Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
File: 9BGAp8UWZ-w4dedl8kX5CThhJXE.mft (raw, json)
Hash identifier: bqfXFgW7p69KrmeZVi1Zubd3IOfZLpA+t+P+igkdjXo=
Subject key identifier: C1:15:53:54:00:7C:DF:9A:CA:D7:2B:14:19:20:70:60:19:6E:86:4C
Authority key identifier: F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
Certificate issuer: /CN=f41180a7c51667ec3875e765f245f90938612571
Certificate serial: 01975234822A1054D1A025DFC428D7012D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
Manifest number: 0651
Signing time: Mon 09 Jun 2025 01:01:02 +0000
Manifest this update: Mon 09 Jun 2025 01:01:02 +0000
Manifest next update: Tue 10 Jun 2025 01:01:02 +0000
Files and hashes: 1: 9BGAp8UWZ-w4dedl8kX5CThhJXE.crl (hash: TFgwacz1SUpfECmI7bcHD4krnu6l5g9i16inxtY3AMc=)
2: Fu214pqREiMNysqnZ9A7Q5Jm5yE.roa (hash: 3AsnPktXMzidA1tsY7S+Rc/2XsSBvEXEVlda+G5oNPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:82:2a:10:54:d1:a0:25:df:c4:28:d7:01:2d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41180a7c51667ec3875e765f245f90938612571
Validity
Not Before: Jun 9 01:01:02 2025 GMT
Not After : Jun 10 01:01:02 2025 GMT
Subject: CN=c1155354007cdf9acad72b1419207060196e864c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1a:ec:1d:0b:10:fe:87:17:56:59:30:53:8e:
f7:e6:91:4e:1c:f3:45:01:fc:c5:cb:9c:f5:c9:ee:
92:f5:8a:80:07:31:b1:ec:44:5d:07:63:46:2b:e2:
23:1c:ce:8d:57:79:a4:8a:5b:7b:23:61:13:f7:90:
1f:5d:a4:d8:d8:be:3c:b0:59:0f:1c:36:b1:c6:11:
3a:6c:d1:5f:c3:80:3c:74:de:ac:f3:59:fc:70:fc:
23:67:08:b6:fa:4f:7b:13:6c:9e:44:5a:e6:bb:7e:
85:5a:dd:be:43:e4:6c:fd:fd:81:09:d4:7b:4f:fc:
f0:4e:9c:f8:29:39:94:fb:1d:a7:1e:37:83:b6:ca:
ec:d2:1e:40:58:81:8f:2b:8e:18:34:17:ba:9e:f0:
86:94:55:8d:f8:a5:07:37:da:3e:37:a6:b8:86:d0:
21:ad:8d:cb:b9:79:71:2c:ab:85:69:bd:df:fd:92:
64:e3:c6:9d:d2:17:53:44:5a:ae:25:8e:9c:63:45:
24:4b:69:1d:05:e9:c5:38:eb:d4:ad:eb:81:e9:60:
fa:05:ed:8a:a6:bb:0a:58:1d:1b:43:3c:ef:5a:83:
25:05:e3:ff:89:df:19:97:81:ca:26:ae:76:f0:63:
a5:50:49:14:68:ca:cf:b6:81:82:c2:39:48:35:59:
ae:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:15:53:54:00:7C:DF:9A:CA:D7:2B:14:19:20:70:60:19:6E:86:4C
X509v3 Authority Key Identifier:
keyid:F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:01:a2:b1:59:4f:93:e4:6e:68:62:2e:44:a5:c4:91:72:71:
6b:d2:ef:cf:3b:0c:fa:cc:9d:78:61:d5:71:c8:04:77:9b:e1:
27:91:98:2b:ed:55:1d:3b:80:04:07:61:61:7f:ed:ac:44:6d:
fd:a7:9f:4b:ee:62:9b:79:0a:77:6d:be:60:f4:29:f5:ef:66:
f2:b3:01:c1:5f:ce:ea:df:7b:7c:08:6e:9e:4f:f8:28:38:3d:
ef:b2:76:90:f1:2e:ee:bc:05:d1:c2:66:cb:38:3d:0b:32:d5:
0e:31:27:bc:9d:b8:d4:c3:96:f8:f7:c7:51:02:a7:d9:3f:00:
5a:44:6c:be:4a:6f:6c:ea:db:a8:03:da:f1:d0:cf:ec:1e:6c:
d4:07:64:7f:6f:ad:a4:15:90:09:d3:eb:2b:5b:aa:6e:c0:10:
28:6b:e6:db:e7:03:15:38:4d:0a:ce:f7:e5:e7:2e:65:ec:68:
bb:6a:4d:0a:5c:0c:f4:58:c9:f0:dc:0e:08:cc:25:95:19:92:
e1:e7:65:1c:49:57:e0:80:d3:e8:83:79:19:68:20:54:7e:90:
1b:ea:95:8d:3d:fb:a8:88:18:a8:60:32:f0:99:3b:57:a3:41:
43:0f:b3:88:68:65:e5:db:af:7e:b9:76:30:7c:fe:78:75:56:
5a:b7:8b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:27:23 2025 by rpki-client