Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.mft
File: U3XfISulmO4KW_aAsh9QxPx9aOE.mft (raw, json)
Hash identifier: QwaH+tZTiEKGB69tkKbnURmmeXNJqS4tuY3auZoQWng=
Subject key identifier: 7F:DB:FB:94:38:26:05:5A:3C:F1:1C:7A:00:23:9B:26:9E:BA:1B:8F
Authority key identifier: 53:75:DF:21:2B:A5:98:EE:0A:5B:F6:80:B2:1F:50:C4:FC:7D:68:E1
Certificate issuer: /CN=5375df212ba598ee0a5bf680b21f50c4fc7d68e1
Certificate serial: 019748FA4D349F8B0A6EC9C8BB64386B569F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3XfISulmO4KW_aAsh9QxPx9aOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.mft
Manifest number: 0D16
Signing time: Sat 07 Jun 2025 06:00:52 +0000
Manifest this update: Sat 07 Jun 2025 06:00:52 +0000
Manifest next update: Sun 08 Jun 2025 06:00:52 +0000
Files and hashes: 1: U3XfISulmO4KW_aAsh9QxPx9aOE.crl (hash: lEmadCJKGxueyucIqw0/h1hShIH1X5IYGULpNCtnkUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3XfISulmO4KW_aAsh9QxPx9aOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:4d:34:9f:8b:0a:6e:c9:c8:bb:64:38:6b:56:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5375df212ba598ee0a5bf680b21f50c4fc7d68e1
Validity
Not Before: Jun 7 06:00:52 2025 GMT
Not After : Jun 8 06:00:52 2025 GMT
Subject: CN=7fdbfb943826055a3cf11c7a00239b269eba1b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:24:36:a4:d1:8b:54:dd:38:a5:df:34:17:
6b:c7:64:ff:61:63:79:90:2f:fe:75:8a:a4:6d:94:
73:ae:51:65:4d:9b:b2:87:9e:a8:5f:c0:be:98:3d:
de:63:a2:9f:f3:a6:24:77:26:af:e6:bf:77:39:87:
40:b0:44:c0:c7:aa:9f:c5:6d:4d:54:75:7f:24:d7:
bd:e8:2b:a6:7b:bc:0a:1e:66:27:22:76:04:1e:ca:
14:de:55:08:f8:90:8c:91:61:10:1b:8f:97:4a:e6:
f6:21:b8:fb:cd:75:0f:06:af:ef:8b:df:b0:23:6d:
af:90:67:f4:40:56:cd:38:b1:d8:4d:6b:a2:a0:04:
7c:c8:33:77:2b:e5:80:d2:12:0d:8c:99:33:cc:63:
0c:3a:46:50:ce:0d:3a:ed:61:76:37:a1:6b:ff:5a:
ee:53:75:00:5d:7a:ec:6d:62:14:dd:f0:ba:d2:bf:
c1:c3:e6:6c:28:7c:c7:27:6a:86:59:1f:60:fc:4e:
1a:cf:66:38:12:e5:c8:b4:0e:ce:c4:fb:2e:c0:9f:
30:0f:af:32:58:f0:b1:93:44:8f:3d:f5:5d:c8:1f:
54:65:ae:88:3e:4b:4d:f1:47:44:34:cb:09:18:bf:
8b:76:6c:66:3b:e7:43:16:70:da:36:17:48:fc:a1:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DB:FB:94:38:26:05:5A:3C:F1:1C:7A:00:23:9B:26:9E:BA:1B:8F
X509v3 Authority Key Identifier:
keyid:53:75:DF:21:2B:A5:98:EE:0A:5B:F6:80:B2:1F:50:C4:FC:7D:68:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3XfISulmO4KW_aAsh9QxPx9aOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:05:6a:5a:2f:5c:11:d9:d3:9d:22:e6:28:de:78:ff:6d:df:
79:29:7b:e6:bc:35:7a:64:62:fa:a5:b9:b7:63:d2:16:88:1d:
56:78:e1:37:53:21:ed:02:32:7d:a6:1b:37:b2:4d:01:f8:bf:
19:4d:68:a8:94:81:df:de:86:ad:48:29:0b:03:39:c6:c6:05:
55:92:4d:27:77:95:7b:4c:85:b4:08:7d:74:49:91:01:df:27:
6e:34:d7:11:7b:54:34:3a:f4:e0:e2:57:29:29:bc:17:da:08:
60:5c:aa:7b:2a:2b:a1:85:12:4c:93:b9:37:ec:91:49:62:11:
01:29:23:09:57:af:14:f8:64:93:a5:97:f7:0b:5e:26:a6:24:
22:34:4b:53:0a:cb:2b:7f:0f:06:aa:eb:3a:67:9e:f9:f8:79:
8c:aa:75:60:a7:e0:be:4f:09:72:d6:47:57:5a:d8:4c:cb:dd:
69:14:68:dc:db:69:5e:32:e4:ae:34:d9:1f:ec:1c:28:3f:4e:
95:e5:32:fa:0f:de:96:f4:7a:1f:f8:b5:10:da:94:11:43:db:
f0:67:06:e1:38:4f:ef:ea:ca:26:9d:90:66:b7:0e:ff:44:ee:
85:9d:f9:07:9d:07:3c:10:48:3d:89:c6:e2:db:72:85:90:71:
91:1c:e4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:41 2025 by rpki-client