Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
File: c-9b03Yu9g-njtVfVE-joFE_2EI.mft (raw, json)
Hash identifier: eLjdfiahdDgb86hBZYvDjPEG9pZINZjPFxCyFgDRSM8=
Subject key identifier: 4F:DB:8B:E7:72:0B:79:F4:FA:6C:0E:4C:09:2A:78:89:EC:B9:54:0D
Authority key identifier: 73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42
Certificate issuer: /CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
Certificate serial: 0197488CB88A889EA7930C7FE670487A653E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
Manifest number: 1082
Signing time: Sat 07 Jun 2025 04:01:10 +0000
Manifest this update: Sat 07 Jun 2025 04:01:10 +0000
Manifest next update: Sun 08 Jun 2025 04:01:10 +0000
Files and hashes: 1: c-9b03Yu9g-njtVfVE-joFE_2EI.crl (hash: KDy24J9cY+5yAEhlWFdw7SG0gkZICHphzNeMNIw8BEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:b8:8a:88:9e:a7:93:0c:7f:e6:70:48:7a:65:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
Validity
Not Before: Jun 7 04:01:10 2025 GMT
Not After : Jun 8 04:01:10 2025 GMT
Subject: CN=4fdb8be7720b79f4fa6c0e4c092a7889ecb9540d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d6:cd:dd:4f:bc:88:26:2e:b8:1b:b7:b9:95:
e0:ff:38:c8:fb:72:71:ab:08:13:c0:4d:af:44:c4:
b0:df:82:02:00:fc:1b:86:cd:7d:65:d3:35:47:21:
a4:ea:99:67:53:66:a5:c0:fc:c4:c6:fb:e0:79:d1:
96:56:bb:f9:1d:9e:f1:df:fe:3b:31:4c:b2:6b:19:
6b:d8:87:aa:b7:5d:6a:77:e2:8c:c2:c4:9c:ab:f1:
56:9d:e9:27:b5:1a:3e:fc:13:6d:d3:f1:37:d7:5d:
ee:88:01:1c:5a:54:9e:8d:1e:c4:36:35:ae:9f:75:
d5:82:b7:e0:f0:cf:d4:2a:1e:ce:42:da:58:30:83:
cb:12:8d:f7:13:05:21:ef:89:e1:85:cd:b8:fe:f1:
01:0e:12:7a:aa:96:94:75:8f:ce:36:9e:d3:22:51:
3b:f4:91:d3:f6:dc:85:0c:18:7b:2b:e0:75:9c:ca:
02:ea:f1:cb:f3:58:a4:37:ad:a8:72:07:e3:62:55:
8d:f4:8e:81:81:7a:04:b9:f9:5d:fe:cb:b8:e3:24:
2f:5a:f9:9a:18:82:6c:be:cb:89:db:e7:83:73:71:
7b:b0:2f:32:08:24:aa:15:4f:be:41:1c:c1:b1:78:
24:a0:ab:82:d3:ca:be:20:01:13:a1:69:4a:71:2d:
54:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DB:8B:E7:72:0B:79:F4:FA:6C:0E:4C:09:2A:78:89:EC:B9:54:0D
X509v3 Authority Key Identifier:
keyid:73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:98:33:aa:76:92:3f:57:09:f5:6b:2b:99:6e:1f:fe:d3:35:
02:ab:16:54:ad:59:c3:61:22:46:5c:fe:e3:28:65:c6:20:0a:
67:95:3e:52:07:09:83:3d:6f:6f:d2:e4:d8:bc:ec:21:46:25:
52:3a:d2:e3:0f:03:a6:c7:c0:89:3a:51:7c:b3:f6:e4:a0:81:
05:99:03:b7:81:fb:ad:91:29:17:c2:09:15:dc:b3:52:4c:23:
76:3e:28:dc:08:45:34:97:05:57:10:03:43:09:c2:ff:41:2c:
23:1a:96:43:3c:4d:81:a6:cc:f1:ea:49:d9:dd:63:bd:5f:b4:
6a:51:ae:0e:95:15:0b:6b:cd:3e:1b:f3:24:bb:9f:1d:61:ec:
48:2f:52:09:ed:57:58:77:e9:67:91:0e:83:93:5d:82:49:e2:
0e:a3:10:d3:38:5f:ea:7d:31:8f:e4:fc:fd:46:f0:d0:10:4f:
1b:4d:ef:99:1d:34:af:16:bc:22:52:3e:20:d1:89:d2:d9:db:
93:f7:50:93:de:f1:8d:65:90:25:25:0a:c7:d7:19:b0:11:a0:
72:1a:f2:b2:c3:4b:5d:0b:57:9f:30:02:3f:0b:ac:09:34:33:
ef:12:a8:34:5d:a4:5a:af:ce:db:1a:8e:f0:50:32:5d:00:ee:
6c:d9:c5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:45:57 2025 by rpki-client