Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
File: iD9pgz7Edx87C85PAJNleTVG9qg.mft (raw, json)
Hash identifier: BxH21ml2nnSifu7goZqDC+F8yOMSHqr45xs6OnDRc94=
Subject key identifier: 09:70:28:3D:EB:3C:4E:EF:85:8F:B3:F5:BE:A6:6A:C4:27:5B:14:D4
Authority key identifier: 88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
Certificate issuer: /CN=883f69833ec4771f3b0bce4f009365793546f6a8
Certificate serial: 01975234AE628ED56F24699072FB6F62D23D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
Manifest number: 05BD
Signing time: Mon 09 Jun 2025 01:01:13 +0000
Manifest this update: Mon 09 Jun 2025 01:01:13 +0000
Manifest next update: Tue 10 Jun 2025 01:01:13 +0000
Files and hashes: 1: iD9pgz7Edx87C85PAJNleTVG9qg.crl (hash: 7tRWn3VWOuw2cFbwBvPSofjqCQbH/FFPiPz/wl4Z//I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:ae:62:8e:d5:6f:24:69:90:72:fb:6f:62:d2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f69833ec4771f3b0bce4f009365793546f6a8
Validity
Not Before: Jun 9 01:01:13 2025 GMT
Not After : Jun 10 01:01:13 2025 GMT
Subject: CN=0970283deb3c4eef858fb3f5bea66ac4275b14d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9e:94:9e:d6:96:1f:60:1c:4b:b6:23:4f:86:
5f:91:10:e9:82:46:f8:75:b0:54:ef:b2:7a:c0:fd:
f9:81:69:f4:37:84:e8:b6:e4:85:af:04:6e:52:22:
78:67:5c:33:e6:a0:f3:6f:0b:f1:f7:ed:75:d9:0a:
83:7c:ae:14:52:c7:59:07:6f:e5:51:ee:d8:8a:d9:
77:60:86:f6:19:b3:c8:6c:8b:b5:df:02:55:f0:1f:
80:fe:29:c4:bf:1e:64:12:d1:0e:51:f2:3a:53:6a:
9b:eb:c9:1b:3f:ba:bf:6a:e8:9f:e8:11:bc:e0:1c:
5d:5d:44:c3:86:ae:ca:9f:f9:69:85:d9:32:8e:29:
cc:5b:d3:24:1a:56:7a:f7:f7:aa:ef:ed:01:72:1c:
62:b6:e4:89:be:6f:bc:18:a9:79:67:43:12:c8:24:
b6:75:58:24:b3:4e:b2:b2:9c:5b:4f:5a:e6:e3:02:
ab:ea:a0:aa:51:3f:85:50:ca:6a:98:d5:d4:01:d7:
63:7c:8c:8b:1d:b9:4d:2e:37:bd:87:bb:0d:e4:67:
42:e6:d9:5e:a4:bf:47:bc:73:be:33:af:bd:19:0f:
21:7e:5d:4e:6a:ae:d5:ea:2b:5a:91:da:48:5a:5a:
b5:61:30:c6:c5:e5:2c:44:23:75:8c:9a:36:b0:34:
59:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:70:28:3D:EB:3C:4E:EF:85:8F:B3:F5:BE:A6:6A:C4:27:5B:14:D4
X509v3 Authority Key Identifier:
keyid:88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:35:48:10:97:bc:ae:80:d2:23:4b:34:fb:8d:3d:83:92:fd:
7f:8e:94:fe:9b:b8:f1:d9:98:93:8b:7e:c9:93:8e:3d:5a:fc:
01:cb:e5:3b:1b:6a:62:e2:08:9a:cc:3e:b9:d4:d3:5b:11:08:
23:ce:1c:cb:60:de:6b:33:b1:d2:f1:9c:b4:cc:34:6c:d5:c2:
82:c2:2d:06:9a:1e:22:92:98:3c:3b:34:c7:ff:dd:9a:b7:6d:
a0:c4:4f:13:e3:06:a5:cd:0d:37:c7:79:f7:2a:b4:0e:51:ae:
66:d0:bd:0e:43:18:81:df:44:68:a1:a1:f8:0d:fa:d7:c8:2b:
14:1f:d6:f1:70:ba:78:84:d6:27:7e:07:63:69:7d:5e:6f:df:
1b:83:b1:bb:70:f0:3b:b1:3e:85:92:3e:20:8f:c8:7b:e9:0d:
a1:7a:6c:62:ad:ee:92:0d:b5:1c:2e:68:95:ca:3b:f0:f0:54:
9b:e9:25:4c:84:a9:ba:ff:70:9f:2a:ce:5f:8e:c6:ab:31:0e:
37:00:8e:06:3b:b0:d3:b3:01:94:67:6e:d8:5c:10:58:45:31:
6c:06:11:0f:d8:1a:b9:36:e7:10:b5:99:92:c5:62:a7:24:48:
5d:1a:ac:65:8a:a2:ea:c1:c0:f4:6f:cd:d5:f2:6c:91:d0:aa:
6c:0a:32:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:41:27 2025 by rpki-client