Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
File: 9jOGnDZCtefqAii_DgspXO_MTd8.mft (raw, json)
Hash identifier: d/JqqxB04F6FzcgQT+R6dRIKvfIF7uyK1x4EUWJC6Gw=
Subject key identifier: D4:BD:56:F4:5B:F1:E6:B8:66:76:A9:CE:5E:C9:80:74:07:55:8E:3A
Authority key identifier: F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF
Certificate issuer: /CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
Certificate serial: 0197B7451B3E91497A5A2C2F5ED2DD10DD11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
Manifest number: 102B
Signing time: Sat 28 Jun 2025 16:00:48 +0000
Manifest this update: Sat 28 Jun 2025 16:00:48 +0000
Manifest next update: Sun 29 Jun 2025 16:00:48 +0000
Files and hashes: 1: 9jOGnDZCtefqAii_DgspXO_MTd8.crl (hash: OUClS4RssVevBR0MjSuRg3wskgRjIMIW7WklPgTgD9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:1b:3e:91:49:7a:5a:2c:2f:5e:d2:dd:10:dd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
Validity
Not Before: Jun 28 16:00:48 2025 GMT
Not After : Jun 29 16:00:48 2025 GMT
Subject: CN=d4bd56f45bf1e6b86676a9ce5ec9807407558e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:db:30:c0:28:db:94:fd:93:f7:05:74:af:29:
1a:83:3f:69:a2:c1:a8:e0:5f:73:91:40:59:5e:b7:
a3:6e:f5:ff:05:bb:86:e5:4e:36:ed:23:86:cf:60:
89:9d:17:49:2d:22:f7:c0:7f:16:c5:48:be:51:25:
0f:3f:97:72:a6:a4:b1:64:ad:d4:d9:8c:81:ae:f5:
bf:e2:70:52:dd:7d:22:e5:88:23:2d:aa:34:66:08:
dd:20:9e:29:9a:40:eb:63:91:09:b6:50:c2:7d:0a:
91:c1:0c:64:62:27:ea:27:cd:b9:a9:a7:d8:a0:8b:
f2:59:dc:30:7d:41:08:31:8b:a8:c4:6e:46:45:2f:
c2:48:8a:c4:b3:36:b8:16:f1:65:6e:4b:8b:7d:84:
7c:e8:42:c7:4d:69:da:4e:4d:94:c7:bf:e3:fa:d1:
42:c3:24:0f:a8:04:f5:da:c1:ce:49:aa:6a:87:73:
c7:e1:e3:bb:48:5b:a6:ff:b4:83:06:1c:35:fe:4a:
13:54:f3:72:2c:96:a8:6a:06:35:b8:ec:0d:ca:1a:
a8:a2:64:af:eb:a9:5a:ac:bb:c9:6e:ad:9e:05:e1:
22:53:c2:8e:1a:78:e9:28:ae:e4:5c:04:5b:8e:01:
42:16:fd:91:44:af:94:34:36:40:5f:ab:c1:3c:1b:
57:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BD:56:F4:5B:F1:E6:B8:66:76:A9:CE:5E:C9:80:74:07:55:8E:3A
X509v3 Authority Key Identifier:
keyid:F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:80:4a:c0:ee:82:ea:b2:49:37:8f:de:03:67:37:eb:4b:ed:
bb:82:fa:a4:c9:b4:cc:21:cd:74:cb:89:61:be:af:7a:4a:7d:
c0:4d:c8:b8:9b:73:d4:be:86:aa:d3:10:9b:36:9c:6f:dc:05:
2b:c7:ee:0f:2d:45:fd:ae:69:dd:f3:e2:15:90:f6:90:70:55:
c9:9e:c9:66:d0:40:96:b1:fb:90:31:40:e9:01:fc:fc:35:d7:
46:2c:31:30:3f:f5:eb:aa:ad:c0:cd:ce:ac:f4:f4:e5:fb:4b:
9d:3a:87:21:a8:d6:e8:f0:fd:fe:0f:c3:14:55:f0:32:d8:e8:
95:31:61:bc:4c:01:61:1b:e0:1d:f5:fa:18:9f:e9:95:5d:a1:
21:d4:67:8b:69:75:92:b0:13:4b:e5:27:f8:41:a1:da:00:c8:
08:22:62:46:de:fb:06:7d:47:a3:46:06:dd:57:5e:fe:b6:bf:
2a:d5:c4:a2:d0:11:9c:31:2b:65:50:82:c0:03:4f:76:13:db:
dd:b0:53:b1:a7:7f:a7:f8:86:16:f3:b0:13:fb:4b:d3:df:2f:
f6:0d:b3:84:5d:2f:32:cb:d8:02:a1:c3:db:7a:30:42:d2:58:
20:1a:80:c8:53:72:9f:cd:39:f8:6c:d4:13:73:b0:8e:2d:b0:
48:bd:83:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:41 2025 by rpki-client