Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.mft
File: 9oUCGMB4Hne2SXXDTBalwSm3nrk.mft (raw, json)
Hash identifier: 93uRVMwagkxlJ7jf9YPUIqs7UmwYeKTwEWn1i9B8Qco=
Subject key identifier: 4E:C8:5F:CA:95:5F:A5:15:0F:E0:49:5E:57:3F:17:71:E2:03:6A:40
Authority key identifier: F6:85:02:18:C0:78:1E:77:B6:49:75:C3:4C:16:A5:C1:29:B7:9E:B9
Certificate issuer: /CN=f6850218c0781e77b64975c34c16a5c129b79eb9
Certificate serial: 0197469D9637B9F49B60210D2D79A4EA25CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oUCGMB4Hne2SXXDTBalwSm3nrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.mft
Manifest number: 94
Signing time: Fri 06 Jun 2025 19:00:22 +0000
Manifest this update: Fri 06 Jun 2025 19:00:22 +0000
Manifest next update: Sat 07 Jun 2025 19:00:22 +0000
Files and hashes: 1: 9oUCGMB4Hne2SXXDTBalwSm3nrk.crl (hash: ebm9YRMCU2NExKv42sdP6HZ+jZFpuD4k2Sgeuqe69eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oUCGMB4Hne2SXXDTBalwSm3nrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:96:37:b9:f4:9b:60:21:0d:2d:79:a4:ea:25:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6850218c0781e77b64975c34c16a5c129b79eb9
Validity
Not Before: Jun 6 19:00:22 2025 GMT
Not After : Jun 7 19:00:22 2025 GMT
Subject: CN=4ec85fca955fa5150fe0495e573f1771e2036a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:cb:37:21:6d:0f:e0:2d:4a:0f:90:ec:3d:
31:b6:2d:cd:82:40:92:96:28:81:84:4c:5b:d5:9d:
fe:d3:3b:8d:73:c9:ed:d7:00:36:e5:1a:2d:f1:cc:
d0:76:d3:71:24:a2:30:02:b0:ba:f4:1d:e9:0b:78:
1f:0f:5e:ad:2b:df:1c:68:31:77:7b:02:83:bd:ae:
f3:b5:49:c9:20:0a:81:1c:0e:eb:a0:9b:e9:21:75:
01:76:8d:b1:37:7b:d9:44:ff:5e:c8:f6:f8:5c:44:
49:a4:c7:75:be:eb:df:5f:a0:5e:92:ae:cc:b1:8c:
81:fe:ec:ef:f1:e9:54:3e:cb:c9:aa:61:6e:53:eb:
a9:db:02:8b:89:97:52:d4:4e:f3:00:86:24:33:91:
07:6b:fd:1c:c4:a6:a8:00:46:74:fc:dd:56:b8:91:
5f:fc:e3:69:6c:64:a1:3f:d5:56:1e:d2:72:c9:00:
61:1a:24:80:31:9e:bb:83:8a:45:72:03:92:09:60:
2e:f9:35:b5:d7:26:2e:80:a8:8b:7f:f0:95:09:8b:
c4:d8:e3:ed:85:d9:bd:0a:8f:7a:40:d0:23:cd:b3:
86:1b:27:cb:84:c5:b9:99:24:af:f0:4a:11:76:96:
77:b5:1d:71:22:b7:fa:45:fd:b6:4d:d7:36:67:21:
6a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C8:5F:CA:95:5F:A5:15:0F:E0:49:5E:57:3F:17:71:E2:03:6A:40
X509v3 Authority Key Identifier:
keyid:F6:85:02:18:C0:78:1E:77:B6:49:75:C3:4C:16:A5:C1:29:B7:9E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oUCGMB4Hne2SXXDTBalwSm3nrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:17:85:b0:87:b2:54:e9:e5:df:82:ce:76:c6:1d:1e:60:dd:
a3:2b:25:db:42:62:c7:f6:98:b4:b7:01:17:db:46:87:40:8f:
96:c6:a5:b7:db:26:41:36:8e:df:c6:83:29:4d:03:8f:c7:af:
29:51:71:e3:af:fd:7d:3e:48:07:0d:1b:42:43:41:1c:24:7a:
66:fc:f9:66:f7:24:e1:9f:65:96:64:c3:5c:96:b2:de:c8:b7:
d5:db:0a:04:92:5b:98:87:3a:98:b4:01:71:b2:4b:0b:c0:ba:
49:99:0e:13:13:2a:c8:4f:c0:a5:6e:e1:76:69:d2:26:d1:a9:
7e:ae:0b:1e:c2:7a:31:5e:38:5c:d3:45:c1:0d:b0:19:a1:fa:
57:71:60:f2:8a:68:c0:56:63:5a:75:44:67:0c:a6:d5:18:04:
d7:ff:b4:ad:9c:0d:f5:0a:75:62:a9:4b:36:bf:c9:19:e9:36:
f6:6f:33:df:f8:de:89:61:d3:15:7a:25:d5:2d:19:e0:a5:81:
83:3d:3b:28:17:a1:54:13:bb:00:1a:16:04:c1:75:25:fd:c5:
07:30:d0:f4:a5:b9:1c:ab:c4:5a:5b:9e:0c:af:ff:0c:c7:5f:
d8:e4:10:4e:fa:0e:b9:7d:fa:70:f3:4b:83:1f:f5:55:63:95:
ea:9e:5f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:36 2025 by rpki-client