Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
File: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft (raw, json)
Hash identifier: /ZOY4Un/ksIffc2E+8Q46QhFSHMrhk2pwAxY3Wd3Kmw=
Subject key identifier: F4:CE:63:80:36:72:A6:EB:39:47:91:0B:51:05:28:F6:28:8C:F9:46
Authority key identifier: 08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
Certificate issuer: /CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Certificate serial: 019749D61B6EE8873CB4FF5E61E637CC0EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 10:00:57 +0000
Manifest this update: Sat 07 Jun 2025 10:00:57 +0000
Manifest next update: Sun 08 Jun 2025 10:00:57 +0000
Files and hashes: 1: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl (hash: kvU2jDEVKRA3UI2neKkHJBZXc4401bVqh1PKlf5dItY=)
2: QBvaKUProLFwUadr8JLWlBh2UrE.roa (hash: xpxsGWmbgKM4U5yVDwdEgOHu1jns29KEhnZ49U4Y2OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:1b:6e:e8:87:3c:b4:ff:5e:61:e6:37:cc:0e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Validity
Not Before: Jun 7 10:00:57 2025 GMT
Not After : Jun 8 10:00:57 2025 GMT
Subject: CN=f4ce63803672a6eb3947910b510528f6288cf946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:ad:ba:69:e3:a4:f7:02:f3:56:3a:ae:6a:
a8:2c:ca:e3:5c:8c:77:62:71:f4:54:dd:d0:7b:06:
b4:12:d8:0e:b5:97:62:04:b7:c9:34:f2:c5:49:22:
ad:cc:ff:24:b6:ba:ce:02:8f:5f:9e:15:f7:8f:75:
a8:1c:29:e8:16:b2:88:84:71:c1:19:2a:f8:80:27:
48:1c:b3:ce:16:7c:a8:37:22:5e:c9:dd:4f:a8:73:
9b:2c:89:57:77:59:f6:38:e1:34:58:65:d7:ac:94:
bb:11:34:97:22:e4:bb:f2:e3:f2:c5:79:7a:d5:c6:
51:db:8d:63:b3:dd:cc:8a:cc:83:63:bb:40:55:60:
1d:b6:09:7f:fd:33:71:cf:13:8d:c3:32:a5:be:4a:
bf:07:cc:be:66:12:2e:41:e0:d2:75:0b:2f:69:08:
aa:f8:4b:af:49:fd:80:15:97:50:58:ca:f7:a8:eb:
08:12:6b:9c:f2:5c:65:03:6b:aa:e3:0b:27:5f:f3:
53:8f:b1:15:7e:50:9b:cd:a3:6d:57:99:d5:31:6e:
29:db:8b:98:d8:1b:38:d1:72:9c:87:49:77:86:c8:
c2:dc:26:7b:03:d8:24:0d:bc:39:cb:84:56:bb:b6:
93:ed:43:e2:e5:25:10:3c:4e:be:82:5a:69:68:a1:
26:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CE:63:80:36:72:A6:EB:39:47:91:0B:51:05:28:F6:28:8C:F9:46
X509v3 Authority Key Identifier:
keyid:08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:07:b8:a5:52:64:30:e5:4c:2f:33:57:b0:11:64:db:05:e1:
7e:e3:2c:6d:e6:37:88:06:52:44:69:57:c5:60:d9:d9:21:71:
11:d1:da:97:3e:a1:3d:b0:a4:96:77:22:49:87:fa:d6:47:3a:
b0:55:d9:a4:b6:1b:1f:35:b6:db:40:f6:de:56:9a:8e:5f:c5:
a9:1b:af:d9:bd:ee:48:72:18:b0:4c:f9:70:4d:fa:08:d6:e2:
72:8b:e5:f6:d4:f4:b2:cc:54:df:74:af:28:19:0e:aa:07:22:
d7:85:9b:2f:0f:e9:ab:9d:4e:37:b3:7e:1e:8b:de:eb:73:76:
62:ed:93:7f:48:b5:75:9c:7b:34:5f:ec:c1:5c:99:cf:58:e8:
c4:98:62:89:72:cd:d2:21:8c:be:61:69:e1:31:49:5b:0b:17:
82:fc:c3:dc:68:c5:d1:9d:a2:8b:a8:12:46:7a:69:aa:ad:81:
5d:75:7e:9d:af:95:2c:e0:e3:43:b3:dc:7f:25:54:2f:90:77:
03:a5:e6:a5:d4:50:b5:b3:e8:7e:33:7f:84:e6:cc:d1:6b:ce:
24:41:73:3b:77:a3:df:76:51:3f:86:43:c1:1c:b0:b4:b9:52:
c2:d5:3e:85:68:4e:0f:33:fe:4c:89:3b:49:90:cf:42:50:95:
fc:f9:c2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:27:38 2025 by rpki-client