Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
File: 9rG5O-fUO4bWT4tLljvJFWJfI_I.mft (raw, json)
Hash identifier: l6Ik1MCfjmuEI9NRs7bai8rzw0+ZgkxNlbRFIgLqbOI=
Subject key identifier: B1:0D:60:EB:E5:60:CA:0B:44:6E:40:AD:4A:59:ED:D9:DE:FD:3E:37
Authority key identifier: F6:B1:B9:3B:E7:D4:3B:86:D6:4F:8B:4B:96:3B:C9:15:62:5F:23:F2
Certificate issuer: /CN=f6b1b93be7d43b86d64f8b4b963bc915625f23f2
Certificate serial: 01974E2040799F3BB080CED31077708308BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
Manifest number: 0210
Signing time: Sun 08 Jun 2025 06:00:25 +0000
Manifest this update: Sun 08 Jun 2025 06:00:25 +0000
Manifest next update: Mon 09 Jun 2025 06:00:25 +0000
Files and hashes: 1: 9rG5O-fUO4bWT4tLljvJFWJfI_I.crl (hash: +0nKdqr7iRGmdPVh4R1H6iESf1SPhEHQHPaF7tRKMHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:40:79:9f:3b:b0:80:ce:d3:10:77:70:83:08:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b1b93be7d43b86d64f8b4b963bc915625f23f2
Validity
Not Before: Jun 8 06:00:25 2025 GMT
Not After : Jun 9 06:00:25 2025 GMT
Subject: CN=b10d60ebe560ca0b446e40ad4a59edd9defd3e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:be:cc:8a:16:60:a8:e3:94:9c:8b:91:64:6e:
93:42:3e:81:cd:c3:1d:3b:09:62:c2:e8:f1:9e:0b:
b1:60:d7:a9:d5:85:29:b8:03:f3:b9:59:13:ac:15:
c3:1c:76:0e:08:5d:78:a1:52:2d:f5:1f:91:0f:75:
b8:5a:be:2f:57:b4:2f:67:f0:19:48:12:6a:82:eb:
0b:b9:06:01:da:e0:46:31:c7:58:23:99:10:b9:72:
59:eb:fd:41:b7:de:d1:ec:57:09:dc:4c:31:b4:f5:
a7:57:90:73:77:39:9d:bb:85:b3:10:cb:dd:98:48:
be:43:4e:2f:7b:c1:a6:41:5a:0c:ee:87:39:24:c5:
ea:87:ee:e1:02:78:e9:a6:38:58:2f:6c:cf:2d:47:
2e:e8:46:8b:82:c8:94:0d:96:8a:0a:d6:78:94:0f:
d3:15:12:38:6b:fd:f5:01:ad:05:89:42:ca:dc:0f:
7c:40:d0:80:79:d4:0c:98:22:58:2f:3a:50:9e:9c:
3e:82:fa:be:b0:2a:e7:5d:8c:6f:18:09:57:50:4d:
ed:89:0b:3a:9a:9e:11:a1:29:4b:1b:80:6e:7a:d9:
cd:f9:55:3a:59:81:03:c5:35:0e:a4:ec:fb:58:9c:
51:74:8a:89:b5:df:b5:73:ed:9f:25:e4:eb:be:9a:
c8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0D:60:EB:E5:60:CA:0B:44:6E:40:AD:4A:59:ED:D9:DE:FD:3E:37
X509v3 Authority Key Identifier:
keyid:F6:B1:B9:3B:E7:D4:3B:86:D6:4F:8B:4B:96:3B:C9:15:62:5F:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:15:1a:0b:c0:58:43:4b:bc:e0:e8:f6:c1:fa:75:a8:6d:88:
25:ae:56:85:43:bc:f0:70:89:11:91:c8:eb:95:e9:bb:fa:2a:
10:53:03:c7:60:bf:21:8f:38:53:dd:60:06:5e:e6:d5:fa:f6:
42:ea:8f:f3:c3:d7:d4:f5:b1:8a:0a:49:c9:6f:07:ab:52:a0:
76:80:2e:5a:cc:12:80:3e:9a:f1:e6:7a:0b:28:e3:68:17:37:
f2:75:b0:31:29:56:2e:a3:0d:7a:5a:fc:3b:3c:65:36:8b:39:
55:19:9a:64:b2:4f:c1:43:34:46:52:fc:d6:b4:f8:3d:36:70:
a1:5a:07:ac:3f:56:b9:48:0e:43:8d:a2:03:d0:74:55:a1:70:
4d:9a:d0:62:b5:34:e3:39:82:11:10:a6:2c:15:2f:47:49:cd:
46:9f:0e:58:f7:db:ed:09:af:1d:37:94:20:b7:b4:53:f9:25:
af:9b:ea:ec:aa:ba:19:45:47:4c:b3:06:87:65:af:65:69:5e:
0c:48:36:8c:86:94:00:45:68:88:b7:23:bd:db:54:39:54:65:
0d:5e:89:3a:8f:5e:95:92:40:2e:69:9c:fb:4a:5c:67:ec:4d:
54:ce:38:f9:7f:3c:e1:10:46:82:0d:f6:75:f2:79:4f:1b:9c:
f9:63:1b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:12:21 2025 by rpki-client