
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
File: 9H1LS48bGIg-rDtJnA8EKsomsKk.mft (raw, json)
Hash identifier: MVm/FWxXhe/5jypziYmiR4aMYvfRt4lwSfgYzxgpBIA=
Subject key identifier: 4D:90:CE:77:0D:A8:E3:1C:B9:08:81:C1:93:F4:0C:9D:27:8E:F8:51
Authority key identifier: F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
Certificate issuer: /CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Certificate serial: 01974E584B3003696E0E0C4D38A7707E66F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
Manifest number: 08B1
Signing time: Sun 08 Jun 2025 07:01:38 +0000
Manifest this update: Sun 08 Jun 2025 07:01:38 +0000
Manifest next update: Mon 09 Jun 2025 07:01:38 +0000
Files and hashes: 1: 9H1LS48bGIg-rDtJnA8EKsomsKk.crl (hash: LQr7n80tv4XVQDwUMBvDcRBhSd5uRlo3r7TE2WjXf9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:4b:30:03:69:6e:0e:0c:4d:38:a7:70:7e:66:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Validity
Not Before: Jun 8 07:01:38 2025 GMT
Not After : Jun 9 07:01:38 2025 GMT
Subject: CN=4d90ce770da8e31cb90881c193f40c9d278ef851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b4:e4:01:44:2e:81:69:08:b1:88:3a:7b:da:
04:8a:91:60:36:04:87:f5:45:88:32:f0:52:38:a1:
36:ed:ca:5a:da:ed:63:17:7c:45:13:ef:71:25:19:
d1:2a:db:c9:c7:e1:d4:96:cc:c5:10:0d:2b:5c:0f:
f2:44:32:21:23:88:e4:83:8c:dc:77:b6:2f:33:9c:
e4:79:7c:0b:b5:d6:f6:7f:a6:99:c2:aa:a1:19:2d:
d1:cc:f0:0a:56:75:d2:63:ca:e9:d7:5e:09:a9:24:
34:f1:0c:77:93:7d:d0:f4:9e:9e:9f:a5:db:44:6c:
d1:46:87:24:44:1a:6c:96:d9:d0:2a:5a:78:3f:9e:
1c:53:72:64:ae:70:7d:55:00:7d:02:01:f7:38:60:
f0:f5:22:ba:85:8c:14:d2:59:a3:a9:81:df:0a:86:
a9:dc:2b:61:fa:5a:a4:f9:07:4d:48:77:1b:02:bb:
4b:9c:85:44:fb:2b:3f:af:22:06:47:12:f5:4b:03:
9f:87:db:35:84:41:5e:36:30:b4:a4:e8:4f:76:3e:
8b:fb:23:b1:9e:d5:2f:e6:67:25:16:ab:2b:e3:03:
71:55:4e:a4:51:1d:c7:5c:05:f9:e7:ff:ff:21:19:
88:76:15:b3:e1:06:9c:a6:dd:cc:48:57:f2:0b:46:
43:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:90:CE:77:0D:A8:E3:1C:B9:08:81:C1:93:F4:0C:9D:27:8E:F8:51
X509v3 Authority Key Identifier:
keyid:F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:57:7e:8b:07:d3:02:4b:a3:b8:11:40:a6:80:b1:0a:8d:74:
64:9d:d2:ef:d0:6f:45:0a:f0:1a:01:b2:a1:0c:a2:7b:47:b2:
4b:a6:1e:e1:fe:ec:6c:1c:1f:9e:b9:2d:35:5a:da:e0:95:b4:
9f:01:09:c8:4e:eb:e5:65:9c:4f:22:b6:2d:36:9a:ad:07:e6:
f6:07:0e:74:03:99:df:41:ab:a8:a4:8e:7d:e4:56:6e:93:97:
45:34:1b:7c:2d:6f:43:ac:73:c2:4a:15:44:0e:2c:30:b9:94:
91:14:62:ff:86:bb:99:b7:6d:5f:af:dc:98:92:e3:50:fb:af:
3f:20:d1:9e:79:ae:ac:cd:12:06:62:b1:ba:bb:fa:89:20:37:
79:a0:ee:dc:5a:4d:cf:d1:4f:20:c7:d7:43:ee:d2:a7:ff:54:
1a:12:9d:a5:a1:72:c2:39:3b:61:62:07:2b:da:c0:f6:16:8b:
ae:b7:1d:20:76:62:ef:36:a8:ce:89:60:2f:82:43:4e:a1:37:
cb:9a:f3:90:c6:07:48:d6:1c:f4:3c:46:98:8e:96:37:ab:cf:
04:8c:8e:20:a8:6f:72:1e:f7:24:29:4a:e0:97:5f:61:13:8a:
25:c1:1c:75:03:70:44:d3:f1:37:a3:a1:2e:cf:2b:59:f8:8d:
3b:e5:4f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:42:52 2025 by rpki-client