Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
File: 249r9UNKqjLT5fETsAxbsUAvZ_Y.mft (raw, json)
Hash identifier: idF4zUdgDcnzzJPZTvhAQ86SpepSZYJ0sV7pLJOquGk=
Subject key identifier: 08:80:27:30:E7:96:A4:4C:00:C4:8E:63:1F:6E:43:6E:BD:29:FD:DC
Authority key identifier: DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
Certificate issuer: /CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Certificate serial: 01974DB28BFFD60C6CB2391A325C6D6C86DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
Manifest number: 0673
Signing time: Sun 08 Jun 2025 04:00:36 +0000
Manifest this update: Sun 08 Jun 2025 04:00:36 +0000
Manifest next update: Mon 09 Jun 2025 04:00:36 +0000
Files and hashes: 1: 249r9UNKqjLT5fETsAxbsUAvZ_Y.crl (hash: B3XzKUpOI0/+vGWlNt0nI4Yx0Zs68OYpFE9qqYcwLvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:8b:ff:d6:0c:6c:b2:39:1a:32:5c:6d:6c:86:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Validity
Not Before: Jun 8 04:00:36 2025 GMT
Not After : Jun 9 04:00:36 2025 GMT
Subject: CN=08802730e796a44c00c48e631f6e436ebd29fddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:e2:b6:f0:2e:af:3a:aa:9a:96:3d:f8:aa:
18:73:b8:b2:c9:99:fe:b0:21:d9:53:8e:7c:0f:34:
d6:f1:f4:2b:1d:8c:4e:30:d1:c0:b3:60:ac:c2:53:
15:00:36:5e:d1:fe:96:45:30:16:8b:86:df:c6:84:
39:e6:f0:70:7a:d8:06:e8:56:04:83:c6:fc:46:bf:
be:1e:4a:18:8f:f0:e7:cd:0b:6b:07:90:1a:d4:e7:
7b:dc:84:93:9b:86:9c:51:45:f5:e4:b6:2a:07:05:
a9:10:91:bf:52:b8:8f:f3:cd:fd:00:4f:0b:93:db:
e8:fe:3a:26:04:aa:3e:1a:ad:89:59:f4:b9:39:ee:
08:e6:f0:cd:65:dc:bc:a3:96:01:b2:26:32:48:e3:
01:96:86:fb:67:c3:fb:78:94:c8:a1:ab:52:7c:e4:
65:bd:61:03:95:7e:f9:39:c2:64:ad:39:7f:78:0f:
38:36:a7:53:3c:72:79:eb:a3:95:42:a2:4f:3b:ad:
5f:b6:f5:0b:8f:e5:a0:af:5d:c7:5b:65:c7:7b:e3:
79:4d:a2:a1:46:9a:86:4c:99:d8:5d:45:de:fe:65:
30:9e:66:47:12:eb:74:91:d5:79:09:33:c0:64:e3:
31:2c:e2:c4:41:e8:6f:51:d4:8d:d3:a0:32:06:3a:
d0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:80:27:30:E7:96:A4:4C:00:C4:8E:63:1F:6E:43:6E:BD:29:FD:DC
X509v3 Authority Key Identifier:
keyid:DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7a:50:dd:b9:01:4f:30:d0:e7:cb:0d:50:ed:82:df:80:a4:
db:58:08:83:26:19:61:cb:8f:4f:d6:6d:6c:07:e1:5e:39:b0:
df:60:12:98:aa:1b:a5:80:84:30:f8:a2:2b:e2:ef:a8:0c:c0:
a0:ee:4a:e6:00:6e:d4:51:a5:ef:4c:f6:b2:db:de:92:3d:35:
fb:d0:87:e4:6e:ea:7e:35:9e:70:ba:33:83:23:8b:59:e8:69:
40:57:a4:49:fd:50:2e:77:84:88:8e:aa:28:cf:88:d7:b7:79:
9a:60:8f:c5:2f:9e:15:91:e1:fa:ba:92:4e:b9:11:c0:0f:95:
9e:00:91:11:1a:a7:af:f3:6e:2e:17:65:88:5b:6b:32:c3:0b:
a6:fa:40:21:f5:15:77:60:0f:b7:dd:8c:f4:9e:b7:c5:74:d2:
27:54:3f:35:b4:95:8a:4c:05:42:b3:82:a7:4d:d2:1e:b0:5b:
ad:69:19:d9:17:81:b4:43:7b:c1:f1:f8:d8:28:31:86:bd:25:
0e:3d:42:b4:23:3d:58:97:ee:7c:d3:04:1d:22:dd:be:77:71:
86:7d:76:3a:40:78:f4:b8:0c:75:4b:b1:fe:9d:20:56:82:50:
c7:bd:f0:59:65:e6:59:c1:85:11:55:2c:1d:84:97:85:59:86:
e1:de:6f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:22:27 2025 by rpki-client