Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
File: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft (raw, json)
Hash identifier: ytcei5KG8memCmTi5aIeaLbOt1vXhg6gGi1cEcFGqMI=
Subject key identifier: 9E:5F:F9:80:BF:75:AF:08:73:F0:20:6D:B7:65:43:C4:38:16:AB:16
Authority key identifier: 9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
Certificate issuer: /CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Certificate serial: 0197B70ECDE08228606668E3E8C9DF0CCB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
Manifest number: 1322
Signing time: Sat 28 Jun 2025 15:01:30 +0000
Manifest this update: Sat 28 Jun 2025 15:01:30 +0000
Manifest next update: Sun 29 Jun 2025 15:01:30 +0000
Files and hashes: 1: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl (hash: Q4FTgWelVHVkf8mEr/8ZYuJlnJtDWR5JzMPoZ+Oh5Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:cd:e0:82:28:60:66:68:e3:e8:c9:df:0c:cb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Validity
Not Before: Jun 28 15:01:30 2025 GMT
Not After : Jun 29 15:01:30 2025 GMT
Subject: CN=9e5ff980bf75af0873f0206db76543c43816ab16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:5e:67:f9:59:24:4e:ea:f6:a2:94:a9:5f:
98:58:20:02:66:b1:04:3e:ad:71:26:cb:cb:b1:6a:
77:ab:d4:a0:f3:88:9d:9f:d4:ce:01:5f:cd:62:82:
10:81:f4:50:83:25:e1:51:77:02:99:83:d5:ae:7f:
47:08:74:1a:e3:0b:b8:dc:e5:c6:04:cd:82:15:00:
08:d1:32:58:59:36:30:ca:85:a4:f9:81:67:5f:5b:
93:34:b6:68:a4:6d:c1:c2:a6:47:9a:6d:82:a3:de:
d6:f9:b3:ad:56:b7:7f:7c:8e:9d:54:7f:34:52:5a:
2f:f7:68:ff:3e:bd:cb:c5:06:cd:30:cc:cc:de:6e:
86:c5:77:3a:a6:70:5d:b5:be:23:85:5b:54:b1:58:
50:9a:92:e2:10:8f:d0:7f:b9:7c:10:fc:f9:26:03:
32:02:a5:92:11:f4:6a:5c:aa:e9:c2:37:77:12:2d:
fe:3d:cb:f2:c2:15:b1:62:45:77:0a:b3:06:e4:d2:
f3:a9:4d:fb:7a:6e:a5:79:43:65:8f:74:7a:be:4e:
95:69:5b:7d:09:99:c8:6d:2c:c3:4d:05:11:05:47:
3a:1d:8c:47:18:33:83:61:4d:23:a0:a5:ad:7e:9f:
d3:22:1b:5c:2c:49:90:dc:90:ed:c0:ef:7f:1d:a5:
23:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5F:F9:80:BF:75:AF:08:73:F0:20:6D:B7:65:43:C4:38:16:AB:16
X509v3 Authority Key Identifier:
keyid:9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d4:b6:98:fd:19:5c:a2:47:a1:bd:9d:04:b1:74:eb:56:cf:
1a:4e:6e:25:46:cb:74:20:d7:d3:dd:b5:d9:b6:57:71:be:64:
60:d3:8d:f2:f7:6d:0c:ab:1d:cb:55:a3:99:09:3e:d9:90:2d:
b5:45:a7:41:6e:e1:6b:97:af:a3:3d:35:e8:23:f1:81:76:8c:
39:b5:99:1c:10:40:39:66:79:a7:14:e9:96:e9:11:8a:52:cf:
46:ba:c0:60:81:60:0c:21:09:c3:60:30:eb:8b:f5:12:d3:62:
5b:7a:f8:21:3c:06:af:00:cb:52:9b:3c:25:f9:26:65:ff:e0:
85:bf:a7:29:34:d9:c5:3a:3a:52:2c:25:b2:f1:0d:eb:5e:aa:
4d:fa:4d:d4:0b:40:6a:e2:91:38:6c:c6:f7:2c:89:76:c9:eb:
64:4b:d2:e3:a0:0c:cc:af:a6:5b:f4:de:c1:55:b7:10:b0:c8:
96:95:0b:e4:a6:ca:bc:d7:2f:ea:54:7e:30:c8:d3:f3:46:e7:
d7:29:af:e1:30:8d:6c:b1:06:8d:72:b4:0d:e6:36:1d:bd:60:
c8:69:bc:b0:f1:64:84:8f:9b:c1:87:6c:51:6e:86:7a:6f:b7:
6a:86:70:9a:d9:a6:18:50:fb:f3:60:75:ba:84:b1:b2:4a:8b:
d4:d7:a2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:31 2025 by rpki-client