Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
File: 9j_pwTQEHOvaVoufkI4q7zirf3U.mft (raw, json)
Hash identifier: ZSUKKBI3dUEnHCtFVAPufL4vnNWGul5V1xW2lfZse1A=
Subject key identifier: 1A:2A:7F:F0:C3:50:42:12:07:A4:21:EB:D0:71:85:37:73:78:F9:EF
Authority key identifier: F6:3F:E9:C1:34:04:1C:EB:DA:56:8B:9F:90:8E:2A:EF:38:AB:7F:75
Certificate issuer: /CN=f63fe9c134041cebda568b9f908e2aef38ab7f75
Certificate serial: 0198477758DFCE0FE4C587F648E426D41094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
Manifest number: 0C54
Signing time: Sat 26 Jul 2025 16:01:00 +0000
Manifest this update: Sat 26 Jul 2025 16:01:00 +0000
Manifest next update: Sun 27 Jul 2025 16:01:00 +0000
Files and hashes: 1: 9j_pwTQEHOvaVoufkI4q7zirf3U.crl (hash: h0gR79ayTsjq7kb1oW24l5trPcfhRgCHObT6gL5aSy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:58:df:ce:0f:e4:c5:87:f6:48:e4:26:d4:10:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f63fe9c134041cebda568b9f908e2aef38ab7f75
Validity
Not Before: Jul 26 16:01:00 2025 GMT
Not After : Jul 27 16:01:00 2025 GMT
Subject: CN=1a2a7ff0c350421207a421ebd07185377378f9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:0d:ba:a0:33:56:64:3e:4e:3f:99:9c:c8:
2a:bf:17:30:3c:c3:19:49:43:8d:16:91:1c:b4:89:
26:3c:0c:83:68:a8:0e:ca:ce:26:0c:90:75:5b:31:
ee:65:df:4f:8a:e1:50:15:1d:fd:2e:af:96:3f:64:
d9:e4:65:20:f7:c2:a3:55:cb:22:38:61:66:0a:af:
a6:ae:dd:4a:52:ce:34:26:d2:a4:cb:23:bd:34:50:
19:13:7f:28:24:f5:e6:ac:49:c6:0c:a4:68:31:36:
5b:d1:64:89:e2:1a:90:71:f3:e2:b2:f1:f7:c3:9f:
66:42:50:7e:95:4c:da:f1:46:c5:65:ed:2a:01:9c:
f8:aa:d5:6f:87:7f:85:a4:16:4f:9a:95:b7:54:f6:
27:2c:8f:c0:35:41:1b:cb:dd:9f:0a:3f:47:11:81:
2e:8a:65:29:5b:fa:16:d9:f5:97:b0:c5:35:07:0c:
f8:ca:3f:a4:c8:27:d4:31:c5:3f:1f:b7:cd:4b:e4:
a6:37:f3:49:39:22:35:04:85:94:91:06:82:78:91:
51:b2:c9:e9:c6:87:24:70:02:ca:c4:26:9a:b6:df:
13:3e:62:bc:5c:9d:29:da:bd:c5:51:58:72:0e:6a:
44:2a:6f:72:58:a4:78:ff:af:99:d9:28:89:cb:ff:
35:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2A:7F:F0:C3:50:42:12:07:A4:21:EB:D0:71:85:37:73:78:F9:EF
X509v3 Authority Key Identifier:
keyid:F6:3F:E9:C1:34:04:1C:EB:DA:56:8B:9F:90:8E:2A:EF:38:AB:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ec:23:67:32:db:63:b6:e7:30:e8:ff:49:38:d4:27:1d:e7:
25:db:e1:2b:b5:7f:fe:09:a0:6b:c4:b6:96:3b:ec:6c:a7:f2:
ba:c8:89:78:6a:57:2a:0b:95:50:b3:7d:d3:eb:13:73:c4:cd:
3b:9a:b3:23:07:f4:dc:57:38:4e:c8:30:86:ea:4f:ed:e0:e5:
b3:b2:74:3d:ef:7e:4b:66:8f:64:c2:9d:7c:1d:5d:65:0d:e2:
15:c5:4c:85:cf:e4:6a:d4:df:86:08:df:c7:2f:01:64:b3:ce:
68:24:e7:3b:84:66:73:35:5d:16:f9:79:94:60:23:70:97:fe:
87:7f:ed:74:e0:4b:cc:37:09:8a:c4:bf:77:78:49:c0:2f:a0:
d1:b2:bf:ee:d4:ba:74:98:47:da:d0:78:da:f5:15:de:8b:ba:
80:ef:29:38:41:30:34:e7:42:0e:34:78:c3:46:63:56:85:df:
0c:64:11:29:84:23:4e:24:c5:1c:85:a7:24:94:44:90:7d:bd:
cf:b5:81:86:d1:07:6b:83:ba:b8:74:2c:7e:ca:17:6d:1e:3a:
0b:e6:8f:35:40:16:9b:37:a9:02:72:c7:98:e5:43:10:73:f8:
b8:4a:5c:e8:5b:7c:05:86:fd:43:2c:32:44:52:db:32:ea:a3:
4c:82:20:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:26:31 2025 by rpki-client