Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
File: B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft (raw, json)
Hash identifier: Vt4T+BuAlmES0MqM24z/Jvo5FBczG5u/NioGFiokNa0=
Subject key identifier: 9F:AD:C8:4E:CB:48:9C:FF:E5:04:DE:2F:CB:95:2F:C5:AF:08:38:1F
Authority key identifier: 07:D4:7B:21:CC:3B:A2:9C:C8:F8:A9:35:4F:33:7F:2D:5C:30:21:54
Certificate issuer: /CN=07d47b21cc3ba29cc8f8a9354f337f2d5c302154
Certificate serial: 0197665FEB7FACFC81C3F9AF316F9CDCD0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
Manifest number: 1589
Signing time: Thu 12 Jun 2025 23:00:51 +0000
Manifest this update: Thu 12 Jun 2025 23:00:51 +0000
Manifest next update: Fri 13 Jun 2025 23:00:51 +0000
Files and hashes: 1: B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl (hash: JzG/zWl1Ep3DBePRj1qTDmq2zH6mgObQM/DkRbC4as4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:5f:eb:7f:ac:fc:81:c3:f9:af:31:6f:9c:dc:d0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d47b21cc3ba29cc8f8a9354f337f2d5c302154
Validity
Not Before: Jun 12 23:00:51 2025 GMT
Not After : Jun 13 23:00:51 2025 GMT
Subject: CN=9fadc84ecb489cffe504de2fcb952fc5af08381f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:35:40:b4:ee:76:18:60:f4:fb:5d:bb:86:
cc:76:00:eb:5e:f1:3c:6e:c2:96:96:d3:ef:00:d9:
87:07:dc:b8:67:b0:7e:d8:b2:25:46:c8:89:a6:ac:
09:c4:22:0b:db:ae:6c:c8:84:05:af:20:6e:94:e3:
77:83:f8:8c:46:42:03:a1:c7:c8:02:59:78:5f:b3:
aa:8b:c0:61:13:9a:75:71:22:af:00:61:f7:df:3e:
1c:60:90:72:78:4c:5c:6c:a0:89:d6:a8:c3:b3:9d:
5d:53:65:e0:5d:0c:d2:eb:53:0a:b6:08:7e:37:bd:
4d:a1:80:7c:e2:38:5d:74:61:2e:2c:d6:b4:36:83:
70:2e:aa:8b:b0:5a:21:93:2c:08:86:a0:5a:22:b6:
28:a9:4d:0a:ce:1b:61:bd:8f:50:84:9f:f4:66:33:
b1:aa:75:a6:f3:6c:26:b5:98:d0:7a:54:89:f9:e9:
7f:60:b8:b4:e2:1b:97:0e:8d:8f:89:67:db:80:33:
46:39:d8:9b:f1:94:13:18:c4:d8:12:22:40:62:21:
0d:8e:ee:4a:d1:14:88:45:e7:b7:8b:76:0d:09:ea:
8f:af:5b:e2:17:3a:1f:79:6d:c1:67:9d:3f:2d:52:
c9:a0:28:9b:1c:ff:3e:92:81:ac:ed:bf:ee:0f:ce:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AD:C8:4E:CB:48:9C:FF:E5:04:DE:2F:CB:95:2F:C5:AF:08:38:1F
X509v3 Authority Key Identifier:
keyid:07:D4:7B:21:CC:3B:A2:9C:C8:F8:A9:35:4F:33:7F:2D:5C:30:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:bd:08:0e:38:7d:c7:b2:bc:b6:0e:e8:d5:a3:10:81:ca:49:
e9:d9:cc:49:10:6c:89:19:b9:17:ce:43:1d:fa:38:49:8d:b4:
c6:09:d0:1f:72:b6:bf:85:d2:94:d9:1f:e2:b6:97:88:3a:ab:
3b:3d:71:eb:0c:23:c3:cc:12:7a:9a:ba:00:65:46:ea:60:35:
5a:9d:9b:cc:66:de:2f:f5:2f:17:89:95:ca:f9:87:62:b4:78:
fa:fc:32:0c:80:e0:92:71:56:6d:f1:4e:e1:f2:c6:fd:b7:f0:
a8:00:b2:69:13:5a:4b:f2:c8:9b:4a:f4:70:05:0c:36:74:b5:
41:65:99:9b:dc:8f:76:33:53:fb:ae:eb:1d:f9:90:34:59:6b:
e7:7b:da:23:6f:3e:cb:ef:35:1e:ae:c0:04:4c:8a:87:70:ac:
4f:f8:09:40:d1:78:d8:bd:b3:43:15:14:df:a0:79:5f:bf:23:
9e:d6:e1:bb:67:5c:64:81:b3:43:03:56:50:b6:90:a5:47:15:
c5:d0:e7:66:98:60:88:67:59:79:20:64:f3:dc:d5:ad:53:f6:
51:68:21:b7:3f:b8:ce:71:90:c7:76:98:c6:c2:fb:bc:1d:65:
3d:96:b9:85:16:44:6d:2c:f0:5b:80:4b:26:03:81:27:98:bc:
0d:a2:0e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 04:34:58 2025 by rpki-client