Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
File: m1hBsHzPY5l5mzWGobIohZI9-L8.mft (raw, json)
Hash identifier: c6SkKIYGHgWYBWhvYlDE9OAwQfjjBlF/ekM/Eeayzr8=
Subject key identifier: B6:18:46:A1:00:97:46:BA:94:CA:A6:E5:B5:F6:52:DD:8C:69:36:96
Authority key identifier: 9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF
Certificate issuer: /CN=9b5841b07ccf6399799b3586a1b22885923df8bf
Certificate serial: 01974B1FAA6904A73D977B05C3476AA5F669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
Manifest number: 11F9
Signing time: Sat 07 Jun 2025 16:00:55 +0000
Manifest this update: Sat 07 Jun 2025 16:00:55 +0000
Manifest next update: Sun 08 Jun 2025 16:00:55 +0000
Files and hashes: 1: m1hBsHzPY5l5mzWGobIohZI9-L8.crl (hash: tZtS3y+Zyjg6vq3Doy7WRF9pRjpw7tzFp40WcmQv6Kc=)
2: t1PClou-z7vfeF555qMb4l57MSc.roa (hash: 9X/H2c1jyHWtYn2BaqYb1fxAsJf2gSZ8sASmz7CE+Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:aa:69:04:a7:3d:97:7b:05:c3:47:6a:a5:f6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5841b07ccf6399799b3586a1b22885923df8bf
Validity
Not Before: Jun 7 16:00:55 2025 GMT
Not After : Jun 8 16:00:55 2025 GMT
Subject: CN=b61846a1009746ba94caa6e5b5f652dd8c693696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:90:34:42:35:16:60:99:78:eb:61:56:a3:ab:
6b:3c:6e:be:47:83:90:da:c5:b1:89:cd:17:d3:20:
1c:2f:83:72:76:2f:21:8f:ff:bd:c7:76:9a:92:51:
3f:d8:73:cd:42:26:e0:8a:8d:3a:3e:6b:1e:41:b6:
b8:b8:84:7f:48:30:df:a7:9d:42:03:60:9d:03:69:
5b:72:96:52:d1:db:17:4f:4b:ac:2d:2f:15:1f:c2:
44:ce:4b:59:00:03:ad:eb:dd:83:33:5d:7c:b8:df:
16:48:28:ac:c3:66:64:44:91:39:3e:60:60:53:fb:
56:4e:e6:09:58:a9:24:ae:98:31:5b:ac:b4:3f:4d:
8c:0c:24:a7:f5:d6:ad:4f:13:49:e1:03:cd:47:53:
ac:ab:bc:11:42:3f:7b:23:aa:db:8d:88:04:6e:fc:
3f:9d:a1:88:ce:d4:5e:81:c9:58:ed:b8:b9:45:de:
41:37:e2:b6:a9:c9:68:97:dd:e5:a4:49:66:93:66:
00:e1:99:d9:4d:06:96:bc:f5:46:ad:6d:84:43:2e:
5a:84:34:fc:b9:f9:16:8d:27:2b:1b:a1:8b:aa:16:
e0:98:0c:d6:60:d9:63:ba:e9:b2:c2:19:c7:31:b8:
63:1c:f7:62:a5:7a:e1:ef:72:41:92:bd:1a:0c:bd:
e5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:18:46:A1:00:97:46:BA:94:CA:A6:E5:B5:F6:52:DD:8C:69:36:96
X509v3 Authority Key Identifier:
keyid:9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ac:8a:6a:cc:80:78:9e:52:c9:83:f6:47:06:d8:4b:d3:47:
ed:68:3e:33:f0:b2:f6:72:eb:4b:48:91:1b:fa:20:a4:88:30:
6f:c0:dd:81:32:85:53:bd:1d:0a:7b:2c:2b:2a:19:c9:2b:c6:
51:a1:56:3e:94:b1:e3:42:4a:6a:a8:3f:e0:2e:ba:ba:90:f8:
2e:e3:41:a5:71:32:c2:26:23:82:56:c6:48:58:5c:6e:eb:d3:
fa:85:42:17:7a:08:25:be:6a:b8:32:73:86:72:ec:33:7f:68:
22:c8:4e:55:59:a7:ca:91:05:52:ee:17:ca:7c:39:e8:a8:8a:
83:38:d4:ff:fe:54:f9:5f:f2:b1:f5:89:10:37:1c:c8:b9:4b:
4d:11:93:0d:5c:c1:48:d3:26:20:ee:e9:ab:92:63:49:e0:99:
f4:4c:5c:04:69:c4:6e:f8:ef:4a:c3:58:65:3c:26:b8:86:c1:
aa:23:74:83:f4:ad:61:a6:09:bc:57:65:57:e5:f1:55:6d:2d:
37:92:06:c9:5e:fa:fa:55:e5:d9:51:45:3f:49:80:1d:4f:8d:
f3:a4:59:3f:01:ac:4b:aa:fa:19:39:81:a2:e4:a4:b1:47:9c:
17:53:e0:fd:dd:00:03:c5:a0:f5:13:c6:a4:c7:51:2d:dd:01:
43:07:7a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:33:37 2025 by rpki-client