Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft
File: n34J7YuBilTMw-tCb2elWhOKuH0.mft (raw, json)
Hash identifier: Zqh/H4cONB5LMToQIo4ZzGax8BAGzPZnTqob74LA7QI=
Subject key identifier: 8C:F0:23:15:AA:94:84:20:76:C0:EB:DC:6F:6D:C4:B4:F0:A9:CF:A4
Authority key identifier: 9F:7E:09:ED:8B:81:8A:54:CC:C3:EB:42:6F:67:A5:5A:13:8A:B8:7D
Certificate issuer: /CN=9f7e09ed8b818a54ccc3eb426f67a55a138ab87d
Certificate serial: 0197488C33174943D3C2B4B29A8345033143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n34J7YuBilTMw-tCb2elWhOKuH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft
Manifest number: 0988
Signing time: Sat 07 Jun 2025 04:00:37 +0000
Manifest this update: Sat 07 Jun 2025 04:00:37 +0000
Manifest next update: Sun 08 Jun 2025 04:00:37 +0000
Files and hashes: 1: n34J7YuBilTMw-tCb2elWhOKuH0.crl (hash: DqN/XdbytFHW5m+WQQlz7X1t4819SxMtm8aZILqhaak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/n34J7YuBilTMw-tCb2elWhOKuH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:33:17:49:43:d3:c2:b4:b2:9a:83:45:03:31:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7e09ed8b818a54ccc3eb426f67a55a138ab87d
Validity
Not Before: Jun 7 04:00:37 2025 GMT
Not After : Jun 8 04:00:37 2025 GMT
Subject: CN=8cf02315aa94842076c0ebdc6f6dc4b4f0a9cfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:5c:51:f2:ce:62:4f:2a:b6:90:55:1d:67:
17:df:10:76:71:48:a7:e2:10:66:9f:32:83:94:a2:
73:43:68:2c:9c:4f:f8:0e:5b:45:60:3b:af:70:0b:
5f:a5:92:7f:5c:c7:14:06:67:57:41:ab:c4:4f:9a:
85:01:50:6f:3c:44:2d:b2:84:66:7b:fe:66:a8:fc:
42:33:b3:bc:03:ea:0b:e0:85:25:3c:41:b0:8e:a1:
1f:25:34:67:81:dd:97:ed:cf:e9:6a:a3:64:32:b3:
65:e1:c5:00:66:b0:b2:05:fd:f1:1b:2c:5d:32:77:
7a:80:d4:1d:c5:60:74:a6:9a:9a:0e:8f:8c:d8:75:
d0:f8:95:87:51:b3:ac:58:96:82:35:cd:94:c6:f4:
ae:cd:05:f5:6c:8e:79:bb:63:25:cb:c5:87:56:9d:
2d:d6:cf:7c:18:e2:6c:93:76:bd:90:48:99:d0:4a:
3d:83:e1:8c:ee:fe:29:b0:d1:9e:35:c2:42:e1:a0:
65:81:bb:e6:14:b8:a6:d9:54:23:e5:eb:31:50:5d:
02:96:3f:00:df:e2:ca:7f:70:79:50:b2:18:67:f0:
c8:59:7e:da:4c:ea:e0:2b:a9:be:8c:c0:91:a7:00:
94:41:f7:c7:2f:93:3b:94:65:0a:ff:e9:23:21:14:
e7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F0:23:15:AA:94:84:20:76:C0:EB:DC:6F:6D:C4:B4:F0:A9:CF:A4
X509v3 Authority Key Identifier:
keyid:9F:7E:09:ED:8B:81:8A:54:CC:C3:EB:42:6F:67:A5:5A:13:8A:B8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n34J7YuBilTMw-tCb2elWhOKuH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a7:12:3c:7f:77:61:64:03:59:6b:3e:f6:33:de:47:c7:a6:
a6:69:a3:68:47:97:48:00:fc:50:e1:4a:13:74:34:b0:93:49:
6b:34:3d:01:c4:71:de:71:88:e5:25:20:c7:90:e8:e1:ef:9f:
b8:80:2b:75:b3:75:13:f1:bd:39:2e:22:94:d4:d8:6c:d3:83:
a1:23:ed:8e:db:0c:9e:a8:ea:cd:4b:97:26:26:de:22:bc:ca:
35:9c:80:df:3b:dd:60:0a:d9:53:2e:74:d9:92:9c:67:5d:55:
c8:22:c4:63:ff:d5:ce:2a:a3:b8:19:44:27:6c:f3:39:34:91:
8e:81:b6:bb:36:b3:08:a7:ba:07:b8:b5:4d:52:6b:db:8d:13:
35:1b:e2:e0:ff:62:4c:2e:4b:6e:15:a0:31:e8:45:66:ee:d1:
df:63:54:65:32:63:1e:d0:fb:bd:09:8e:de:85:37:e4:9a:12:
6c:a1:53:3a:44:f1:36:f5:21:d4:9e:51:13:08:41:ee:14:48:
56:ce:88:26:c9:ca:af:cf:28:f1:53:df:e0:10:84:8a:b6:51:
1f:84:d0:1a:72:62:e1:17:2a:60:ba:96:3c:4f:73:1b:8b:33:
c7:1b:0f:92:aa:0d:41:00:3e:c9:3b:52:c3:50:9d:5d:87:7d:
8c:ab:a6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:16:19 2025 by rpki-client