Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
File: n9e3i11VWv7XZxyRbCbrf_x-LJo.mft (raw, json)
Hash identifier: qTA5bGmQ0HoPPRsbjfn/0BUl/bB+GyL7UdbOiKynjik=
Subject key identifier: 35:47:4D:1E:AA:DA:B4:DC:0D:83:36:1A:CE:9D:7F:77:BE:1E:AD:F6
Authority key identifier: 9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A
Certificate issuer: /CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
Certificate serial: 0197530FF30E0F77418DBE49EE57E1832986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
Manifest number: 047D
Signing time: Mon 09 Jun 2025 05:00:43 +0000
Manifest this update: Mon 09 Jun 2025 05:00:43 +0000
Manifest next update: Tue 10 Jun 2025 05:00:43 +0000
Files and hashes: 1: n9e3i11VWv7XZxyRbCbrf_x-LJo.crl (hash: SqCLJO+eDmOTXpi0+6CAEtK2BD3pRA/ufsqXP0dyYjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:0f:f3:0e:0f:77:41:8d:be:49:ee:57:e1:83:29:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
Validity
Not Before: Jun 9 05:00:43 2025 GMT
Not After : Jun 10 05:00:43 2025 GMT
Subject: CN=35474d1eaadab4dc0d83361ace9d7f77be1eadf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:67:a4:15:71:67:25:ef:ba:d0:2f:17:07:
ef:2f:c7:0b:db:18:fa:20:35:14:84:5e:ef:20:83:
6f:c8:bf:d4:ba:d9:aa:a3:e6:b2:78:70:a1:de:bd:
2c:e9:1c:91:9f:ad:5d:c2:53:eb:a2:3e:e5:a2:ca:
c1:a6:3d:c4:40:fd:6a:2f:e7:57:ce:0f:ee:4e:f7:
50:e2:54:ba:47:b4:48:7f:6a:82:d8:7a:34:39:39:
25:73:08:33:41:b6:5d:04:06:f3:77:82:9a:0d:d2:
69:52:b7:ee:1b:31:38:57:02:68:5b:b7:fc:49:9e:
71:8c:ce:e8:e7:f0:09:9d:38:81:48:27:fa:b5:43:
98:dc:d5:41:5b:8d:45:7f:45:2f:b9:b6:c6:d6:95:
34:98:e8:61:27:eb:08:f2:d9:24:54:0e:54:ba:56:
5f:7b:66:a5:8e:da:c1:e4:eb:02:05:af:e4:70:44:
c8:e5:7a:ce:8b:84:a7:86:0a:73:c2:fb:a9:a7:30:
a8:d2:f2:52:d3:d5:98:05:3a:90:5e:ac:9d:fe:6c:
03:de:a6:b1:d3:c7:f1:7a:07:6a:67:41:19:a4:26:
6d:66:de:f4:99:5e:cb:f7:53:4d:e7:cd:a0:0c:fa:
ed:30:a8:ca:ec:b8:8a:cc:24:78:4a:e1:7b:5e:e2:
63:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:47:4D:1E:AA:DA:B4:DC:0D:83:36:1A:CE:9D:7F:77:BE:1E:AD:F6
X509v3 Authority Key Identifier:
keyid:9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:69:15:18:6e:4c:8a:ce:b1:21:27:fe:f7:94:fe:31:b5:e3:
1d:be:bc:b4:bf:14:e6:58:c5:26:fd:7c:9a:20:80:96:27:ac:
3d:e9:66:4c:1f:1e:d3:34:09:49:2c:d0:84:86:b9:ef:cd:d9:
98:d0:ff:a0:f9:89:42:2b:72:03:b7:fa:d9:32:a8:80:29:bf:
f8:cb:9b:9d:00:34:cc:40:ae:ee:06:f4:c7:f1:cb:fd:16:6b:
85:55:d5:68:e3:38:1d:59:22:22:40:52:10:42:94:b2:c2:0d:
a0:c4:4b:31:8c:dc:65:db:ef:d9:7a:90:11:28:49:8f:30:23:
9d:e0:63:70:87:e9:b4:21:99:30:4d:0d:2d:00:ba:94:f9:a6:
50:7d:16:42:5e:96:bc:54:ae:51:be:0e:91:4c:cc:d6:cb:55:
f6:24:ae:e7:dc:4a:b2:2e:f1:48:7d:a0:4d:a8:92:0b:7e:99:
62:63:4e:3c:16:38:c4:6e:f7:38:3d:86:23:6e:86:ca:3f:c7:
b7:0d:91:11:32:d1:1b:06:12:dd:93:f8:f8:73:be:da:6d:4a:
8a:80:c0:cf:a3:13:fa:3d:1a:0a:b3:9a:65:17:70:9b:e2:9f:
90:21:fa:23:98:92:28:87:73:8f:fc:7d:55:87:70:ff:fa:e3:
08:3d:b4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:51:19 2025 by rpki-client