Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
File: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft (raw, json)
Hash identifier: H/BKCSQntWrDBaEzZrJh4XEIn3pgKwZUq+zUUw6ySls=
Subject key identifier: C4:0E:61:F4:2E:F1:E5:2E:75:74:0E:47:4D:BE:20:84:BD:3A:25:3C
Authority key identifier: 9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
Certificate issuer: /CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
Certificate serial: 01976961918138F75206B96B2090095C8AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
Manifest number: 0AD1
Signing time: Fri 13 Jun 2025 13:01:31 +0000
Manifest this update: Fri 13 Jun 2025 13:01:31 +0000
Manifest next update: Sat 14 Jun 2025 13:01:31 +0000
Files and hashes: 1: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl (hash: kSsyPg5LYO5c792vcPQQYv1d1irl7pStDEBf4N8RREM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:91:81:38:f7:52:06:b9:6b:20:90:09:5c:8a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
Validity
Not Before: Jun 13 13:01:31 2025 GMT
Not After : Jun 14 13:01:31 2025 GMT
Subject: CN=c40e61f42ef1e52e75740e474dbe2084bd3a253c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2f:17:e8:45:24:51:b8:b3:5c:6c:ab:74:5a:
a5:bb:04:a5:a0:1a:5c:4e:aa:f4:41:3e:c1:aa:7b:
db:37:7f:2a:db:d8:55:62:f3:55:87:9c:af:f7:b6:
a1:73:78:f8:22:0c:d8:96:fb:21:9d:54:2d:98:1c:
e2:2b:d5:32:68:43:f0:16:67:20:dc:78:da:20:4a:
ad:41:11:f8:e1:11:df:2a:14:8d:ce:fd:8d:85:e8:
03:89:68:f1:17:56:c7:7a:cb:c1:bf:04:87:c7:63:
21:3d:26:8e:06:ac:e8:fc:3f:fc:1b:5b:0e:5c:f3:
0b:c7:55:f6:49:34:2e:0f:b7:ec:b8:67:9b:5e:f5:
da:b8:9a:70:11:4b:f3:c4:b9:92:04:67:88:25:71:
b4:21:25:37:45:19:c6:1b:cf:95:c4:36:be:a6:9e:
b5:b3:27:75:6b:f2:70:17:5e:e9:f2:32:80:86:4d:
73:5a:7e:7c:d2:28:1f:03:bc:f6:f1:c7:52:69:28:
99:9b:b0:03:e4:f1:f6:7a:bf:65:90:59:d1:32:63:
6a:79:d5:62:46:ae:f0:bd:f5:e8:2f:58:ed:e0:e6:
03:9e:73:b3:1b:9f:3d:c2:74:7d:b1:70:c2:6b:b3:
90:42:39:54:bd:54:1c:6d:50:d1:96:5d:27:49:48:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0E:61:F4:2E:F1:E5:2E:75:74:0E:47:4D:BE:20:84:BD:3A:25:3C
X509v3 Authority Key Identifier:
keyid:9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:8b:82:ef:3e:e8:12:92:bd:84:c7:83:3b:88:8b:cd:bd:3b:
80:33:e4:5e:79:16:93:88:2b:73:21:be:b8:11:72:47:fd:7e:
e9:f6:54:42:93:ef:55:97:aa:08:6d:42:19:81:0f:02:3d:88:
b6:0a:a6:61:17:1b:31:ef:33:e3:40:92:d2:83:e4:42:a4:d3:
0b:00:cd:cc:60:dd:64:c8:47:97:0e:9e:25:ec:e1:de:8d:1a:
84:06:bc:1c:fe:01:7c:70:97:3b:d3:dc:4e:3e:9b:18:47:2a:
96:a3:c8:4d:27:9a:a5:07:5c:57:3b:81:7d:aa:62:17:ff:98:
96:15:94:6c:0e:26:11:56:a8:c7:db:b7:0c:a1:b3:28:3b:70:
0a:01:c4:da:98:66:6a:60:ed:35:c8:d4:9d:7d:b0:3e:fe:96:
02:ae:1d:c2:fe:dc:cd:5d:5c:1b:67:83:4e:f5:6e:59:f6:54:
53:cd:71:bb:5b:1b:dc:ab:b7:7e:4e:35:78:28:6c:a5:90:b8:
f2:cc:a8:1c:42:ad:3d:4f:b8:3c:68:b0:ec:9d:e6:d1:b5:95:
f6:4f:5b:ae:31:9a:aa:d7:92:40:cf:7e:5d:a6:dd:b8:bc:45:
a7:07:78:9a:f2:53:60:04:f5:27:b3:00:01:09:58:6c:74:9f:
e2:06:29:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 17:16:46 2025 by rpki-client