Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
File: 9lO0wxURtUguuEJaORN51D_W1FU.mft (raw, json)
Hash identifier: /FnYMwPHL3HeShIPNMKJR3odzYZo/YHM81LtAypCE4M=
Subject key identifier: BC:A8:53:F7:30:6D:4C:FB:C7:3B:EC:44:D6:F6:1F:34:8F:F6:6B:F7
Authority key identifier: F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
Certificate issuer: /CN=f653b4c31511b5482eb8425a391379d43fd6d455
Certificate serial: 019752A24D3661D6961E67097B2A7E9581DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
Manifest number: 157E
Signing time: Mon 09 Jun 2025 03:00:57 +0000
Manifest this update: Mon 09 Jun 2025 03:00:57 +0000
Manifest next update: Tue 10 Jun 2025 03:00:57 +0000
Files and hashes: 1: 9lO0wxURtUguuEJaORN51D_W1FU.crl (hash: Ffi8EIF4IZGMYvMRVVdSG9iIQA656S9V7SgWFW659EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:4d:36:61:d6:96:1e:67:09:7b:2a:7e:95:81:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f653b4c31511b5482eb8425a391379d43fd6d455
Validity
Not Before: Jun 9 03:00:57 2025 GMT
Not After : Jun 10 03:00:57 2025 GMT
Subject: CN=bca853f7306d4cfbc73bec44d6f61f348ff66bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ca:95:11:52:fc:1b:6d:84:38:77:36:3f:df:
2a:e0:f6:3e:a7:a1:61:ff:5a:8d:cf:34:f6:10:0b:
3f:5f:84:9f:2a:67:85:c6:c5:64:44:c3:c6:c3:54:
d1:f3:27:04:b8:2e:5f:e2:ec:ab:14:2a:b8:e1:d7:
70:7f:3f:b5:4c:ab:b3:a2:26:b7:62:8c:d5:bf:08:
d5:20:99:7f:1f:02:31:eb:a3:c3:ad:f8:7a:b8:30:
95:e7:5e:ae:2a:a9:ce:0d:13:58:1e:03:cf:e0:de:
61:f0:6d:9f:9c:ae:1f:73:3c:75:6b:e8:22:d3:15:
2f:31:b4:3b:2f:09:31:a4:ae:13:24:ce:10:23:64:
ee:37:2e:c8:4d:04:0b:eb:be:2c:95:13:3b:6f:ab:
28:7b:bb:25:0a:b6:f3:e3:33:a5:40:cc:19:34:35:
7c:99:68:70:64:55:d5:db:5c:2e:7f:4f:13:a3:8a:
8e:8e:06:d6:df:1e:3a:76:ed:7c:07:2d:ff:19:34:
c1:ba:11:10:89:17:78:28:79:4d:de:43:54:f4:bb:
90:88:25:01:44:01:d8:0e:d6:25:33:b0:98:1c:28:
74:ec:a8:b1:4d:69:0a:72:97:a4:78:0a:cc:1e:74:
be:63:87:a4:9e:30:e4:34:b2:8a:71:4d:cd:2e:46:
15:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A8:53:F7:30:6D:4C:FB:C7:3B:EC:44:D6:F6:1F:34:8F:F6:6B:F7
X509v3 Authority Key Identifier:
keyid:F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ef:83:87:43:d2:7f:4d:2e:18:03:82:16:4e:62:07:40:ab:
6a:26:ae:43:91:7a:48:f4:7a:80:85:00:ac:cc:b2:45:47:d6:
a4:6f:1d:a8:95:c0:bf:fc:15:b4:cd:9a:3b:bd:20:71:94:de:
be:fc:44:85:43:e5:1a:24:cd:18:d7:bb:5f:d1:0c:23:25:ac:
ce:5b:ed:c0:37:16:6b:58:aa:80:c0:17:82:87:97:94:32:4f:
34:0e:fb:c6:34:5e:9a:b0:9c:74:d7:3a:64:61:92:55:06:4c:
3c:ef:bf:3c:8f:4f:81:a3:f3:0b:56:2e:0f:d4:36:5c:48:07:
99:00:64:18:d2:9f:47:35:4a:29:de:53:48:1f:d8:39:e7:77:
8a:66:3f:be:f6:4c:83:bf:90:6f:87:dc:99:90:77:32:41:19:
49:87:1a:9c:d6:4d:39:9f:e5:ea:01:8c:32:8a:c2:90:62:75:
b3:51:bf:a9:18:b0:24:ca:cb:c3:64:a0:d8:d4:62:be:f2:65:
bf:28:ee:b8:45:e6:0c:95:c8:2c:74:b8:09:36:a1:ab:3e:75:
d6:8a:9b:f8:8f:3b:72:7f:a3:a8:68:bf:78:9a:2e:a4:26:b4:
1f:7d:0f:15:03:fc:8a:dd:01:a5:85:ba:35:ad:0c:f3:b8:50:
9d:77:57:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:59:27 2025 by rpki-client