Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
File: 0o9VSu1_jnFG6ctj9eMaXbHhupM.mft (raw, json)
Hash identifier: 89oGDuwDjkmdB9zx72etJSrawBKE2HDAYjb+LenFl/U=
Subject key identifier: D6:49:F7:BF:81:B7:F4:30:A8:66:D4:E0:6D:D0:D8:1A:F1:ED:EA:F1
Authority key identifier: D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
Certificate issuer: /CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Certificate serial: 0197643A1A4EA9FC257A14D32C57B84E67B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
Manifest number: 1584
Signing time: Thu 12 Jun 2025 13:00:18 +0000
Manifest this update: Thu 12 Jun 2025 13:00:18 +0000
Manifest next update: Fri 13 Jun 2025 13:00:18 +0000
Files and hashes: 1: 0o9VSu1_jnFG6ctj9eMaXbHhupM.crl (hash: jHdpLm9J1EGnXpE90AcMV1SLcNqqC2oorofdSr8zO+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:3a:1a:4e:a9:fc:25:7a:14:d3:2c:57:b8:4e:67:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Validity
Not Before: Jun 12 13:00:18 2025 GMT
Not After : Jun 13 13:00:18 2025 GMT
Subject: CN=d649f7bf81b7f430a866d4e06dd0d81af1edeaf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:2a:d9:18:4d:fe:14:83:09:22:4e:86:d4:
c8:d9:9e:e8:34:47:82:37:4c:f8:c0:8a:a1:73:87:
54:06:46:90:01:3a:5e:7a:a8:70:cf:66:c4:f9:ea:
2d:e2:ae:13:99:d8:c6:9f:1a:6c:de:de:3e:96:52:
39:f4:67:a1:cd:c9:09:6b:6d:a9:2f:b6:db:a3:2d:
73:48:ec:b4:3e:1b:8b:d3:25:5e:19:da:1b:5a:4e:
eb:f4:78:21:0e:0e:96:2d:9d:7f:59:0b:93:71:22:
18:b7:8d:01:af:30:8a:22:e3:fa:f6:9f:8d:a8:a9:
4b:86:35:08:80:c3:0d:9e:39:88:8e:ee:bb:36:e3:
72:9b:10:b5:a0:db:fc:58:1a:9a:ff:77:95:a2:65:
e7:9f:02:e1:db:2e:60:c8:18:54:2d:a6:4f:66:c4:
a0:08:86:0c:1d:d8:a0:1f:99:9e:a8:15:59:72:26:
c9:85:61:22:97:34:a1:57:4c:5c:8c:94:16:c9:71:
e6:66:e9:bb:11:0e:fa:c8:70:44:6d:ed:db:e6:b1:
28:09:c2:65:05:53:0d:a0:57:7e:46:e7:ad:06:ff:
44:13:fd:82:99:59:91:ed:99:39:ca:ee:3a:27:7f:
71:62:bb:97:b7:d4:e2:d5:76:fd:ab:6d:af:f8:9a:
8b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:49:F7:BF:81:B7:F4:30:A8:66:D4:E0:6D:D0:D8:1A:F1:ED:EA:F1
X509v3 Authority Key Identifier:
keyid:D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e9:69:87:b7:cb:dc:93:27:0f:f3:1b:b8:b6:62:2c:67:e4:
64:35:fd:f8:0e:d6:7e:e6:be:34:7f:f8:da:96:3b:2e:59:70:
c5:bc:7c:de:94:c3:55:ca:a4:51:c7:8c:9b:ca:0e:98:93:06:
47:3f:0f:02:e4:63:4d:94:eb:73:66:f9:70:83:dd:a4:24:ff:
80:63:97:19:6e:aa:d4:76:50:62:86:e8:b1:52:fc:3f:76:46:
b2:7f:fe:38:ae:38:75:ab:06:ba:d0:2b:6b:eb:e5:eb:1d:dd:
c4:4f:aa:87:ff:f6:7a:f2:4e:89:00:ef:06:6d:5c:91:88:c1:
eb:1a:c3:cc:c5:1a:ca:27:f2:a7:ea:c3:01:b7:43:40:79:36:
2c:59:ed:f0:19:1a:a7:39:ff:3c:06:56:35:03:72:c5:dd:8a:
08:07:d4:8e:f0:a4:25:3a:b1:4a:e2:95:66:9c:28:2f:4c:55:
8d:2f:34:16:d9:b2:17:e2:78:f7:68:d1:c1:e3:ab:a7:e2:ca:
bf:80:c2:c8:dc:8c:4d:29:51:aa:d2:b9:51:ab:77:8f:06:35:
49:c7:e2:69:89:5d:b1:b0:79:1f:a9:28:a2:f2:5f:cf:14:9a:
53:73:a7:68:c9:59:f1:36:4c:76:d5:c1:fc:9d:78:46:9d:61:
37:dd:40:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:03:27 2025 by rpki-client