Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
File: B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft (raw, json)
Hash identifier: oC+Q+mNcMUFMpRMPGOTO0iY/2mAuxf+SPe5ZP7S8uyU=
Subject key identifier: 40:7F:F0:BA:79:B4:3D:78:33:03:C5:BB:57:EE:8D:F8:C8:97:C8:6C
Authority key identifier: 07:D4:7B:21:CC:3B:A2:9C:C8:F8:A9:35:4F:33:7F:2D:5C:30:21:54
Certificate issuer: /CN=07d47b21cc3ba29cc8f8a9354f337f2d5c302154
Certificate serial: 01975AC9D4743AD9F4F52FF64D4ED9AB28F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
Manifest number: 1583
Signing time: Tue 10 Jun 2025 17:01:05 +0000
Manifest this update: Tue 10 Jun 2025 17:01:05 +0000
Manifest next update: Wed 11 Jun 2025 17:01:05 +0000
Files and hashes: 1: B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl (hash: mR+4ME36AEs0kH5TJcuTP7tROVd+9KoWVRX7G/i+EnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:c9:d4:74:3a:d9:f4:f5:2f:f6:4d:4e:d9:ab:28:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d47b21cc3ba29cc8f8a9354f337f2d5c302154
Validity
Not Before: Jun 10 17:01:05 2025 GMT
Not After : Jun 11 17:01:05 2025 GMT
Subject: CN=407ff0ba79b43d783303c5bb57ee8df8c897c86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:d1:4c:7f:f1:c4:eb:52:66:ef:58:84:87:
06:2e:6f:93:bc:41:3c:34:62:68:1a:58:8a:87:a6:
98:93:ba:c0:19:53:43:93:51:64:2f:da:7a:70:41:
0d:43:4d:6f:4e:e6:35:67:5a:41:ac:94:ad:67:25:
27:25:0a:be:b6:28:84:a8:6b:a1:55:cc:ae:7e:2b:
49:c5:10:a6:47:43:43:49:9f:66:09:a4:9c:59:fc:
b1:87:0e:06:14:f9:a2:8c:bd:d6:cb:4d:63:a7:e3:
83:5b:57:37:11:d0:55:07:62:aa:5b:fc:9e:03:96:
c3:65:93:11:0e:cc:fb:05:c4:c8:0e:fa:ee:5e:4f:
38:1e:97:8d:d5:0a:1d:65:e0:30:53:8e:58:c4:27:
e9:d1:94:f1:4a:93:87:d7:4f:06:cb:fb:65:57:6d:
20:fe:6e:90:f0:1e:3c:a5:9f:1f:98:d9:94:0a:78:
ad:9e:51:44:19:c8:21:ec:62:c2:f5:ad:50:f5:1a:
bb:ae:e8:f8:90:a0:82:17:17:9f:2f:f1:a0:2b:ad:
81:54:d3:c8:64:a0:b4:3a:af:ae:38:cc:df:2a:9e:
e4:f8:f7:d1:c7:09:d6:30:5a:d3:4d:a5:c4:b1:42:
3d:e7:7e:a3:3a:1d:db:4b:75:af:b1:63:b5:7d:da:
9e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7F:F0:BA:79:B4:3D:78:33:03:C5:BB:57:EE:8D:F8:C8:97:C8:6C
X509v3 Authority Key Identifier:
keyid:07:D4:7B:21:CC:3B:A2:9C:C8:F8:A9:35:4F:33:7F:2D:5C:30:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1e:67:b3:a9:1b:45:16:a3:a3:af:a5:e7:27:7c:d0:61:25:
4f:50:f0:5d:ae:4a:f6:d4:d8:89:60:63:4d:02:82:90:18:3f:
3e:d4:7c:2a:43:02:bf:35:f5:7b:84:22:6b:b7:fd:86:f9:ab:
fc:b6:55:8a:21:4f:c5:71:35:30:d6:f3:78:84:2f:73:0a:24:
42:2f:7c:90:71:cd:8d:f1:de:1e:d5:67:f9:40:8a:ca:66:44:
ab:21:75:c3:1e:81:26:25:9f:84:6e:8f:ca:30:cf:71:cb:bf:
15:ea:97:eb:55:07:8e:0a:9f:9e:38:9c:3e:88:40:26:de:a1:
20:da:54:41:14:52:55:c0:8b:56:bb:7e:16:16:f3:bf:f1:f5:
8d:73:68:3a:f9:bf:f7:e6:b3:53:fc:65:8a:1d:46:80:93:fb:
a3:b7:a6:16:10:71:26:60:8c:ca:53:96:94:fc:1c:9f:cb:c5:
c7:ae:78:75:bb:bf:52:ab:60:c2:cc:da:af:32:2e:67:5a:4a:
ae:cc:cf:14:ef:72:e0:a4:51:88:f1:44:47:08:2c:d1:f8:25:
6f:28:85:6c:88:89:9f:dc:10:c9:7a:15:39:c2:a2:fc:b4:a7:
da:f8:d4:a7:8e:d8:33:75:6b:e2:ec:43:9a:39:4b:0a:87:04:
25:82:4c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:27:35 2025 by rpki-client