Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File: Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier: WIcFAss8fmk/9tRT/HpWEMBDTM955YShXj9XROIEfnk=
Subject key identifier: B9:0A:FF:E7:9F:4C:80:E7:66:45:6B:9A:8F:AD:CF:6A:12:7D:EA:C7
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer: /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial: 0197488C4E578689ED8A7E94F2B6A669530E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number: 09B9
Signing time: Sat 07 Jun 2025 04:00:44 +0000
Manifest this update: Sat 07 Jun 2025 04:00:44 +0000
Manifest next update: Sun 08 Jun 2025 04:00:44 +0000
Files and hashes: 1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: WDMMHxI9AUjgn4fktBEYh2IeeThquMMG9W+tWWFMJy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:4e:57:86:89:ed:8a:7e:94:f2:b6:a6:69:53:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Validity
Not Before: Jun 7 04:00:44 2025 GMT
Not After : Jun 8 04:00:44 2025 GMT
Subject: CN=b90affe79f4c80e766456b9a8fadcf6a127deac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:6f:2f:1a:71:8e:fe:64:a3:03:83:dc:43:
29:a7:10:5e:fc:b5:f5:97:04:52:d6:03:5e:5c:6a:
3d:75:9f:dc:91:b1:71:29:5a:be:83:9b:39:8b:90:
52:77:4a:8d:2c:f3:70:27:7d:9a:8a:48:07:73:bf:
d2:65:38:fc:4e:35:a0:90:02:3c:02:6c:25:26:0f:
f1:19:26:74:11:88:09:45:84:f2:e9:1a:0f:78:2d:
4f:21:6f:f3:2b:9d:a4:dd:d6:65:4a:a6:d5:63:67:
44:71:91:6d:ae:fc:85:5b:ed:d8:e0:03:72:ed:2b:
fa:06:6b:28:af:37:a8:c0:fa:45:07:9c:72:20:62:
02:5c:94:bb:e5:26:b3:a5:c5:f8:06:60:9e:46:81:
e9:2c:de:7f:ae:17:26:e4:82:38:5a:b0:84:b9:19:
00:12:70:59:48:48:71:e1:d8:b4:82:c3:fc:c8:a6:
be:10:cc:b9:95:f3:f0:46:e4:c9:8d:e9:4d:24:8b:
aa:7a:21:8e:96:06:ee:ca:38:9b:5b:9e:7e:48:40:
95:16:9c:a7:85:33:76:b0:81:74:21:6b:58:0f:31:
0d:80:47:ba:00:36:cb:e9:3f:ae:c3:6a:ee:ce:1a:
23:a9:b7:24:32:8d:dd:e9:93:6f:9d:91:da:46:97:
27:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0A:FF:E7:9F:4C:80:E7:66:45:6B:9A:8F:AD:CF:6A:12:7D:EA:C7
X509v3 Authority Key Identifier:
keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:23:7c:32:ae:a1:54:36:99:1f:f8:41:07:21:24:38:3a:32:
dc:3c:5a:c0:86:29:d4:51:17:21:c8:d4:67:9d:4f:b0:d6:29:
57:82:07:a3:09:44:1c:e0:f7:13:33:61:85:b4:24:eb:7a:0b:
1c:0c:03:4b:ec:d6:1e:63:20:7f:03:68:f2:72:21:54:97:02:
ac:76:8e:83:92:4d:17:e5:8f:81:23:e4:ec:06:a9:37:86:dc:
1b:a9:aa:5e:37:53:13:c5:2a:1f:05:5d:55:7b:5e:9c:3e:51:
94:3f:20:83:91:fa:e0:b5:b6:b0:19:4a:0c:78:25:88:d1:93:
f8:12:9d:14:d6:8b:5f:c8:ed:75:ff:45:05:20:47:62:d0:56:
cc:f9:09:c2:06:82:2f:dd:67:9c:81:48:8e:f3:0e:da:52:bf:
2a:cf:ba:b1:bf:85:c4:f1:93:aa:57:0d:cc:ec:9d:62:ac:72:
f9:dc:6c:72:bd:4d:11:93:90:0a:bc:bb:cb:86:c7:40:af:29:
5b:72:b9:b0:4d:66:fd:e9:b0:bb:19:06:d7:b9:22:ce:b6:ec:
71:ae:69:22:82:bd:8a:1c:5d:32:60:3f:71:04:9b:3f:0d:c1:
db:ac:d9:80:34:6c:08:5f:97:49:8d:dd:06:32:b1:9c:f5:82:
27:5b:58:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:00 2025 by rpki-client