Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
File: a1a9UK-T9GN-LAfi7EAya8ZABSc.mft (raw, json)
Hash identifier: R3NXPUrKm4EdiIpH3HauiPmc+jfckOT4g9ShSWOLMcg=
Subject key identifier: 87:E0:DA:12:5E:9F:1F:F6:9F:62:25:FA:3E:B8:C4:34:1E:08:19:0E
Authority key identifier: 6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
Certificate issuer: /CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Certificate serial: 0197B7EAD7DC4BACCE0E5CFF514EDE7CA928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
Manifest number: 0212
Signing time: Sat 28 Jun 2025 19:01:50 +0000
Manifest this update: Sat 28 Jun 2025 19:01:50 +0000
Manifest next update: Sun 29 Jun 2025 19:01:50 +0000
Files and hashes: 1: a1a9UK-T9GN-LAfi7EAya8ZABSc.crl (hash: 4TdPjREsjtiLVTct+l9nAX44M7E2As7Vs8H8vYZC8AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:d7:dc:4b:ac:ce:0e:5c:ff:51:4e:de:7c:a9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Validity
Not Before: Jun 28 19:01:50 2025 GMT
Not After : Jun 29 19:01:50 2025 GMT
Subject: CN=87e0da125e9f1ff69f6225fa3eb8c4341e08190e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:36:1b:7d:2d:40:e6:75:93:f8:a8:07:a2:1f:
45:ab:57:07:03:41:28:86:e8:a9:e5:55:1c:13:26:
64:31:c1:59:1d:0a:56:eb:5d:9d:37:d2:95:c4:43:
3e:c1:b1:03:aa:3e:6c:c2:11:6b:3f:be:ef:10:20:
8c:a8:17:c4:18:6a:73:ad:aa:55:33:e4:60:fa:df:
a2:f4:58:6a:f6:90:5c:a2:0a:76:76:27:9e:12:5d:
81:20:0b:f5:a9:a4:42:eb:e7:77:4a:70:0f:b7:8c:
f4:76:bf:0f:e0:a0:57:fb:af:36:f5:62:3b:f7:b5:
cd:f3:13:bd:48:2c:e2:a9:a6:71:4f:7e:a6:0d:87:
b6:52:9d:c7:57:73:64:33:e6:ac:bc:7e:0c:1b:3c:
41:8b:f8:65:e9:81:f5:60:99:57:0b:3a:10:82:90:
9f:e6:e5:13:4e:38:a8:9a:c2:1d:6a:c3:bd:5f:b4:
59:f8:81:96:27:c5:05:7d:86:f6:bb:2c:d1:47:9a:
3e:88:69:8c:e2:f5:be:f9:1d:cc:a5:b0:aa:19:5b:
59:f6:57:fd:6b:33:10:8e:aa:f8:9a:6f:63:bf:f3:
87:a6:b7:15:01:c3:8c:84:b3:5f:d7:91:7a:3f:31:
d8:bc:9e:05:d1:2d:38:8d:59:29:d0:7c:17:07:39:
34:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E0:DA:12:5E:9F:1F:F6:9F:62:25:FA:3E:B8:C4:34:1E:08:19:0E
X509v3 Authority Key Identifier:
keyid:6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:53:08:de:7b:96:34:74:34:7f:ca:03:38:f5:b4:e4:ce:e4:
c5:90:8c:16:2a:4e:6f:e6:ed:e5:dc:b8:a8:48:bc:21:1e:be:
a5:ad:96:d0:aa:41:5c:43:77:8b:50:f9:23:81:31:a7:89:8c:
a2:e7:67:ea:96:99:ef:ed:e6:a6:a4:d8:c0:4f:ac:c8:ca:99:
96:3d:aa:8b:51:17:03:d3:29:b8:28:b1:63:f9:3e:78:3d:71:
ef:9d:a0:6f:a0:54:13:36:a6:a5:b1:01:4b:cd:bc:f3:1a:c6:
5e:83:1d:83:f6:16:b2:3a:2c:3b:7f:4c:c5:d4:bc:3c:5c:fe:
50:35:72:b8:f8:f3:79:ca:ec:2d:e5:59:8e:e2:f3:3d:b2:6b:
d8:b5:6f:bf:2f:01:e0:a6:0e:32:39:49:79:42:3c:0d:97:0d:
ec:41:5a:32:c6:2c:28:99:25:75:51:9a:86:cb:26:a7:b1:0e:
55:62:c2:64:9b:65:b5:94:49:6a:c0:8e:06:9b:ed:2d:f6:7e:
6b:c8:ff:aa:63:9a:e7:ad:34:98:ee:09:b0:20:a1:37:5a:a6:
15:75:1a:b6:1d:7c:51:5f:72:e3:d3:81:d9:27:99:16:4c:3c:
8e:9f:72:48:96:bc:c2:c8:e2:eb:64:fc:91:02:f3:8c:e3:9a:
12:ba:b3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:05 2025 by rpki-client