
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
File: 9E8rYv2EXJFI4OImQldIw8bpdTk.mft (raw, json)
Hash identifier: D7RnEqbB1u6qMLeG4yXLHKFOgr70ZPR/NE8B69qMITc=
Subject key identifier: 0D:B4:90:79:3A:09:ED:28:0F:EA:A3:44:77:12:E9:7E:94:3C:09:6D
Authority key identifier: F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
Certificate issuer: /CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Certificate serial: 0197499F1569096CED154F905D7098F90A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
Manifest number: 04FE
Signing time: Sat 07 Jun 2025 09:00:51 +0000
Manifest this update: Sat 07 Jun 2025 09:00:51 +0000
Manifest next update: Sun 08 Jun 2025 09:00:51 +0000
Files and hashes: 1: 9E8rYv2EXJFI4OImQldIw8bpdTk.crl (hash: 6OfFeJrynHaOcg648y3ULDbIyTug63LjGK0WgOKnaWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:15:69:09:6c:ed:15:4f:90:5d:70:98:f9:0a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Validity
Not Before: Jun 7 09:00:51 2025 GMT
Not After : Jun 8 09:00:51 2025 GMT
Subject: CN=0db490793a09ed280feaa3447712e97e943c096d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3d:6f:b9:06:99:26:03:3a:1e:4d:0e:04:d4:
53:d8:e0:f0:8d:3e:1a:c6:ab:a2:b9:99:d9:6c:02:
1d:5b:06:9a:f2:46:0d:65:19:3f:30:4b:27:7d:90:
22:23:1b:09:d2:18:9e:92:3e:b7:17:b7:0a:3b:83:
d1:32:49:d6:1a:14:44:f6:2e:0b:35:ee:c3:d2:fd:
d7:50:7a:71:0b:0e:50:5f:7c:75:8f:d1:e0:3a:90:
db:4a:3d:a6:95:b1:25:22:5d:31:c3:14:95:82:7c:
45:73:7f:54:7f:fb:1e:85:40:e6:0c:74:b4:e4:6b:
c3:11:00:0e:09:57:fa:a9:66:ae:28:e5:95:28:40:
af:92:50:fa:dc:71:b4:37:8f:2b:56:f8:be:56:20:
39:ce:b8:0b:22:53:6d:d4:14:11:2a:01:25:9b:b2:
5b:d0:b1:4c:6f:60:01:58:4d:60:20:12:6a:c4:ca:
73:f2:c2:b4:e3:d7:e0:ea:28:13:27:af:99:96:4d:
d4:32:fb:13:d7:88:79:1a:b4:6a:fe:e9:83:36:91:
dd:c6:a7:cc:22:79:0b:43:f4:b2:c7:91:50:47:45:
88:ad:f0:a4:8d:6e:52:be:8f:9e:94:6c:3e:5c:d4:
27:ad:18:76:f6:b2:8e:60:97:74:37:e6:b1:4d:38:
04:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B4:90:79:3A:09:ED:28:0F:EA:A3:44:77:12:E9:7E:94:3C:09:6D
X509v3 Authority Key Identifier:
keyid:F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9d:36:fe:d3:3f:5a:8d:fb:d4:a6:3b:53:d1:1e:56:6a:2a:
dc:2d:60:28:e8:42:40:da:dd:bb:dc:ed:1d:6b:17:6e:d9:14:
89:3d:5f:ff:71:6f:12:7f:e3:91:0a:77:01:a5:40:b9:4f:d8:
d1:69:93:1f:ee:b9:d3:4a:e7:49:89:ed:bc:23:80:fe:20:dd:
50:bb:e8:a0:a3:c6:0d:69:15:4c:f8:48:5f:88:c2:d0:80:1b:
42:c2:26:dc:56:07:2c:5d:fa:10:b7:f6:f7:47:4b:17:6d:ea:
ce:39:72:7e:71:20:34:47:c6:49:61:8c:ec:f6:4e:86:4d:5a:
af:5f:e6:74:25:ca:fa:30:0e:cc:ea:25:b6:68:3f:20:0e:bf:
8a:6a:5e:e5:0a:59:6f:5c:6a:ab:f8:c1:ac:aa:22:9a:5f:44:
07:b7:03:1e:59:45:9d:39:59:27:52:eb:8e:8d:a0:19:c3:da:
d1:04:04:54:d1:73:56:06:9d:f8:8e:0b:0b:06:fd:1e:ef:3a:
d2:a1:66:46:d6:e6:cf:6e:bb:6a:78:d9:60:bb:6c:c5:51:1c:
9e:27:67:d3:69:5d:80:66:ca:b9:96:a2:60:a6:9c:f0:23:f8:
1e:f2:6f:3c:7b:fe:f0:e3:e3:dc:03:95:c0:6d:13:38:e8:24:
7a:dc:8f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:22:15 2025 by rpki-client