Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
File: 9l95H50M9str44nJRWjId0BeUUQ.mft (raw, json)
Hash identifier: 4oLQUfgULZR5dZ/Rfh7O1hG020r4A4OVQOR2wtTq4XA=
Subject key identifier: EF:B6:20:B7:3B:AF:CF:96:DB:EA:EB:B2:EA:E6:2C:9C:ED:5E:22:A4
Authority key identifier: F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
Certificate issuer: /CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Certificate serial: 01975C4A55118C172738EF8D09AA44352BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
Manifest number: 04F0
Signing time: Wed 11 Jun 2025 00:01:04 +0000
Manifest this update: Wed 11 Jun 2025 00:01:04 +0000
Manifest next update: Thu 12 Jun 2025 00:01:04 +0000
Files and hashes: 1: 9l95H50M9str44nJRWjId0BeUUQ.crl (hash: SP0GeTeQhu4gnSnkOXrqDb0G09nb8Bw+dgoibsnv3J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:4a:55:11:8c:17:27:38:ef:8d:09:aa:44:35:2b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Validity
Not Before: Jun 11 00:01:04 2025 GMT
Not After : Jun 12 00:01:04 2025 GMT
Subject: CN=efb620b73bafcf96dbeaebb2eae62c9ced5e22a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dd:f7:da:c4:c5:a9:7e:32:17:cb:d1:c4:d0:
8f:2e:a0:c1:b6:e8:58:34:51:be:60:f0:f4:02:2c:
98:83:69:9f:06:f8:29:9b:cf:ab:44:7b:2b:8e:3f:
d8:ac:fc:0d:4e:97:40:1c:d8:33:1c:ae:d8:e5:9c:
ac:56:61:04:5b:5b:cc:2f:8f:47:cf:15:81:46:ce:
f9:cc:cb:35:e4:d7:40:2c:45:da:e8:80:f2:a1:1f:
36:e6:bf:67:5d:e2:7c:22:96:62:c6:2d:7d:e6:54:
61:4b:bd:4b:5b:ef:82:6d:9e:fc:bb:90:6e:41:65:
92:c4:cb:97:9d:04:b7:bc:80:4e:4e:49:e6:3d:11:
24:ce:6e:27:7f:ce:cc:3c:18:0b:f8:8c:5c:3c:06:
86:57:09:11:69:c5:d9:73:26:c3:3a:c3:22:54:f8:
e7:f1:a2:76:ea:71:7f:a2:aa:92:a0:48:fa:12:77:
26:30:91:d1:b8:f1:bd:c0:5f:55:f3:94:a3:26:41:
da:ce:fb:15:ee:c5:94:3c:49:2c:1b:cb:fd:d6:79:
8c:32:c6:9b:ce:cf:63:ea:02:f7:88:c5:fc:e5:e2:
a0:75:8d:6c:6e:38:13:0c:06:e2:fd:3c:f7:9c:6c:
07:12:be:b6:c7:40:1a:2f:a3:c8:8a:94:71:2e:be:
8b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B6:20:B7:3B:AF:CF:96:DB:EA:EB:B2:EA:E6:2C:9C:ED:5E:22:A4
X509v3 Authority Key Identifier:
keyid:F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f9:53:e7:8a:66:93:20:09:d1:71:b7:77:a4:49:32:f7:fc:
b1:fb:35:db:16:63:3a:ee:50:e8:20:bc:45:46:3f:c2:59:31:
5b:d8:e8:37:cf:57:f5:97:71:52:81:cf:ae:1c:88:0e:da:ea:
a2:1f:85:96:30:ff:8b:d6:94:a0:91:fa:38:26:a5:c7:58:6b:
3b:af:55:b5:9e:fb:c6:af:74:67:94:7d:e4:06:7b:0e:da:6e:
75:6a:45:b2:29:95:92:d2:57:06:d5:fd:7e:d3:f1:a9:55:66:
fb:cf:a1:f5:76:ff:18:81:b9:00:33:b1:de:c3:1d:ff:4e:21:
6a:39:76:86:4d:5a:13:c2:74:d0:1c:98:89:7a:ba:8d:f9:9e:
3d:3c:03:54:b8:d4:e7:eb:48:f7:7b:0c:21:d5:38:64:15:55:
00:17:f3:a9:33:ed:15:b0:e2:d2:a4:ae:4f:a8:bc:9c:c4:a5:
d8:dd:ed:b9:db:46:22:7d:68:81:81:c9:2a:21:63:7a:13:11:
55:c6:a7:f3:a5:4c:1e:61:31:5e:0f:7c:4c:dd:14:ef:bc:1a:
fb:5c:1e:ca:52:24:c8:0a:06:a6:c3:84:fe:6f:84:36:0c:c6:
7f:be:81:5e:89:11:52:04:97:2e:ed:db:36:42:ff:d8:99:b2:
31:06:2b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:53:08 2025 by rpki-client