Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
File: moI9HNrrg3dfH7vV-frkGsXfFxk.mft (raw, json)
Hash identifier: E7K4rRGP+EYClbyNB1N5g0ionULTk8geHP0azMYbyG0=
Subject key identifier: 40:D8:3C:CB:68:7A:A8:E2:9D:4C:95:C4:E7:9A:4D:00:7E:85:93:0A
Authority key identifier: 9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19
Certificate issuer: /CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719
Certificate serial: 019748FABE09FABE51C68654BEC385297586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
Manifest number: 05B4
Signing time: Sat 07 Jun 2025 06:01:21 +0000
Manifest this update: Sat 07 Jun 2025 06:01:21 +0000
Manifest next update: Sun 08 Jun 2025 06:01:21 +0000
Files and hashes: 1: moI9HNrrg3dfH7vV-frkGsXfFxk.crl (hash: HSNRw8MAfSXfzhO/KBWhaFsNVlUdCoGKBKQBxJPw50w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:be:09:fa:be:51:c6:86:54:be:c3:85:29:75:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719
Validity
Not Before: Jun 7 06:01:21 2025 GMT
Not After : Jun 8 06:01:21 2025 GMT
Subject: CN=40d83ccb687aa8e29d4c95c4e79a4d007e85930a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:e0:3a:53:c8:7e:8e:78:2f:a7:cb:4f:20:
0e:3b:6a:da:80:ea:07:0b:de:61:e3:5c:df:cc:7e:
b9:33:03:29:c9:3b:f6:f7:2f:3c:19:8b:35:0d:bf:
17:7b:85:ef:9f:c8:8d:39:aa:f0:f6:e8:f8:49:29:
61:59:dd:bb:04:eb:31:5f:50:12:a1:92:cc:d8:e3:
3f:55:6f:99:18:00:43:fb:d1:ba:1d:05:29:2c:d9:
5c:b2:49:de:11:13:73:46:4c:69:b6:28:a7:ea:1f:
81:39:74:56:82:4d:c1:6e:9b:4e:4c:57:60:24:5c:
c8:5f:13:9b:e4:3d:37:15:50:19:82:05:a3:42:4f:
66:90:c8:53:2b:74:3c:55:16:9b:1f:d1:9f:63:21:
af:5a:ed:35:b3:86:f7:04:0a:9c:1b:ae:7e:77:f5:
48:12:4f:42:8f:bd:77:7f:3b:32:30:98:6b:c9:fc:
e2:c6:e3:38:47:31:b9:9c:4f:f3:ae:44:b6:8f:51:
66:cd:b0:d1:8b:67:45:75:83:95:9c:ad:19:0c:4b:
9d:91:7d:3c:c2:df:1c:e8:fa:72:2b:a9:38:99:92:
2e:c4:d7:30:4a:68:5b:f4:72:22:43:65:9a:b4:e0:
86:07:bf:d5:3e:bd:5f:c8:16:61:ac:48:54:57:24:
d6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D8:3C:CB:68:7A:A8:E2:9D:4C:95:C4:E7:9A:4D:00:7E:85:93:0A
X509v3 Authority Key Identifier:
keyid:9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0d:2f:be:b6:9b:6b:04:88:56:4e:f7:7a:b2:f9:05:ff:9b:
7f:c2:71:71:a8:df:e2:71:ba:4b:15:95:85:3b:57:09:f5:22:
6e:57:17:52:d6:d2:fd:e3:40:5e:29:4e:6f:d4:b5:f6:10:91:
f9:b2:6e:d2:ae:ce:55:ee:a9:37:0b:ef:64:71:27:26:f0:99:
60:b1:05:37:25:09:ba:03:fb:47:9e:59:b8:ba:fb:8e:9c:3b:
37:f3:89:45:ed:6a:0f:7c:c0:4c:03:c0:41:f6:4d:3a:a1:ec:
e8:1d:9a:9e:27:3b:f2:a9:57:37:a7:dc:33:dd:df:25:5d:be:
58:b2:0d:6f:33:f0:63:45:12:3c:60:c3:cf:ca:18:ee:fd:83:
74:64:5c:4b:ed:1f:6f:f1:20:c8:c4:92:88:05:d9:e1:fe:9c:
c6:d7:67:5a:cd:48:54:77:1f:01:b2:88:38:5c:a4:04:b4:b4:
df:a6:ca:67:47:4a:8d:a2:82:f9:38:8d:78:6d:78:75:40:13:
5d:a6:a1:65:87:25:7d:6c:64:a6:8c:1a:79:99:26:fe:0b:e9:
3b:52:60:93:10:e7:0b:d4:bf:e5:13:f6:0a:90:8c:f9:c1:b4:
ac:3d:fe:16:f1:6d:8f:6e:cf:34:c8:d0:6e:39:6d:3b:87:de:
c2:f8:6f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:11:01 2025 by rpki-client