Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
File: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json)
Hash identifier: DZ3K7ugYhwJu/eFB/HN4hSYwlecUsmiTHZ11T+d4Xe0=
Subject key identifier: 7A:F5:E6:6A:26:B9:75:E2:2D:EF:7B:6F:A9:D7:E8:D9:D4:30:C3:80
Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
Certificate issuer: /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Certificate serial: 0197537DA09AD3DC326898D66D0B8B2F902E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
Manifest number: 157E
Signing time: Mon 09 Jun 2025 07:00:31 +0000
Manifest this update: Mon 09 Jun 2025 07:00:31 +0000
Manifest next update: Tue 10 Jun 2025 07:00:31 +0000
Files and hashes: 1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: tHqeYc027fg7i3O/iKE3q95PzqFPFIvNR9Z5SFPe9eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7d:a0:9a:d3:dc:32:68:98:d6:6d:0b:8b:2f:90:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Validity
Not Before: Jun 9 07:00:31 2025 GMT
Not After : Jun 10 07:00:31 2025 GMT
Subject: CN=7af5e66a26b975e22def7b6fa9d7e8d9d430c380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e2:6b:8e:77:89:bd:d7:62:5c:52:a5:9b:c5:
a1:9a:d4:35:f5:b8:d3:48:c7:da:6e:f3:c1:8a:48:
3a:ed:ea:75:34:c7:0c:f7:ea:5c:40:60:77:30:cd:
85:dc:a7:55:ac:c0:4e:5e:76:5a:a8:c0:91:da:4b:
f7:fd:ff:b9:bb:61:cb:93:00:05:cc:e3:51:3a:d3:
d0:e4:14:4e:7a:0f:f1:eb:f5:e9:91:72:fc:20:fd:
52:52:57:d0:7e:c4:bc:e2:3e:bf:16:ff:a9:60:63:
e8:9f:32:fe:95:9d:f3:8a:2a:66:5f:02:18:3c:8f:
82:1d:8e:bb:55:cf:2a:b8:dc:ff:f7:2e:d3:4a:e6:
36:a5:45:c1:3e:4b:d9:2c:b5:40:fb:63:a6:db:18:
d6:17:f6:1f:83:ee:e0:59:ba:5f:7b:01:cc:68:f0:
0d:06:d2:60:dd:44:06:53:7d:61:f1:b4:20:ce:ba:
c8:df:7f:6e:17:4c:56:a9:d1:49:34:14:f3:d6:98:
34:7e:0f:cf:cf:5b:14:ac:f6:8f:9e:35:f0:10:bf:
ae:1e:52:e6:23:07:a3:7e:f9:c3:3e:cf:01:7c:00:
60:60:9a:cf:65:39:38:e6:fc:96:df:1b:00:55:f6:
46:78:37:f0:01:2f:66:99:13:2d:0e:d3:c2:a8:53:
31:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F5:E6:6A:26:B9:75:E2:2D:EF:7B:6F:A9:D7:E8:D9:D4:30:C3:80
X509v3 Authority Key Identifier:
keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d9:6d:01:57:46:d0:fe:81:8b:87:14:ad:93:88:53:cb:cf:
69:f1:21:a6:76:19:96:c4:42:fc:22:11:34:67:74:44:a8:31:
84:13:ac:2a:1e:3c:a2:d8:f3:3f:0d:cb:23:b0:58:a3:1e:02:
e7:e2:61:84:ca:24:fa:ae:41:4f:3e:ff:ef:56:fc:6a:40:24:
63:fd:aa:f3:6c:86:b8:eb:43:71:9d:9c:63:7c:35:23:c0:63:
c0:f1:d9:92:50:31:25:15:68:50:d3:f2:39:60:02:d9:b5:7e:
a5:a8:79:33:6a:03:46:3c:fd:20:cd:dd:80:b4:65:17:d7:7e:
a4:27:bd:7c:12:aa:dd:7c:b3:b6:f0:3a:c5:71:3d:44:63:b7:
e1:42:c5:99:49:24:a5:11:90:c4:51:a0:6c:d4:4c:0a:cc:7b:
39:62:05:9a:d3:4b:d1:cc:81:bb:34:09:4f:2b:79:4d:79:6f:
4c:1a:65:1b:3a:38:d4:91:23:b5:d7:4d:f3:5e:77:81:bd:01:
2a:03:59:56:c6:dd:c3:13:5d:e3:cd:0e:ab:1b:8e:d8:2f:1a:
ce:04:fe:ed:be:d4:94:4a:ca:43:85:e5:67:ab:e8:38:1a:5d:
21:c6:83:23:45:4f:b7:39:3b:88:df:b4:47:25:b8:10:d2:ca:
68:73:e8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:28:53 2025 by rpki-client