Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
File: 1-c9m7XQoo55j8NJzYDf0McQao08.mft (raw, json)
Hash identifier: XVrfAJtU/JMXjpLLc8OBOEZ/ucIVMTdgks+4HmmGbUM=
Subject key identifier: 57:5B:61:76:1A:88:D3:D1:51:14:B4:FF:CD:1B:19:D5:96:AB:E6:4E
Authority key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
Certificate issuer: /CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Certificate serial: 019755A33425E70B45506DD1A75ADEF6A3C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
Manifest number: 1583
Signing time: Mon 09 Jun 2025 17:00:48 +0000
Manifest this update: Mon 09 Jun 2025 17:00:48 +0000
Manifest next update: Tue 10 Jun 2025 17:00:48 +0000
Files and hashes: 1: 1-c9m7XQoo55j8NJzYDf0McQao08.crl (hash: 5rZZrhO6yYjNfxIDy9o64w/OCVKBpfS4tAu0cbkMPBg=)
2: rbOZFLBJLeiBgSg-ywSTHEPc89w.roa (hash: Wz1ZKiJOk56RIdFfsa2AALc0JqTjfQEXp/iXAbjA7+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:a3:34:25:e7:0b:45:50:6d:d1:a7:5a:de:f6:a3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Validity
Not Before: Jun 9 17:00:48 2025 GMT
Not After : Jun 10 17:00:48 2025 GMT
Subject: CN=575b61761a88d3d15114b4ffcd1b19d596abe64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4c:5a:c5:b9:b6:4c:0c:1c:76:79:ce:6a:9e:
99:04:aa:c2:af:d2:d4:1e:a5:44:32:2b:8e:8a:24:
8c:d9:be:08:89:b6:c4:44:90:2e:9e:5c:1a:f1:d2:
02:e4:62:14:45:73:a4:16:33:67:19:6b:8b:06:d9:
62:ae:5c:9b:4d:c6:34:e0:d2:e1:5e:12:ea:ad:48:
da:09:63:94:0f:71:fd:26:0a:30:d2:94:ce:cd:3d:
e7:ab:e0:45:bf:3a:6f:6d:09:5d:fe:dc:f3:a3:fd:
79:f3:04:5d:60:8b:9b:4b:90:a3:f4:5e:bc:1c:07:
65:e5:8b:67:8f:7a:eb:01:d0:98:5c:23:20:be:cf:
b8:da:c9:88:7d:a5:5f:f7:c8:a2:a9:b6:c4:63:9c:
20:c6:61:cf:8e:63:14:99:e3:c6:02:08:f5:18:f2:
0d:89:b5:a4:16:8e:fa:dc:96:72:43:58:d4:d1:d9:
db:f8:5f:5f:1c:20:56:2d:07:b3:f9:89:71:f7:47:
86:f7:bb:05:84:3b:0a:bb:9b:1f:01:2d:0f:4e:c6:
a7:b5:d9:b3:7c:72:9f:3e:ef:fd:b1:9f:a7:8a:17:
d0:66:81:68:54:ec:2f:0b:28:2e:55:d7:75:09:2f:
de:fb:a3:5d:fb:6b:84:4d:d0:4f:95:15:31:aa:1d:
8a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5B:61:76:1A:88:D3:D1:51:14:B4:FF:CD:1B:19:D5:96:AB:E6:4E
X509v3 Authority Key Identifier:
keyid:F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:0f:a6:8c:03:aa:99:5a:93:18:20:40:9a:18:35:c5:25:15:
81:cc:fd:67:45:93:84:03:ea:fe:31:44:a5:56:8b:59:aa:1e:
b2:48:b0:e6:d3:3b:f2:dc:6d:24:00:57:83:ad:cf:ad:d5:d0:
71:ac:98:2c:36:e1:82:07:9a:56:2c:eb:49:3f:47:ef:42:fb:
8c:3c:b3:3e:5d:6d:37:35:c2:5d:27:b5:ff:d4:36:f4:f7:82:
90:ab:5b:f6:c4:19:2f:25:65:b7:24:09:37:fa:55:c9:12:14:
c0:8f:49:35:79:9c:d6:1f:d8:62:c7:38:56:b0:02:18:38:0f:
bb:e0:6b:b8:d6:3c:36:ac:8a:be:3e:d5:a0:b8:b7:b1:53:6b:
58:d9:86:13:12:d1:02:3b:c3:cd:43:9c:c0:70:88:aa:b5:cc:
7d:77:e4:4d:98:17:3a:c2:59:4a:ed:c9:bb:70:a8:04:d2:63:
88:74:c7:58:5c:56:a5:12:03:af:0d:9f:5f:e7:c6:d6:d2:f4:
97:dd:d5:b4:43:30:39:f3:e1:74:af:08:00:43:f3:91:54:19:
58:60:bc:7f:01:7f:92:d4:8f:8e:a1:74:33:d4:0d:20:9c:af:
30:de:83:8f:08:cd:0e:b7:d4:2b:39:e3:4a:74:6a:bc:62:23:
06:c9:51:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:42:38 2025 by rpki-client