Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
File: 9qiFSCQ7bikKBtKaKzcQS3et5vw.mft (raw, json)
Hash identifier: quYVsyOErA4oxpqiAtGaReC+55FmEF2MHRmXg2vq4ZQ=
Subject key identifier: D9:1B:60:D0:4C:8D:C0:02:AD:36:49:BD:B2:61:10:9B:07:0B:BD:8B
Authority key identifier: F6:A8:85:48:24:3B:6E:29:0A:06:D2:9A:2B:37:10:4B:77:AD:E6:FC
Certificate issuer: /CN=f6a88548243b6e290a06d29a2b37104b77ade6fc
Certificate serial: 0197B6A0DFF2E49F86432E58577F97F6A3D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qiFSCQ7bikKBtKaKzcQS3et5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
Manifest number: D8
Signing time: Sat 28 Jun 2025 13:01:25 +0000
Manifest this update: Sat 28 Jun 2025 13:01:25 +0000
Manifest next update: Sun 29 Jun 2025 13:01:25 +0000
Files and hashes: 1: 9qiFSCQ7bikKBtKaKzcQS3et5vw.crl (hash: UzlUNAu3quhc6bg5Qfjy7lei92irF5UbYKxhQnsw6Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qiFSCQ7bikKBtKaKzcQS3et5vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:df:f2:e4:9f:86:43:2e:58:57:7f:97:f6:a3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a88548243b6e290a06d29a2b37104b77ade6fc
Validity
Not Before: Jun 28 13:01:25 2025 GMT
Not After : Jun 29 13:01:25 2025 GMT
Subject: CN=d91b60d04c8dc002ad3649bdb261109b070bbd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:45:98:ef:57:ce:4a:9c:53:8f:41:06:1a:
19:d4:56:8c:63:c7:ac:d3:fb:8a:74:58:81:10:62:
a0:18:dd:c0:b6:ee:40:56:bf:0b:a9:87:62:8a:07:
30:51:ef:bd:25:fd:b3:1f:b0:a1:b1:ae:c0:a2:3c:
46:85:1a:91:8d:98:cd:e7:cb:74:26:c9:ea:10:88:
7f:ea:a4:d3:1a:a9:c7:fc:ef:5d:d8:7f:0e:1d:db:
3e:53:b6:6f:57:ae:0b:63:02:96:5a:39:36:0b:bf:
0e:2e:76:c0:d6:25:75:67:dc:e2:16:62:e3:9a:3c:
50:e0:03:53:52:dc:c1:01:e1:c3:6d:77:0f:de:8a:
06:42:a1:31:bc:aa:d9:78:47:c0:1f:7f:c4:be:ad:
c6:09:ca:f4:21:dc:85:dc:9b:da:79:32:a6:58:7b:
71:aa:69:3f:ea:cf:15:20:3d:a4:27:69:8e:1a:fa:
73:2e:36:68:2a:13:c2:e3:a1:2a:c8:44:b5:0f:4c:
08:12:e8:06:0a:4d:a9:1d:a7:1a:74:12:d1:08:f8:
00:ce:d9:4d:62:16:f2:c0:02:e2:fa:25:fe:54:f4:
05:e7:63:93:24:34:fc:a3:28:52:a0:9e:34:9e:63:
ae:be:0f:b5:73:67:7d:3a:3b:3b:6e:5e:cf:72:5d:
1d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1B:60:D0:4C:8D:C0:02:AD:36:49:BD:B2:61:10:9B:07:0B:BD:8B
X509v3 Authority Key Identifier:
keyid:F6:A8:85:48:24:3B:6E:29:0A:06:D2:9A:2B:37:10:4B:77:AD:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qiFSCQ7bikKBtKaKzcQS3et5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d9:fc:57:d8:f2:a2:ab:4b:09:e2:eb:f1:93:c7:e8:14:cb:
b5:ec:7f:95:95:10:33:04:86:21:6e:a4:f3:df:64:b9:24:a0:
9d:21:15:57:03:22:6f:2c:82:45:af:12:97:6a:a5:0b:45:e0:
0a:59:54:5b:14:a3:8a:b8:85:ce:1b:cd:d9:2b:0a:e3:85:0e:
9c:39:e1:f1:10:8f:bd:2e:be:fc:38:45:1d:48:8f:a2:b4:f1:
61:d0:62:ff:6b:7f:22:f9:f8:ea:d1:13:73:67:a1:af:46:7c:
53:0e:83:7e:fe:81:53:3e:e0:2e:7a:26:fc:93:27:1d:66:7a:
aa:ef:16:19:27:6e:3f:37:9b:bc:5f:de:11:97:c8:16:3a:33:
6e:a2:42:fd:16:ed:a6:40:db:7d:8d:56:cc:3e:9b:22:75:20:
32:d4:a7:a6:96:aa:46:7d:0b:11:7c:6b:6c:98:cb:10:32:5b:
37:02:b2:c8:81:56:3c:f6:a6:6d:b1:30:da:48:1b:6f:75:97:
52:90:7a:70:af:17:d3:63:b8:1b:4d:e4:9e:49:5d:58:4b:52:
e0:80:7a:97:15:50:09:ef:a2:5f:b7:52:aa:26:7d:87:24:34:
b4:0d:d3:b2:0e:c9:82:41:b2:7d:7c:67:07:19:77:45:db:c4:
29:3e:76:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:20 2025 by rpki-client