
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
File: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft (raw, json)
Hash identifier: UTdsEr9UP6DIyk+6/zWCpGLRQqMQFspdyUm2KFXG9cs=
Subject key identifier: 96:B5:5B:D6:56:74:EB:E4:50:AD:D7:F3:37:EC:6C:33:13:9E:34:0D
Authority key identifier: 9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
Certificate issuer: /CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Certificate serial: 019749D5AB29F04AA33761AB51A9A043941D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
Manifest number: 0423
Signing time: Sat 07 Jun 2025 10:00:29 +0000
Manifest this update: Sat 07 Jun 2025 10:00:29 +0000
Manifest next update: Sun 08 Jun 2025 10:00:29 +0000
Files and hashes: 1: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl (hash: GYhcLLV2sr2gtkNtSOa/KqtxFR6LYebFnLqfwyg0vm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:ab:29:f0:4a:a3:37:61:ab:51:a9:a0:43:94:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Validity
Not Before: Jun 7 10:00:29 2025 GMT
Not After : Jun 8 10:00:29 2025 GMT
Subject: CN=96b55bd65674ebe450add7f337ec6c33139e340d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:70:aa:e4:6d:0e:ff:4b:7c:38:50:8f:46:
70:3c:0a:aa:8f:0d:a5:12:fb:ba:b1:8e:bf:b4:b7:
bc:a0:c3:66:08:be:cc:68:d9:12:7a:5c:d2:45:8f:
54:80:ba:c1:e6:0d:be:f0:40:c6:e6:d0:8a:03:52:
d1:71:e5:35:c7:da:a3:7b:7c:d5:14:da:2d:71:b7:
0c:eb:53:69:22:dc:b6:22:ab:21:11:fe:ca:0c:86:
22:8b:41:1c:15:f6:41:94:92:1a:03:f0:e2:9e:17:
17:66:4f:08:34:46:6d:40:f1:23:36:e3:2b:64:38:
3b:03:a9:40:9b:41:50:25:35:c3:a6:58:a7:7b:13:
9e:4f:7b:87:eb:4a:44:47:7e:49:09:0e:41:36:af:
d9:c5:13:75:91:5f:0b:be:04:df:48:31:14:bb:3d:
53:94:0e:f3:fe:e3:ab:23:27:60:33:06:44:a0:fc:
5e:a1:d2:2e:8d:a8:68:29:1e:80:f7:81:78:5b:f3:
77:1e:6a:40:4b:34:af:6b:bc:c6:90:ca:30:53:a3:
da:83:7d:e9:26:a8:a1:6e:15:23:cc:97:42:6c:c5:
a2:06:9f:55:56:63:a8:72:2b:71:78:58:47:0a:d2:
7f:92:2b:cb:a5:c0:d6:b0:1b:c5:34:00:9f:f6:70:
3e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B5:5B:D6:56:74:EB:E4:50:AD:D7:F3:37:EC:6C:33:13:9E:34:0D
X509v3 Authority Key Identifier:
keyid:9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c6:1a:0e:c8:42:5a:c6:57:f6:05:3c:41:4c:12:56:37:b6:
5b:df:fd:e6:33:06:60:9c:b9:d8:ac:9a:8c:98:a6:73:78:49:
77:59:5c:0a:c6:d2:ea:ef:ad:70:da:dc:37:5b:e3:38:4b:d6:
a2:c3:36:b0:b8:cd:33:e5:9c:33:3f:a2:35:4b:5f:2b:41:ae:
69:ba:d3:fa:cd:58:c6:81:fc:87:b9:bb:c7:af:fe:c5:34:72:
1c:cf:c9:12:1e:22:63:5b:f2:48:32:bd:92:dd:21:38:fa:7a:
b7:ef:dc:ea:ba:15:28:9b:08:7a:1f:4a:da:f4:8a:82:66:8a:
eb:84:e4:52:3b:0b:bf:1f:02:0a:5f:be:50:d7:c1:b6:cd:40:
09:6a:61:e1:47:ee:c1:be:9c:86:2a:48:2a:e2:b6:4a:c8:79:
ad:99:06:b1:30:ca:ea:10:e9:29:b9:0b:40:69:17:e4:ae:51:
41:f0:16:cc:c9:f8:6d:40:b6:94:8c:49:8c:63:e9:ef:fc:63:
7d:c8:ee:d4:ca:49:23:de:a6:56:18:59:5b:58:bf:26:01:a4:
66:e6:fe:ad:82:d5:21:62:5e:a2:1e:87:b9:05:db:fd:13:31:
21:1f:27:f9:c7:db:2b:3f:6c:3e:a3:a0:ea:11:85:77:45:50:
67:d2:e5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:05:51 2025 by rpki-client