Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
File: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json)
Hash identifier: ticER9SB71UUxvjxsBeYvSJG+vaGdkF03WNZwDJBSow=
Subject key identifier: 25:D8:08:51:D1:0D:4F:77:FF:0E:FB:F9:F2:09:20:10:B7:1B:A3:8C
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Certificate issuer: /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial: 01974779668C1C7652D924D68C9E44EDFB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
Manifest number: 0892
Signing time: Fri 06 Jun 2025 23:00:27 +0000
Manifest this update: Fri 06 Jun 2025 23:00:27 +0000
Manifest next update: Sat 07 Jun 2025 23:00:27 +0000
Files and hashes: 1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: /HCcUvIepXdHisTg1xM0u484pbFGo03rjKXWhlpKX9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:66:8c:1c:76:52:d9:24:d6:8c:9e:44:ed:fb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
Validity
Not Before: Jun 6 23:00:27 2025 GMT
Not After : Jun 7 23:00:27 2025 GMT
Subject: CN=25d80851d10d4f77ff0efbf9f2092010b71ba38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7b:2f:05:c9:d2:7e:7c:6b:9d:54:b2:43:5e:
03:5c:dc:a7:21:cb:35:9b:eb:9d:01:0a:a0:de:a1:
6a:ea:dd:be:37:59:48:00:b4:1a:e1:19:8e:3f:fe:
f7:da:95:71:52:14:78:33:80:3b:a2:60:98:7d:a0:
78:a9:9c:6a:a0:3f:4a:a7:08:4a:85:d5:10:54:c8:
6f:18:ad:b0:ca:5e:eb:90:9c:2b:fa:21:6b:d4:3f:
b1:1c:4a:67:15:37:ca:dd:08:7c:ce:d9:ce:77:a3:
3f:53:3b:2e:35:7e:a2:a1:02:3d:13:56:51:68:5b:
f4:5c:38:fb:19:3f:04:44:4f:83:5b:3e:c4:95:00:
f6:b9:40:30:e2:bc:91:a5:30:c6:4e:22:bc:35:f6:
38:72:55:ab:57:f7:e7:64:01:32:74:9f:02:23:84:
e4:33:9f:1b:43:f5:64:ba:60:83:6b:d7:ac:11:5c:
ac:68:da:d9:eb:45:c3:1f:ff:29:e6:a7:c0:84:9d:
a7:f9:46:9d:c3:8a:dd:4f:8b:11:cf:88:c1:9c:ea:
80:c6:f4:bd:55:eb:a8:c5:5a:5d:15:f4:47:b6:67:
99:66:4a:1c:5d:6d:48:13:35:9e:6f:ae:8d:00:cc:
3d:70:36:60:8f:76:4a:c0:fa:e8:66:1c:ce:55:03:
6e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D8:08:51:D1:0D:4F:77:FF:0E:FB:F9:F2:09:20:10:B7:1B:A3:8C
X509v3 Authority Key Identifier:
keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cc:41:cc:31:71:e8:be:6a:f4:26:3d:b4:98:75:4b:cd:4a:
c3:36:26:84:f5:e6:c5:97:fd:b1:ad:c3:2a:25:03:71:09:40:
0b:89:51:03:13:59:03:8d:81:87:c2:ab:48:c0:af:3d:30:20:
2a:ae:78:41:bf:ca:31:07:26:55:af:51:49:9c:f4:82:e1:00:
a1:b4:3e:03:62:ee:69:fc:5a:18:38:18:2b:cc:bd:50:5b:73:
36:b6:56:51:e8:3c:52:99:89:e3:1b:29:04:ab:9b:77:2e:32:
fb:8c:0e:f2:59:1b:11:e0:e9:1f:9e:d7:16:71:e4:9d:a7:96:
cb:a7:41:62:9a:02:2a:25:2e:3e:79:02:30:52:45:02:93:7c:
3d:45:ee:28:46:c9:87:bf:4f:ab:b3:a7:cf:58:3a:66:36:f5:
13:7e:54:80:ee:f0:fc:ef:fe:a5:98:fa:65:99:ee:c8:d3:99:
bf:ff:60:f6:ea:da:44:89:b6:15:a9:22:0e:be:8e:7f:6c:df:
35:0c:28:9d:21:6d:e3:9d:39:65:e3:9d:26:23:27:ef:57:89:
fe:f9:ec:c0:22:c8:5d:cb:d5:7c:18:62:ee:b3:12:fb:dd:6b:
d3:01:54:38:aa:04:af:9e:4c:58:f6:63:c2:ee:ce:6e:6b:bf:
d7:9d:f3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:12:52 2025 by rpki-client