
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
File: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft (raw, json)
Hash identifier: 4kiAHnomPoEQS1+/pWyG0/DFHVKJKO0f2LJ8iWObZ44=
Subject key identifier: E0:FC:9E:10:7B:3D:62:46:6D:D7:BD:0C:1A:D5:E4:52:D0:B3:6F:16
Authority key identifier: F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
Certificate issuer: /CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Certificate serial: 01974DB2DDCAF2E4087E34D778DDAD10D600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
Manifest number: 01B3
Signing time: Sun 08 Jun 2025 04:00:57 +0000
Manifest this update: Sun 08 Jun 2025 04:00:57 +0000
Manifest next update: Mon 09 Jun 2025 04:00:57 +0000
Files and hashes: 1: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl (hash: cM0X40OksxbajojqBuLT60XGblbza0FW+RAZhM0VJug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:dd:ca:f2:e4:08:7e:34:d7:78:dd:ad:10:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Validity
Not Before: Jun 8 04:00:57 2025 GMT
Not After : Jun 9 04:00:57 2025 GMT
Subject: CN=e0fc9e107b3d62466dd7bd0c1ad5e452d0b36f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:ad:ec:82:5a:99:95:7d:a6:be:c3:a8:6c:
14:33:e3:51:df:9b:3f:97:67:75:26:37:0a:76:48:
8b:2d:1e:e7:c1:36:99:48:84:b7:f0:d1:4f:6b:06:
88:c5:6e:fd:30:03:e6:65:fd:cc:8f:cf:53:8d:5e:
90:21:25:4c:36:54:39:70:23:bd:4d:69:1d:0c:67:
f7:27:8b:96:5c:af:d1:d5:58:7c:60:60:f1:21:c3:
56:fa:24:51:c0:f1:6a:41:de:9c:16:d3:49:40:b0:
f2:30:2f:37:a2:55:ba:52:bd:4c:74:0f:5a:71:31:
bf:fa:b0:0f:23:44:ec:53:3c:85:df:9c:81:d2:59:
03:33:a0:9f:41:7b:10:f1:cc:bc:6c:b8:fc:6b:6e:
d8:8d:2e:8d:81:57:4b:86:3c:81:ae:fb:93:40:a1:
09:eb:1f:3b:ce:6f:7f:86:0a:2f:5b:2a:58:cd:2b:
69:89:c1:af:05:2c:a8:fa:15:67:a3:e3:23:97:ea:
8d:70:47:2d:5d:b6:1e:14:ff:09:8f:24:91:01:43:
68:b5:8e:5f:15:70:5d:74:ef:f4:45:b8:e4:26:d7:
b7:f9:cb:2b:df:df:74:3e:bf:cc:fd:13:f9:01:a3:
21:96:c8:d6:87:aa:98:76:22:a6:72:2e:62:4b:ad:
64:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FC:9E:10:7B:3D:62:46:6D:D7:BD:0C:1A:D5:E4:52:D0:B3:6F:16
X509v3 Authority Key Identifier:
keyid:F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:aa:32:62:3c:cc:51:34:f5:35:57:7e:17:57:dd:e5:02:6c:
6a:82:f9:ec:87:60:b5:15:5b:db:73:fc:c3:3f:fe:61:ee:9b:
fe:99:59:df:90:02:b5:dc:ab:c3:a3:f5:aa:d3:04:ea:bf:fc:
72:c4:7e:d1:59:b4:7d:04:ee:55:b8:90:1c:da:03:d8:e6:66:
42:a5:b9:ea:2c:e4:db:24:06:9d:34:d0:b1:50:ec:60:ba:72:
4e:c8:d2:e0:01:5d:c8:3c:55:0d:4a:2d:31:92:bf:1a:55:1a:
00:f2:36:f9:f5:5a:62:df:20:0a:dd:fb:b2:46:d3:62:13:63:
c4:f1:90:eb:4b:94:c7:b2:ec:83:6c:12:a7:2d:f9:c1:cd:9e:
a1:a1:5f:16:9f:4a:f7:f3:b8:e8:72:5a:69:95:e2:60:1b:7b:
ec:a7:4f:90:29:f3:4d:dc:eb:db:15:3d:bc:b1:af:12:93:37:
f7:18:2a:25:94:75:17:83:72:91:91:94:c7:1c:af:f7:a3:76:
fa:6e:f5:21:56:d9:2a:24:6f:9e:ff:d5:09:8a:2c:46:76:0f:
d8:21:fa:2c:ba:ab:32:7b:ec:48:5c:86:f5:19:c9:d1:94:3a:
85:7e:af:7d:d6:99:f6:f7:35:3b:6b:ca:92:98:e0:25:2a:44:
7d:f9:7d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:13:04 2025 by rpki-client