Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
File: 1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft (raw, json)
Hash identifier: K/XgieMFqPtms82lPUQc8taIsRdicO7Sz+bXmMKscPA=
Subject key identifier: 1D:87:A3:99:B9:F6:17:A4:84:B7:DB:71:23:57:99:DC:EA:52:69:E4
Authority key identifier: F9:A0:3D:24:50:DC:E5:87:D5:37:55:A9:F6:B4:A4:65:6A:28:0B:4B
Certificate issuer: /CN=f9a03d2450dce587d53755a9f6b4a4656a280b4b
Certificate serial: 0197BAEB631FBE52A0EA6A927F0960B82CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
Manifest number: 15B3
Signing time: Sun 29 Jun 2025 09:01:17 +0000
Manifest this update: Sun 29 Jun 2025 09:01:17 +0000
Manifest next update: Mon 30 Jun 2025 09:01:17 +0000
Files and hashes: 1: 1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl (hash: OJnUcWtOelOHa66nlajyqU6wp4m9bYqHhDvt8jUUn3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:63:1f:be:52:a0:ea:6a:92:7f:09:60:b8:2c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a03d2450dce587d53755a9f6b4a4656a280b4b
Validity
Not Before: Jun 29 09:01:17 2025 GMT
Not After : Jun 30 09:01:17 2025 GMT
Subject: CN=1d87a399b9f617a484b7db71235799dcea5269e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ef:00:f7:fc:a9:94:b9:85:8b:eb:b9:e1:f1:
7d:c2:cc:11:b9:08:ef:0d:55:a5:08:3a:e2:e1:3c:
dd:3d:3d:fd:4c:07:34:6a:84:70:03:c0:91:b5:de:
34:08:62:11:be:6a:08:4b:4f:18:7c:41:3f:c9:bf:
35:f1:0f:21:e3:0c:d1:b7:b4:01:e6:21:4d:1b:61:
02:4c:52:c3:91:96:e0:26:63:5e:9e:7a:14:37:b7:
79:55:e5:70:e6:a2:da:8a:48:79:40:13:8b:2f:c1:
2b:71:ea:14:39:a3:b0:7a:22:c5:1a:47:60:18:1a:
bf:94:45:ae:17:d6:58:b8:ba:57:87:dd:cf:86:82:
47:bf:f4:b7:ed:fd:8b:2e:45:0f:a2:73:70:1c:65:
98:a5:7e:eb:71:a5:1f:13:f0:74:b4:8f:0c:94:82:
74:73:40:e7:fd:99:c0:f2:01:5e:52:b2:3f:1b:62:
5d:19:1e:83:49:60:b6:ca:1e:67:86:ab:cb:17:02:
57:89:88:b7:ea:16:3f:68:a7:a7:ca:26:a6:31:d5:
f9:27:98:03:c5:f2:82:7e:0e:8e:fa:34:fa:f8:21:
2e:7f:0b:26:12:db:7a:fe:dd:58:ab:d2:84:5b:5b:
b3:8e:49:45:fc:65:1e:08:16:29:46:91:74:d4:4a:
54:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:87:A3:99:B9:F6:17:A4:84:B7:DB:71:23:57:99:DC:EA:52:69:E4
X509v3 Authority Key Identifier:
keyid:F9:A0:3D:24:50:DC:E5:87:D5:37:55:A9:F6:B4:A4:65:6A:28:0B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:00:a2:a5:6e:94:33:06:a2:31:69:94:d4:34:a0:1e:a9:52:
7e:b8:47:b1:f7:1c:aa:35:a6:66:54:76:d7:a1:fa:3c:12:b0:
d8:85:c9:b8:b6:fd:3f:43:d7:b2:f0:15:26:33:67:ba:aa:e0:
ad:1d:f1:9a:93:3d:92:dd:ee:f5:96:b6:da:56:fd:91:4f:d7:
a1:df:16:9f:9d:a1:56:82:af:bd:bc:b0:24:f5:39:75:8e:72:
66:54:6e:f0:35:93:19:81:d6:ee:ae:95:bc:10:85:22:58:b4:
89:e1:58:d0:df:51:95:90:fa:dd:c0:64:16:5d:73:4d:cb:b3:
8a:6c:f3:27:8d:09:0b:49:7d:91:13:9c:06:f0:bf:9a:8c:97:
02:59:61:4a:08:0d:99:37:f8:f1:55:fc:f5:51:10:45:f9:d5:
e6:3f:c8:e3:ee:22:bb:90:78:b9:fb:fa:ae:02:47:ac:73:90:
50:bc:7f:b6:a8:13:af:49:69:d9:89:8d:d1:6f:d2:d0:43:5c:
0e:3c:da:d4:08:23:4a:b2:a1:0a:ac:b0:03:ac:02:f7:cd:16:
86:06:d7:a5:eb:f6:21:fa:b8:0a:bc:d2:80:ec:f8:0a:82:a0:
cd:e2:0e:ee:d4:6d:10:b9:e2:67:7c:08:46:e1:3a:b5:78:a0:
e4:ea:a2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:23:02 2025 by rpki-client