Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
File: Eht9Dci8pP9OdTa9OANAJCLo4mw.mft (raw, json)
Hash identifier: XHy74jMMJW8TbLFJ+guw/YGcpyrperSkNLO8JShz0ss=
Subject key identifier: B9:FF:2B:78:A2:E6:EB:AF:9A:3F:D0:82:59:5A:E5:6F:34:E7:DB:F1
Authority key identifier: 12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
Certificate issuer: /CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Certificate serial: 01974742F06AD12AEFA4C16CF629EDB36B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
Manifest number: 08FA
Signing time: Fri 06 Jun 2025 22:00:58 +0000
Manifest this update: Fri 06 Jun 2025 22:00:58 +0000
Manifest next update: Sat 07 Jun 2025 22:00:58 +0000
Files and hashes: 1: Eht9Dci8pP9OdTa9OANAJCLo4mw.crl (hash: Ngp446Wu8y0xYbunaLgGbNvgT542U1hxo6jK9ZCCYKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:f0:6a:d1:2a:ef:a4:c1:6c:f6:29:ed:b3:6b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Validity
Not Before: Jun 6 22:00:58 2025 GMT
Not After : Jun 7 22:00:58 2025 GMT
Subject: CN=b9ff2b78a2e6ebaf9a3fd082595ae56f34e7dbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:ec:82:69:7c:21:0c:13:5b:18:3f:fe:cb:
10:ca:4a:61:bb:f4:86:70:be:1f:b1:d7:0c:94:90:
c9:d7:f0:f1:42:0d:87:c3:de:59:b7:33:13:8c:46:
53:62:d5:76:e7:d4:00:70:48:68:b8:e6:b4:6b:bd:
26:bb:98:41:be:32:51:52:02:9d:3e:e9:4b:fb:80:
1e:8c:fd:95:f3:b6:13:21:1a:e6:af:ad:7a:74:a8:
30:fc:1c:8c:8d:ad:f1:20:bc:94:fb:29:17:22:bb:
a2:fd:c4:a3:04:65:4e:ce:d3:80:fa:3a:96:00:62:
9a:5a:ff:0f:55:8e:0f:e2:86:47:f3:f3:cb:a6:93:
50:8b:3e:67:da:56:7c:eb:b0:1d:57:8c:e8:55:e8:
5a:f1:1a:6b:e8:48:75:8c:00:12:d1:84:a4:ff:1f:
82:15:fa:b8:d3:1d:ce:ae:ec:88:45:25:d2:c3:7b:
ec:42:71:12:eb:0d:e1:f1:a6:de:55:5f:a4:68:7d:
36:30:3a:87:ce:b0:07:69:0f:69:c5:25:12:b8:e4:
98:bd:02:db:86:75:67:cb:01:99:38:46:d1:76:26:
b8:a6:df:d4:2b:22:fa:03:0f:78:5f:f9:ec:e9:ab:
43:5c:a2:87:a0:50:43:48:50:f3:ef:0b:2f:1d:60:
e6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FF:2B:78:A2:E6:EB:AF:9A:3F:D0:82:59:5A:E5:6F:34:E7:DB:F1
X509v3 Authority Key Identifier:
keyid:12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:31:93:8d:9f:15:20:f9:a0:3f:42:35:bd:30:f8:9e:27:5a:
d6:21:5f:6a:60:aa:ea:29:5b:e4:e5:5c:e3:c8:6d:3f:1e:36:
f7:5d:81:1b:4b:aa:a8:b0:75:c9:67:08:e4:ac:59:0d:80:ef:
c2:bf:0c:86:2b:b3:3d:82:65:f9:61:2c:05:c4:f0:ae:e6:cc:
d6:de:ae:d9:0a:36:5d:17:4d:c6:8a:59:13:3e:59:1a:6f:12:
47:fa:92:db:4c:49:35:d5:a7:23:e5:d6:71:9a:14:a0:bd:89:
82:c7:d4:08:8c:c5:33:b2:c3:c1:57:d9:ca:c6:94:f9:de:d7:
fb:95:60:06:82:17:29:df:35:a4:f1:49:bc:1e:6e:f1:04:71:
11:81:d3:5e:4c:88:7b:b4:fe:0e:e5:aa:ae:ac:79:db:06:a9:
bc:78:36:47:8e:8c:9a:29:43:4f:bc:18:41:73:fe:c8:80:cd:
ba:71:48:71:11:01:54:e4:31:50:24:95:19:f0:80:aa:06:0b:
4c:6f:c7:db:38:ae:9c:2f:78:77:d2:82:30:ad:14:e9:fc:4b:
7f:f0:72:49:bb:aa:54:4f:a7:c4:67:c2:dd:ab:6d:98:98:34:
a0:8d:0a:46:f1:03:b0:4b:bb:01:cb:6e:bb:04:57:75:8e:1e:
42:26:62:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:54 2025 by rpki-client