Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
File: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft (raw, json)
Hash identifier: EE9sNEugKnoBuzVW7DYkESdZbUsv8SM9/HhuyHu+9B0=
Subject key identifier: 14:B8:19:B0:D8:1E:D9:B1:AC:E7:A1:E2:F0:41:9A:89:88:1E:10:3F
Authority key identifier: 73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
Certificate issuer: /CN=73d85f8438d73b5668e89cc692646f9487965fa9
Certificate serial: 0198530E5691903E3E070FFED4022DDDDC00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
Manifest number: 01C9
Signing time: Mon 28 Jul 2025 22:01:45 +0000
Manifest this update: Mon 28 Jul 2025 22:01:45 +0000
Manifest next update: Tue 29 Jul 2025 22:01:45 +0000
Files and hashes: 1: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl (hash: qnGPi4U2ePZpgglzrrG322fXZusPcgxOhdx7T633Itc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:56:91:90:3e:3e:07:0f:fe:d4:02:2d:dd:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d85f8438d73b5668e89cc692646f9487965fa9
Validity
Not Before: Jul 28 22:01:45 2025 GMT
Not After : Jul 29 22:01:45 2025 GMT
Subject: CN=14b819b0d81ed9b1ace7a1e2f0419a89881e103f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:ae:ad:d7:5b:5b:75:ff:6f:3e:19:3c:2a:
b8:1c:20:3e:db:ef:93:2d:e9:db:aa:0a:e8:e3:47:
47:c9:45:21:ea:ff:bb:4d:40:f4:d3:74:3c:19:ed:
36:88:ae:2c:11:5d:e1:b6:cc:a1:6d:f8:a6:97:0d:
08:38:d1:8c:92:4c:6b:f2:ff:dc:f1:6a:e9:0d:ed:
1e:f0:d7:90:f9:ed:60:8f:fa:5b:30:ac:0c:c9:c3:
70:28:8b:db:23:f0:dd:17:20:46:2f:86:55:29:04:
15:1a:73:a6:94:1f:58:7a:13:40:3f:d3:a6:c9:6e:
c6:25:18:08:a6:27:da:bd:f1:40:d6:17:1d:91:a0:
73:1b:64:17:2e:cf:0f:f4:40:50:2e:23:94:59:2c:
55:f5:5e:7e:34:3d:cf:0c:6e:56:67:84:d2:aa:28:
a2:a4:30:f9:0e:f9:a1:61:1f:0d:98:a8:c0:d1:c5:
63:21:d7:08:a2:2a:18:93:46:07:5b:9d:00:73:ea:
74:d3:ec:a8:7b:a7:63:ad:89:25:63:aa:8e:28:69:
f4:af:a9:01:a5:79:dd:97:14:e2:72:9f:de:28:4e:
b5:6a:54:eb:6d:72:5b:2b:64:cd:93:84:84:17:83:
dd:70:99:d6:a9:59:a2:4e:6e:61:e4:9e:54:4e:5a:
97:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B8:19:B0:D8:1E:D9:B1:AC:E7:A1:E2:F0:41:9A:89:88:1E:10:3F
X509v3 Authority Key Identifier:
keyid:73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9a:f1:df:b0:33:28:ca:65:d9:27:dc:21:e4:4e:f8:66:be:
72:7f:c7:6c:ab:91:72:1e:4f:80:4b:70:30:b8:de:c8:d0:b1:
9a:45:a4:02:80:56:18:41:bc:7c:6f:1a:c1:61:ca:a9:79:c2:
7d:9e:31:c0:70:45:4c:17:89:60:e8:0e:59:b1:4b:74:52:31:
b0:54:e1:ed:62:ad:24:6d:3f:04:9c:13:0c:47:8c:15:c8:23:
9b:c9:eb:9c:e6:0d:de:2e:27:7d:d4:71:b6:6c:a7:76:2f:30:
f0:cf:14:d3:45:0f:51:42:72:72:e1:bb:ee:12:45:52:8c:88:
dc:89:9f:d7:eb:68:1c:65:bc:67:b6:24:3e:9b:3d:41:ed:54:
37:ec:7e:0c:a1:4c:d5:00:8d:22:d7:96:25:83:ed:41:ce:67:
42:9e:9e:95:d1:95:b5:a8:13:7c:e9:62:c6:6d:56:dc:d4:f9:
37:b5:92:a1:6f:ed:db:c2:d2:87:12:f6:ce:57:96:b5:fc:d2:
01:62:ef:5e:76:aa:e4:b4:35:55:f6:03:49:f1:42:ba:e2:45:
e4:aa:e1:5d:80:ca:16:23:68:94:b3:ad:54:f8:ce:b6:c1:c7:
e6:81:ae:1c:59:61:78:d5:f1:f1:10:60:b6:9a:ad:8c:8a:d5:
43:1d:73:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:32:49 2025 by rpki-client