:10:53:1b:8f:b6:c6:
3a:de:85:ab:a4:cb:d4:65:b7:8f:ea:8d:b3:7e:76:
d4:d0:4d:d8:a0:71:9f:d0:78:c2:83:a0:f8:e3:28:
1c:6c:8a:c2:d9:eb:10:f0:63:4e:34:df:a7:f8:de:
e8:04:13:2f:80:87:fc:93:35:0e:5a:18:1e:6b:be:
58:bd:98:e8:12:50:c2:2e:41:22:ab:34:00:52:8d:
e5:12:c6:cc:5f:f1:16:2b:62:36:6f:27:e5:dc:38:
6b:c0:18:56:54:ee:ad:27:68:68:b8:af:3a:a4:19:
3a:9a:8f:e4:61:af:9d:0c:72:92:8a:03:3e:f3:c4:
65:3e:f5:83:3f:f0:cd:ff:d7:f3:b4:12:19:2f:14:
dc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E1:1F:96:F6:11:40:3C:DD:49:F6:54:43:69:7A:49:8C:90:30:86
X509v3 Authority Key Identifier:
keyid:87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1d:b8:90:df:e5:c6:76:5e:53:e9:c9:d5:37:a7:91:9e:85:
60:10:d3:a5:18:1d:31:06:5c:fb:a0:17:c2:f4:b1:ea:00:1a:
6e:91:89:15:96:c9:5a:6e:ab:ff:eb:ae:00:42:c8:52:fd:8a:
3c:0f:21:36:5f:b9:9d:9c:ae:96:bb:f1:cc:b2:d7:c7:41:dc:
b3:84:7d:77:5f:a7:f5:21:d2:cc:be:ec:01:30:1b:c2:a6:3f:
38:a4:cc:cd:de:a7:7f:23:61:39:5c:06:45:cb:98:32:95:ef:
02:72:f8:8d:df:61:db:e2:2b:ec:78:b6:bf:8e:c9:ff:29:ba:
b9:7f:11:58:71:95:e4:b0:7b:e7:16:d4:de:c1:e1:ee:e0:ab:
b3:41:6b:96:74:a0:ed:93:9e:72:84:c0:db:29:ab:2d:39:0c:
a8:4a:68:d4:3a:ab:df:b9:54:34:b6:96:5c:3a:7f:16:8c:46:
a1:18:68:90:ee:77:4c:25:9e:1d:58:c3:94:f0:97:20:d0:85:
68:65:7c:42:d4:7b:e0:ce:14:01:c2:57:4c:ee:dd:0b:04:bf:
bf:8e:5d:1f:d0:3e:d0:4a:3c:e2:fc:85:e5:ad:d6:f2:19:18:
6e:c0:f0:5f:2b:e1:36:e7:1d:93:ae:e0:c6:ab:e5:12:f1:67:
42:0b:cf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:49 2025 by rpki-client