Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json)
Hash identifier: 0nfRWKkVpv/mxN25Db4fwgRnzi3/QuSmdpFd7PNbODk=
Subject key identifier: B1:54:BB:64:09:EF:6D:0B:1E:EE:A8:BA:4B:F1:39:4B:D9:FB:38:39
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 0197B6A09D0936BC3CC622E34C35E8095235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
Manifest number: 061C
Signing time: Sat 28 Jun 2025 13:01:08 +0000
Manifest this update: Sat 28 Jun 2025 13:01:08 +0000
Manifest next update: Sun 29 Jun 2025 13:01:08 +0000
Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: DAdCTlYgcB69n/Ac7p+O6tCJyJAsKibWn7CqAvBQOaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:9d:09:36:bc:3c:c6:22:e3:4c:35:e8:09:52:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: Jun 28 13:01:08 2025 GMT
Not After : Jun 29 13:01:08 2025 GMT
Subject: CN=b154bb6409ef6d0b1eeea8ba4bf1394bd9fb3839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:06:7d:43:f5:e2:6a:ed:5c:66:a5:85:54:
e3:ae:ce:6d:2e:c4:aa:81:e8:d3:26:fa:4c:b3:81:
9d:a8:cf:37:99:15:92:88:4d:00:4f:93:8a:3d:cc:
fd:f6:00:4e:b1:5f:f2:bd:10:78:cb:d6:b8:91:1b:
29:89:06:ca:ad:5d:61:7e:48:e7:62:f6:83:66:0c:
18:b4:3d:0f:14:17:dd:86:ef:0b:1e:45:83:92:da:
7e:51:17:81:c8:51:99:28:f3:fc:e9:75:57:4c:86:
b9:2e:73:be:20:ab:3a:0c:86:f8:e0:10:d5:4e:21:
ca:02:30:76:92:b2:84:54:3d:f0:22:28:b6:3a:13:
cf:a8:58:23:6b:95:49:36:05:3b:5c:38:9f:e3:1e:
bc:e8:6b:02:66:36:d0:0c:33:e1:08:04:28:7e:2c:
bc:9c:64:ea:e9:3f:4a:b3:7b:22:09:fc:5c:ad:3e:
42:ec:04:33:65:6e:64:f0:2d:0a:86:8e:b4:e2:b4:
aa:20:25:99:0b:97:1c:a1:aa:15:00:66:80:40:4b:
d3:9f:f7:fc:f7:2a:61:b9:22:47:46:ed:d0:12:19:
4e:30:e1:f6:14:cb:3b:7e:b8:48:ee:78:a4:44:ae:
34:52:db:9c:eb:a0:a1:d5:c4:6a:3e:48:4c:21:04:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:54:BB:64:09:EF:6D:0B:1E:EE:A8:BA:4B:F1:39:4B:D9:FB:38:39
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:19:41:04:0d:aa:fc:fa:99:ba:c0:70:de:8e:85:68:4a:fb:
c6:87:cd:22:5d:98:84:cd:a9:f5:42:f7:8c:f8:27:e6:46:da:
6a:ba:d4:88:2e:84:46:5b:dc:f7:05:30:75:ff:8c:62:23:22:
c0:67:b0:12:2c:df:7d:13:88:eb:b3:d8:33:d0:0a:fb:8f:76:
5a:7c:44:a5:60:8f:d6:53:e3:1c:be:50:56:11:24:85:65:59:
0d:05:51:51:ff:82:f0:0e:1b:9c:b9:b6:a1:25:cf:08:2f:7c:
7e:31:ed:79:52:7e:03:e8:a5:84:e5:5c:c1:0c:31:d8:a7:44:
be:e9:fd:8f:24:59:8f:c0:7c:32:81:18:0e:16:de:3a:2d:5d:
50:3a:1a:81:5e:65:ee:1b:9b:b8:a0:10:94:72:f9:12:d2:b2:
d3:15:df:56:15:cd:5e:00:68:ba:a8:21:47:22:1b:dc:0a:07:
7d:f7:88:11:5b:07:2a:49:0b:80:83:e4:bf:0a:7e:4e:80:9c:
ba:f9:6a:ab:e5:70:5d:c8:68:67:66:2c:ed:81:1a:4c:df:93:
62:21:7c:3f:0a:c3:56:d3:4f:13:82:19:7f:e5:ca:f5:1e:55:
8a:1e:87:cd:d7:14:4a:db:d1:54:eb:f8:9d:19:9f:22:61:ca:
29:82:bf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:48 2025 by rpki-client