Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
File: 9aUA85diOrHVYASDVGf8zz0KOw8.mft (raw, json)
Hash identifier: MM+hs2KEp7scFyYOcj4QfxDheZE+YFYK7D3o3zBTtmg=
Subject key identifier: 13:7E:32:DC:C8:98:3B:1A:E4:4F:3F:A5:4D:6A:4B:F2:28:1E:36:F0
Authority key identifier: F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
Certificate issuer: /CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Certificate serial: 01974A7AC601B6A29D558517984CC519C1E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
Manifest number: 0C13
Signing time: Sat 07 Jun 2025 13:00:49 +0000
Manifest this update: Sat 07 Jun 2025 13:00:49 +0000
Manifest next update: Sun 08 Jun 2025 13:00:49 +0000
Files and hashes: 1: 9aUA85diOrHVYASDVGf8zz0KOw8.crl (hash: XjktwadQvScksbuFrE8s/pdGfGJXlBFE0F5hSUm/PH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:c6:01:b6:a2:9d:55:85:17:98:4c:c5:19:c1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Validity
Not Before: Jun 7 13:00:49 2025 GMT
Not After : Jun 8 13:00:49 2025 GMT
Subject: CN=137e32dcc8983b1ae44f3fa54d6a4bf2281e36f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:13:c9:fd:d4:90:91:85:30:1e:aa:ed:4c:73:
42:68:58:e3:f1:9b:ae:93:4a:20:73:35:03:66:74:
c5:ae:aa:f2:56:2b:13:8a:07:b0:8a:54:c5:98:22:
55:7d:f6:ab:55:98:5f:47:69:d0:ce:b6:94:da:c8:
e5:ad:a1:44:7b:c8:76:ad:dc:d5:8e:72:e0:8b:f8:
91:1a:3f:4c:af:95:2d:c3:75:d5:65:48:76:8b:3f:
d2:2c:5a:a2:f6:7a:44:03:54:8f:31:8d:f6:ba:d0:
8b:95:8b:13:56:1a:e4:c5:3c:14:e1:a6:af:b0:3b:
e2:82:f8:0e:7c:2d:bd:8c:6c:b9:a3:a4:6e:60:63:
c7:68:d1:30:3d:29:c4:1f:1d:2f:96:4d:51:c3:26:
24:88:de:cc:0f:96:3f:6b:09:33:ce:97:37:7e:32:
60:58:d1:55:c5:51:e3:0d:98:6d:0d:8d:d9:3c:56:
bd:f6:95:f6:5c:91:b6:18:2c:28:2a:fd:fa:7c:d6:
da:8f:12:d9:c1:e0:1d:3d:dd:d0:f0:76:b9:b8:1d:
ac:fd:03:ee:18:da:4c:13:bc:11:e0:36:c9:e5:18:
84:16:76:e8:76:85:3b:16:fc:b2:27:e7:16:66:95:
c7:72:6b:d4:a8:29:99:1f:8c:ef:d1:7b:d5:8c:09:
d3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7E:32:DC:C8:98:3B:1A:E4:4F:3F:A5:4D:6A:4B:F2:28:1E:36:F0
X509v3 Authority Key Identifier:
keyid:F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:68:9c:cc:8e:44:ae:41:df:b6:6e:65:69:7f:fe:c6:57:fc:
9c:64:ae:3a:b3:49:23:a3:82:ad:e4:f8:c5:7a:84:c6:92:e1:
58:df:ca:37:99:7b:29:86:6e:2b:9a:fb:de:53:a1:4f:58:a9:
7a:c2:ff:e9:0d:d8:2d:81:d6:d0:7c:c3:e1:c5:0b:9e:81:11:
fb:86:9e:1d:12:21:79:49:a1:b8:7f:5c:32:d7:60:db:20:47:
43:fc:35:2c:b0:63:32:b0:10:1b:45:61:29:eb:69:60:89:e2:
2e:6d:39:fc:60:26:8e:42:10:60:91:d5:dd:da:03:3e:51:a8:
36:d6:6a:e0:e8:22:93:66:4b:39:57:5a:be:f8:93:51:55:18:
0d:98:c4:a6:cc:8c:e2:72:7a:13:0f:64:19:f0:ab:a9:da:f4:
f9:37:07:2e:2d:63:06:2c:49:db:96:c4:70:95:92:3a:34:b3:
3e:74:10:2a:67:60:c0:b5:42:c6:63:c6:ba:57:eb:f5:7c:5f:
44:1e:52:65:ac:fa:87:7a:3c:d5:56:ae:fe:53:a6:20:7a:6c:
2c:06:62:e6:2a:a8:6d:c1:65:4b:5b:07:a7:ea:89:e0:7e:f2:
5d:64:27:98:06:a2:d5:13:25:90:71:f2:4a:e2:9d:dd:08:f0:
e5:5e:25:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:54:00 2025 by rpki-client