Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.mft
File: a9wGwwC61lEu6H_dJAEF8u8n1eA.mft (raw, json)
Hash identifier: GCk8NtZoHsto2zka116Wca5yuZY+H/vA4fimRvSHowM=
Subject key identifier: CE:D3:07:3A:6C:CF:F0:84:6B:E5:41:41:09:90:BB:90:A4:96:F1:63
Authority key identifier: 6B:DC:06:C3:00:BA:D6:51:2E:E8:7F:DD:24:01:05:F2:EF:27:D5:E0
Certificate issuer: /CN=6bdc06c300bad6512ee87fdd240105f2ef27d5e0
Certificate serial: 0197D39885B5450348B50939F4ACC51305D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9wGwwC61lEu6H_dJAEF8u8n1eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.mft
Manifest number: 055D
Signing time: Fri 04 Jul 2025 04:01:17 +0000
Manifest this update: Fri 04 Jul 2025 04:01:17 +0000
Manifest next update: Sat 05 Jul 2025 04:01:17 +0000
Files and hashes: 1: a9wGwwC61lEu6H_dJAEF8u8n1eA.crl (hash: hm6GJz02FEZyI2sXCPCC6d2Sn7Q+7YZHQrF2Pm8EMrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/a9wGwwC61lEu6H_dJAEF8u8n1eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d3:98:85:b5:45:03:48:b5:09:39:f4:ac:c5:13:05:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bdc06c300bad6512ee87fdd240105f2ef27d5e0
Validity
Not Before: Jul 4 04:01:17 2025 GMT
Not After : Jul 5 04:01:17 2025 GMT
Subject: CN=ced3073a6ccff0846be541410990bb90a496f163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:fc:d9:83:7b:0e:dd:6f:52:e1:e2:cc:91:
1e:ab:1c:b1:f8:be:43:16:b1:4a:68:82:40:06:e8:
8f:e1:85:f7:40:bd:28:f9:66:46:0b:54:75:34:90:
c3:ef:48:1f:30:69:c2:8c:ab:6b:a6:a4:e4:49:40:
07:87:15:d2:cd:c7:a9:4a:f0:2b:94:fb:78:88:a6:
18:7f:d4:a9:c2:6a:25:6c:19:b3:3c:45:c9:11:ae:
bf:d7:6d:e5:84:7e:6f:df:c7:82:98:7d:76:40:81:
80:77:fe:59:c8:9c:6a:10:16:6b:9a:99:cb:be:f6:
1a:59:3e:b5:e9:0a:15:be:b9:75:1c:7f:a3:d6:dd:
b8:89:bd:84:77:61:d0:88:73:f1:00:d1:ae:a6:d5:
13:63:dc:a3:e0:aa:ca:3d:57:ba:9d:b2:84:27:a5:
3b:10:d1:2a:9a:dd:aa:af:78:ec:06:23:83:68:9e:
6b:a8:ea:a5:76:87:b6:50:1f:ab:2c:e0:35:ff:83:
86:88:12:f3:4c:dc:b1:46:c2:7d:a0:9e:f7:83:4b:
0f:b4:b6:a3:82:65:b7:57:b4:42:64:4b:35:3b:95:
6b:19:05:b6:24:b8:9d:00:59:fb:e7:3e:ab:14:3d:
c6:c9:b1:f1:39:53:c1:01:93:31:df:e0:1e:da:81:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D3:07:3A:6C:CF:F0:84:6B:E5:41:41:09:90:BB:90:A4:96:F1:63
X509v3 Authority Key Identifier:
keyid:6B:DC:06:C3:00:BA:D6:51:2E:E8:7F:DD:24:01:05:F2:EF:27:D5:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9wGwwC61lEu6H_dJAEF8u8n1eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:77:c1:c0:04:7d:a3:c3:c5:e3:9f:0c:23:7c:53:8d:e7:71:
13:27:c5:94:fb:db:1a:1d:7f:27:d5:c1:ec:7f:65:38:01:bc:
7d:4b:26:a5:6f:81:36:4b:83:13:72:49:f9:f6:83:8f:d9:b7:
9c:e2:cc:c1:df:23:2a:92:70:b1:61:ee:4d:bb:14:91:9e:e8:
10:3d:3d:64:2c:1d:d9:03:2d:e3:26:72:d9:63:6c:7f:a1:99:
e2:3c:8e:95:64:63:e2:89:34:3a:a3:9c:c5:2b:64:fb:a1:a1:
3c:fc:cf:51:4c:c2:17:a6:a3:8d:ec:d2:08:20:01:45:73:5a:
3a:1e:bf:68:17:76:c5:ed:22:c2:6c:58:e5:27:34:38:bf:cd:
0a:6d:d7:be:9a:9f:ca:38:e7:8a:17:6d:1b:ae:97:bd:94:7a:
8b:b4:a6:04:0e:1e:2a:6d:e8:27:f2:63:f7:ea:46:03:c5:cd:
72:21:06:19:49:4f:66:5e:6a:b4:f6:3b:ec:7f:57:42:d5:3a:
de:f9:e3:b6:59:0a:5d:f7:48:17:17:97:64:b8:e2:da:e4:c0:
18:95:0e:37:45:31:fc:be:98:45:8b:d4:71:6d:bc:1c:ec:36:
72:08:cb:f3:54:1b:53:86:99:21:a2:be:b9:d6:da:2e:ee:fe:
79:20:1d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 09:57:04 2025 by rpki-client