Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft
File: B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft (raw, json)
Hash identifier: jtTvDSXG24vILLdZ38jI+rFyETS0oA8eAiU2rkZRAfo=
Subject key identifier: 72:3F:D2:33:43:69:21:5B:08:16:70:D3:3D:97:F1:43:95:43:56:E2
Authority key identifier: 07:D3:A4:E6:62:F7:12:95:67:CD:18:A3:E1:9B:E7:BA:F2:81:A4:A3
Certificate issuer: /CN=07d3a4e662f7129567cd18a3e19be7baf281a4a3
Certificate serial: 019747E7C54B75E43C8EFE402DAFAF461423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft
Manifest number: 0285
Signing time: Sat 07 Jun 2025 01:01:01 +0000
Manifest this update: Sat 07 Jun 2025 01:01:01 +0000
Manifest next update: Sun 08 Jun 2025 01:01:01 +0000
Files and hashes: 1: B9Ok5mL3EpVnzRij4ZvnuvKBpKM.crl (hash: qgCczG1DZ0XBEvwmIwUk9zc32LAdkeFABGKiS5IjqbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:c5:4b:75:e4:3c:8e:fe:40:2d:af:af:46:14:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d3a4e662f7129567cd18a3e19be7baf281a4a3
Validity
Not Before: Jun 7 01:01:01 2025 GMT
Not After : Jun 8 01:01:01 2025 GMT
Subject: CN=723fd2334369215b081670d33d97f143954356e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:b1:93:0a:9b:1b:6e:d0:92:7f:77:1c:97:
30:33:1c:4a:ab:a0:7e:4e:07:26:aa:43:3f:c1:71:
f8:07:20:d0:ca:e8:ab:6a:f2:52:a2:5f:86:29:d2:
3d:b3:7d:6d:a8:f7:6d:74:a8:d0:01:bf:4b:c8:19:
d9:ac:13:59:80:91:d8:f3:94:02:6b:31:00:f8:79:
e5:db:82:ff:04:6a:6f:c6:bf:fc:b3:84:02:dd:af:
18:8e:2b:63:7e:09:07:a6:bb:a6:13:1e:52:dd:2c:
ba:dc:8a:d8:2e:ff:2b:e4:1b:6a:3f:dc:1e:30:15:
97:90:30:b6:74:fc:ce:89:ed:b3:19:28:af:1f:d2:
b3:2c:b9:45:bb:55:4f:85:66:6f:18:9c:16:8a:28:
3e:87:4a:86:2d:9f:08:92:7f:48:84:88:f2:85:42:
0e:53:83:4f:1f:da:2b:01:1f:a1:fc:26:0a:78:3a:
e4:46:bd:69:67:10:14:f3:a5:eb:a7:da:65:0b:48:
c8:6a:98:17:19:eb:37:28:e5:5b:99:bc:2b:7f:36:
4b:58:e5:6f:2b:0f:95:78:3c:b5:fe:fc:79:9c:5a:
d6:a8:b5:18:40:58:cb:e5:89:73:95:5c:72:00:3a:
58:ac:a9:74:5a:e9:3d:0b:94:76:63:ac:b4:86:3e:
b2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3F:D2:33:43:69:21:5B:08:16:70:D3:3D:97:F1:43:95:43:56:E2
X509v3 Authority Key Identifier:
keyid:07:D3:A4:E6:62:F7:12:95:67:CD:18:A3:E1:9B:E7:BA:F2:81:A4:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:97:90:cd:f9:e4:f4:08:57:aa:9d:19:72:ff:d8:ec:25:46:
a2:21:a9:60:dd:a9:c6:0a:a8:02:32:41:55:1c:ad:42:f0:3a:
10:b8:eb:db:ce:6e:62:36:30:4c:9e:3e:03:2e:a8:20:4f:9b:
2c:16:c8:f6:da:ff:17:85:23:70:ac:74:37:8b:1e:07:38:14:
7d:38:a7:74:c9:49:f7:12:c2:f2:24:75:f9:85:6c:69:1c:87:
22:8a:fd:0c:3d:bf:2b:d5:d0:4b:5a:0d:e1:c1:1d:5f:7f:4e:
70:34:94:e5:8e:64:6f:09:24:75:15:f1:39:7d:66:5f:02:9e:
c5:b2:22:85:ba:f1:36:3a:fe:b4:4b:83:84:a8:1c:1e:c7:a1:
47:15:39:65:56:84:b2:46:8c:79:d6:19:aa:69:7f:21:22:e6:
3f:81:6a:13:77:5f:ac:d8:ba:87:6c:a4:55:54:67:da:1c:22:
fe:f7:d6:66:e1:ec:e3:4b:29:66:37:31:4f:94:b8:21:ca:94:
f7:3c:a0:7c:1b:19:b5:a9:37:26:bc:b0:eb:6d:bf:17:bc:7c:
21:d6:48:b9:38:37:2e:a4:d5:e4:d5:35:50:72:61:42:06:d8:
e0:c4:60:fa:38:44:6d:d0:0c:41:c3:58:1c:cc:6a:13:9c:1d:
c5:b9:a0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:40:59 2025 by rpki-client