Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
File: 9TK715EK8VrXBk20ptO9ZKfoJ8E.mft (raw, json)
Hash identifier: 5DJq1h1FeAPBnnKWu5i51Op/6kk5jHX+0EreTA6kukw=
Subject key identifier: DB:E8:9E:6F:2C:5C:5F:6B:1F:7A:FA:C9:74:F1:60:53:EC:E9:75:39
Authority key identifier: F5:32:BB:D7:91:0A:F1:5A:D7:06:4D:B4:A6:D3:BD:64:A7:E8:27:C1
Certificate issuer: /CN=f532bbd7910af15ad7064db4a6d3bd64a7e827c1
Certificate serial: 0197B70F03B5154D36B014FB79F8AD7FD1E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
Manifest number: 043D
Signing time: Sat 28 Jun 2025 15:01:43 +0000
Manifest this update: Sat 28 Jun 2025 15:01:43 +0000
Manifest next update: Sun 29 Jun 2025 15:01:43 +0000
Files and hashes: 1: 9TK715EK8VrXBk20ptO9ZKfoJ8E.crl (hash: DbDQuO4BG8ISsswzPWqBMXJmoa/OGU9COUCviYplEso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:03:b5:15:4d:36:b0:14:fb:79:f8:ad:7f:d1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f532bbd7910af15ad7064db4a6d3bd64a7e827c1
Validity
Not Before: Jun 28 15:01:43 2025 GMT
Not After : Jun 29 15:01:43 2025 GMT
Subject: CN=dbe89e6f2c5c5f6b1f7afac974f16053ece97539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:64:7e:59:ae:1d:d9:aa:38:37:ee:a4:ef:03:
08:24:db:b1:60:5c:47:ef:4b:ce:10:0f:ec:ea:6e:
c0:11:86:7d:07:a7:22:92:d1:54:c3:3e:01:63:52:
a6:f8:68:47:6d:09:dc:74:3d:5f:ac:39:b5:dc:3b:
5f:00:84:c7:d5:8f:4e:b8:dd:06:18:14:d9:f0:84:
0b:35:eb:78:15:e3:bf:a3:20:cc:cc:6f:80:15:33:
8a:5d:c9:00:c5:8f:ec:39:63:6f:13:43:ec:35:8d:
59:14:8c:d7:1e:06:75:a2:85:6d:8c:e1:18:ab:76:
ed:a0:1e:62:fa:12:85:4c:11:db:7f:49:d5:0a:36:
b0:16:62:e8:2e:4b:19:03:0d:2d:14:c7:90:c8:1f:
3a:49:c1:be:12:fb:d0:5c:5b:91:a9:01:8b:5e:96:
94:0c:43:2d:b3:1f:b2:a9:98:85:ed:96:ce:fb:a6:
9a:89:97:de:84:54:05:4f:33:7e:ce:8d:29:56:df:
2a:93:67:ca:28:6d:9e:5b:19:bf:5e:42:9a:6b:67:
58:c4:1e:3a:0a:be:27:70:eb:fa:bb:38:89:03:c0:
3d:c0:e7:05:be:75:2b:4a:99:ad:82:26:04:7e:9a:
e5:ff:d1:a2:6e:14:ba:d4:36:bd:64:e5:3d:84:09:
28:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E8:9E:6F:2C:5C:5F:6B:1F:7A:FA:C9:74:F1:60:53:EC:E9:75:39
X509v3 Authority Key Identifier:
keyid:F5:32:BB:D7:91:0A:F1:5A:D7:06:4D:B4:A6:D3:BD:64:A7:E8:27:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ce:8b:51:4d:49:8b:a5:6a:aa:5c:cc:5d:10:75:2c:b9:c4:
6a:5b:47:73:d9:b2:17:d0:e6:3b:f4:0e:70:aa:9c:6c:5b:ad:
80:4e:ed:c3:df:f4:7f:94:cf:8f:9e:f1:06:42:ff:c7:37:b6:
31:49:93:de:65:f0:13:15:16:4a:4c:78:c9:bd:85:5c:ff:90:
a3:43:0b:a1:13:2a:37:2f:bb:8e:55:13:ca:3e:d5:6d:29:d9:
40:65:3d:48:d6:84:6f:11:ef:06:bf:07:5f:b8:e1:16:92:5f:
46:67:80:ac:ab:94:68:b8:f7:67:78:07:27:e1:c7:e8:c0:f9:
c0:f2:88:41:0a:7d:af:23:b8:ee:68:8e:9f:9f:00:67:01:95:
0b:2f:2f:39:90:dd:52:86:41:d2:7f:0c:c3:cc:79:8a:90:12:
b9:e6:7e:1b:d3:95:37:db:3d:40:7a:0f:91:53:6b:97:cf:00:
3c:10:bb:5c:c3:a8:e1:2c:7b:b8:4a:b4:d4:9a:e0:45:06:78:
38:ec:25:6e:60:b0:b2:96:13:51:7e:70:a9:34:e5:cc:72:4b:
45:ed:2d:49:94:82:78:d7:21:b8:ea:5d:1c:00:b3:50:4c:72:
7a:87:e7:fa:d5:6b:9b:57:5b:7d:2c:b4:5c:36:15:a6:85:0d:
8d:dd:3b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:54 2025 by rpki-client