Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
File: 9g8GwTqb9lKcSmvQ3uBVggVgz78.mft (raw, json)
Hash identifier: 6Vd4IRyjM8DUswkReQ+FQysMbErys9Qu00jrfMr+Dpk=
Subject key identifier: BF:AF:9E:6C:AA:F9:B1:D3:00:CE:74:00:1E:46:5F:CB:5E:B1:D9:7F
Authority key identifier: F6:0F:06:C1:3A:9B:F6:52:9C:4A:6B:D0:DE:E0:55:82:05:60:CF:BF
Certificate issuer: /CN=f60f06c13a9bf6529c4a6bd0dee055820560cfbf
Certificate serial: 0197B88F3465C616D38B5AAAC72A1A3FBB94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
Manifest number: 8F
Signing time: Sat 28 Jun 2025 22:01:22 +0000
Manifest this update: Sat 28 Jun 2025 22:01:22 +0000
Manifest next update: Sun 29 Jun 2025 22:01:22 +0000
Files and hashes: 1: 9g8GwTqb9lKcSmvQ3uBVggVgz78.crl (hash: dkvrjDvRhlBGkIxYdXH8ytrWCQZJv27iFJsUL4/XAXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:34:65:c6:16:d3:8b:5a:aa:c7:2a:1a:3f:bb:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60f06c13a9bf6529c4a6bd0dee055820560cfbf
Validity
Not Before: Jun 28 22:01:22 2025 GMT
Not After : Jun 29 22:01:22 2025 GMT
Subject: CN=bfaf9e6caaf9b1d300ce74001e465fcb5eb1d97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:8a:bc:75:7a:1b:ec:e2:95:93:60:47:42:
e4:20:5b:dd:3b:a1:9c:28:9c:76:f6:47:c1:3f:73:
53:56:9b:54:d5:c0:fc:e4:75:05:61:3b:42:bf:7c:
0f:f4:3c:31:18:be:a2:b2:58:b3:cf:2a:68:96:aa:
90:5a:f3:53:29:bc:4c:63:6c:98:d4:55:5a:9e:41:
34:68:d5:29:bc:d9:99:f4:34:13:93:09:75:60:55:
28:f8:ff:d3:1d:38:9d:b0:9f:10:fa:d8:30:55:d8:
97:f9:5b:ce:47:79:99:b9:94:21:44:7b:5a:15:41:
3e:76:72:41:f4:90:c5:bc:29:8e:ee:1b:c0:22:b6:
d7:aa:23:2c:62:6a:e5:44:9c:1a:19:b4:7d:22:11:
d7:c7:b1:99:a6:06:e2:89:2c:07:89:dc:e7:82:c6:
0b:28:13:37:81:1f:98:17:57:bb:13:ac:4d:9a:7c:
3d:f8:17:f7:50:ff:8f:e9:74:9b:19:89:63:cb:8e:
29:bc:f6:ce:1b:9d:66:2d:cd:d3:39:31:1a:d0:ce:
e9:7a:90:ee:ee:89:25:ef:2a:99:5b:2e:14:eb:b1:
8b:25:5c:13:45:0f:a5:9f:d0:a9:eb:2a:f4:8e:44:
e5:96:3c:bd:c4:0a:e7:01:dc:64:a9:aa:66:05:74:
64:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AF:9E:6C:AA:F9:B1:D3:00:CE:74:00:1E:46:5F:CB:5E:B1:D9:7F
X509v3 Authority Key Identifier:
keyid:F6:0F:06:C1:3A:9B:F6:52:9C:4A:6B:D0:DE:E0:55:82:05:60:CF:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8e:c1:ff:2e:02:55:08:ba:52:02:bc:22:a2:56:7a:24:98:
72:b8:e6:99:fb:0a:23:f3:1a:3a:1f:87:bc:2c:77:9e:fd:ee:
93:41:96:1d:7c:a8:66:b5:f1:fc:4a:1a:f8:a4:48:72:c2:04:
d7:0d:bc:62:aa:80:38:69:e6:35:ed:7a:db:1b:ef:c2:6a:97:
1b:84:c4:a6:ee:2b:a6:97:6f:12:f3:ec:6a:cd:77:33:05:8c:
26:0c:50:b0:3e:d7:09:aa:0e:d9:d1:fe:21:99:55:94:d4:f2:
37:fe:4d:4a:f7:5f:35:25:59:29:04:89:2e:84:2a:83:59:b3:
31:32:97:44:8c:fc:1e:7e:cf:90:d9:c7:1d:64:37:44:a3:67:
bc:d7:86:4e:7a:66:72:f5:e3:19:da:ed:56:79:59:84:51:c9:
57:38:b5:ec:7f:53:3b:51:08:c4:2b:10:9a:58:6d:c7:50:4a:
1c:09:cc:74:68:b5:4d:98:fb:ab:82:77:ad:23:4d:da:1c:33:
18:f7:99:ba:c9:8c:d3:87:9e:9a:3a:a7:7e:ed:ca:84:85:c5:
39:78:1d:15:57:c2:e8:e2:31:72:cb:ac:b5:1b:6e:cf:35:46:
d0:b6:74:e2:a9:d6:91:fb:3d:72:9c:1e:44:89:c6:b9:e0:46:
71:c8:df:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:22 2025 by rpki-client