Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
File: 9l95H50M9str44nJRWjId0BeUUQ.mft (raw, json)
Hash identifier: 6zYjccMNXqJdV84Ja57PBvqbi3YzUEbGSFma1qTxB2E=
Subject key identifier: D1:47:24:C7:77:9C:05:1C:59:F8:21:DC:9C:3C:02:18:ED:8E:D5:B1
Authority key identifier: F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
Certificate issuer: /CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Certificate serial: 01975E38008BB6A31ACE668A0B61F755D2E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
Manifest number: 04F1
Signing time: Wed 11 Jun 2025 09:00:17 +0000
Manifest this update: Wed 11 Jun 2025 09:00:17 +0000
Manifest next update: Thu 12 Jun 2025 09:00:17 +0000
Files and hashes: 1: 9l95H50M9str44nJRWjId0BeUUQ.crl (hash: M1s6kXKiYLgNi/XZoTscVNVww1RJtJIbPV7Sm97vU2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:00:8b:b6:a3:1a:ce:66:8a:0b:61:f7:55:d2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Validity
Not Before: Jun 11 09:00:17 2025 GMT
Not After : Jun 12 09:00:17 2025 GMT
Subject: CN=d14724c7779c051c59f821dc9c3c0218ed8ed5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:f3:0f:5a:67:36:22:3d:75:d5:84:3c:a4:
45:7b:d2:eb:fb:1f:ff:ba:36:06:05:d8:1e:e9:8f:
06:72:f5:f8:eb:5b:12:24:15:df:f8:93:e9:0f:44:
10:3b:2a:f0:80:d9:9e:69:d5:b3:b2:4e:50:20:37:
94:26:aa:a3:b3:28:3a:85:6c:84:4b:af:5b:e7:11:
32:17:18:45:82:03:16:30:ea:f6:c7:0d:e5:fa:d1:
96:92:c1:94:89:6d:42:bb:4f:6e:44:f0:31:ec:1c:
c7:d4:d6:b8:67:04:16:fb:57:79:a6:82:ec:58:71:
5c:7d:57:5f:92:8c:8f:f6:a7:e2:b9:52:39:af:b9:
43:40:bc:58:56:d1:f3:5c:ea:3f:10:03:f2:f9:47:
e2:d8:e6:36:a3:f7:08:e8:df:50:6a:25:c8:41:73:
e5:48:73:8f:6e:51:f1:3a:79:6b:ab:d3:9d:a3:bf:
2b:1c:68:57:23:c8:90:b1:e8:2d:33:2e:fe:eb:e4:
fa:7f:1b:9e:0e:ea:52:28:f7:ea:65:12:69:4d:ac:
0a:cd:9b:e6:6f:a0:30:92:51:14:3c:4b:8a:87:d7:
09:e7:e0:6d:c1:84:8b:f4:4e:d2:3a:6c:12:8a:25:
c2:b8:30:ec:b0:b6:9e:f1:02:ee:6e:8c:53:70:30:
4b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:47:24:C7:77:9C:05:1C:59:F8:21:DC:9C:3C:02:18:ED:8E:D5:B1
X509v3 Authority Key Identifier:
keyid:F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:19:95:e8:0e:09:67:d1:30:2a:bd:dd:89:6e:03:c5:6a:bc:
98:78:87:90:8b:24:d8:a9:c8:69:13:92:c0:df:b6:ea:1e:a2:
6b:7e:dd:72:c5:32:d5:50:db:59:5b:4b:c5:80:58:18:38:2f:
03:4b:3f:97:07:a7:41:2c:88:86:c3:5d:df:c1:83:bd:be:c3:
42:c3:db:6e:98:64:4b:8c:d4:56:95:01:8b:62:22:b2:2e:b8:
d0:4f:b4:be:71:6a:b0:d9:40:42:65:59:0e:3f:11:88:3e:e9:
63:d1:66:2c:ac:fe:5b:3b:f2:82:5a:94:d4:73:c0:64:44:42:
0d:b4:95:31:eb:5f:8d:aa:43:ef:ed:96:c8:c8:47:9e:51:ed:
7a:de:8e:fc:e6:54:55:14:2d:13:3f:b2:b0:fb:51:3f:52:a1:
68:d9:93:e3:7f:d7:4b:2b:f7:8d:fa:04:fa:a1:2a:94:2e:6b:
fb:3b:1e:5e:e3:11:cf:ab:6f:0d:c6:fb:5d:af:ac:c5:7b:f4:
a5:3c:7e:6b:63:83:8e:ef:63:e7:0e:d8:46:b1:c2:8e:d3:9a:
69:c1:ff:39:4e:5b:cb:4f:be:b0:21:2f:93:1e:83:e6:54:69:
89:49:35:be:a5:3d:50:50:15:15:7e:b1:ca:b5:19:35:6a:ec:
26:05:41:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:02:56 2025 by rpki-client