Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
File: mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft (raw, json)
Hash identifier: 0SjVP4u8lJg7E/9rvKxdCux+2iMZrVCtvWy9s4gFhe4=
Subject key identifier: A4:3A:63:8A:D7:8D:CC:88:A4:4A:58:CF:92:2D:6C:19:E0:91:CB:C6
Authority key identifier: 9B:13:4B:6E:90:24:06:4B:90:57:28:34:89:BF:2C:43:6F:40:75:E8
Certificate issuer: /CN=9b134b6e9024064b9057283489bf2c436f4075e8
Certificate serial: 0197488D20269127B6F03A4EEF5159FE6F8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
Manifest number: 06D7
Signing time: Sat 07 Jun 2025 04:01:37 +0000
Manifest this update: Sat 07 Jun 2025 04:01:37 +0000
Manifest next update: Sun 08 Jun 2025 04:01:37 +0000
Files and hashes: 1: mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl (hash: caoj/boMLA+snNaxaCUcwRHkprpENiRdmnGFhAu7bzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:20:26:91:27:b6:f0:3a:4e:ef:51:59:fe:6f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b134b6e9024064b9057283489bf2c436f4075e8
Validity
Not Before: Jun 7 04:01:37 2025 GMT
Not After : Jun 8 04:01:37 2025 GMT
Subject: CN=a43a638ad78dcc88a44a58cf922d6c19e091cbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:3f:2b:30:27:64:b9:5e:fe:a0:b4:3b:b1:
ab:bf:d6:b4:dd:08:80:0e:8a:92:f1:08:a2:7b:0b:
56:e7:59:a3:27:d0:0f:bc:0b:d1:68:95:66:75:55:
f0:97:ae:38:84:8c:b8:c4:93:08:e7:56:86:f2:09:
eb:8d:16:9d:06:e0:2c:94:ef:8f:6f:9f:d6:f1:de:
26:5e:3b:44:2e:ab:84:55:75:b0:fb:38:1d:59:c8:
7c:9d:58:72:7a:60:de:c2:e3:1e:7e:50:90:41:2b:
7d:59:f9:f1:d7:07:4c:e4:72:1b:6c:0a:59:a0:5f:
22:f8:ac:bc:cb:74:43:a0:93:80:c1:c3:c5:bf:14:
c5:c6:c5:54:c1:99:a3:b4:3b:8a:e3:63:ef:20:dd:
c7:8f:d2:e8:52:8f:5b:74:be:9d:42:89:ac:f3:f7:
85:81:da:fe:c6:eb:62:51:44:97:af:97:8e:d9:cd:
98:80:70:a3:c0:bf:0b:d6:cb:af:15:d7:fc:a6:ec:
06:1b:aa:35:a8:64:55:b8:65:36:cc:94:1d:87:0e:
0c:59:75:a9:a6:64:c3:ae:5b:2d:ef:d5:f6:c6:c2:
58:af:35:bc:18:ef:3a:4e:c7:4d:50:7b:42:68:92:
99:32:83:1e:a7:43:56:d0:1f:6a:f2:2a:e1:ca:50:
73:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3A:63:8A:D7:8D:CC:88:A4:4A:58:CF:92:2D:6C:19:E0:91:CB:C6
X509v3 Authority Key Identifier:
keyid:9B:13:4B:6E:90:24:06:4B:90:57:28:34:89:BF:2C:43:6F:40:75:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ca:c3:75:59:37:5b:72:26:01:df:1c:e1:ab:c3:46:5e:a5:
a7:05:e2:53:39:9e:62:e1:c4:c0:8b:4f:f9:b0:aa:86:fe:a8:
29:c7:19:93:e4:5f:9b:3f:58:38:22:e4:83:a9:30:00:f8:94:
ec:59:10:56:ce:b2:d5:e6:56:4a:61:d1:b7:f7:df:fd:c8:b5:
ef:a7:3c:ad:f8:cf:be:e4:70:38:b7:11:a7:79:27:56:e6:e9:
ca:05:28:c7:9f:6f:fe:15:5b:cd:e5:54:4e:16:0c:f4:71:08:
ec:03:6d:75:f8:53:be:b7:b4:33:26:41:b5:40:45:cd:e1:92:
6c:93:74:a1:5d:d6:98:5f:12:09:5d:89:8b:eb:b5:47:82:f3:
94:40:41:d9:bb:35:85:13:9e:f2:d4:dd:45:73:3e:53:83:e6:
fd:bf:2b:66:64:5b:a5:65:b7:ce:b5:ee:b4:5d:3d:12:6c:ae:
f5:27:15:2a:94:fd:82:14:7e:88:5d:21:c3:e7:7b:64:71:6e:
41:d1:b9:c4:8a:50:5f:95:42:f7:1a:7c:64:4d:76:67:84:1c:
af:55:57:06:22:d1:e5:f7:ed:00:47:06:ab:41:57:ff:cb:b0:
32:6d:53:b0:33:64:f0:16:95:4f:1b:2c:4f:ca:c6:aa:f3:ec:
39:dd:a4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:52:33 2025 by rpki-client