Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
File: mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft (raw, json)
Hash identifier: wVKlQLxqb3PQQ9o2Vsf3tVLmJEGXTwpDUjRUlzhugso=
Subject key identifier: C8:ED:8D:86:3A:B0:6E:EF:49:F8:8B:A8:36:31:E5:74:BD:91:B3:BA
Authority key identifier: 98:7A:BA:6F:74:45:5C:4F:A3:AB:E2:3A:A8:23:06:7E:CF:C3:3C:48
Certificate issuer: /CN=987aba6f74455c4fa3abe23aa823067ecfc33c48
Certificate serial: 01974B1F6AA7B27C2F8C1B054A335C50E9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
Manifest number: 012E
Signing time: Sat 07 Jun 2025 16:00:39 +0000
Manifest this update: Sat 07 Jun 2025 16:00:39 +0000
Manifest next update: Sun 08 Jun 2025 16:00:39 +0000
Files and hashes: 1: mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl (hash: f5Sb6PJhARFtjKUmkVk2paQavSRpWr51NLnuoamS1lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:6a:a7:b2:7c:2f:8c:1b:05:4a:33:5c:50:e9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987aba6f74455c4fa3abe23aa823067ecfc33c48
Validity
Not Before: Jun 7 16:00:39 2025 GMT
Not After : Jun 8 16:00:39 2025 GMT
Subject: CN=c8ed8d863ab06eef49f88ba83631e574bd91b3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:35:21:34:a5:1d:31:6d:51:cb:17:41:4a:
6f:9e:70:4a:68:77:46:a6:e2:03:3d:da:49:56:81:
90:73:c8:d3:b5:21:06:32:e9:eb:78:62:bd:36:98:
fa:04:74:80:d4:45:a2:f0:35:e9:8f:58:f4:11:26:
a2:16:0c:ef:fc:96:30:26:d8:c6:74:63:3c:12:f9:
70:c9:be:35:fd:5e:94:fe:36:ec:ad:c0:b2:80:ab:
4e:49:88:e2:fa:61:3c:01:44:41:96:fa:b6:0f:d1:
57:0d:2c:3d:62:61:20:72:ee:6d:44:55:c4:24:2c:
6a:61:6a:b8:70:15:a1:22:40:7d:2b:2d:b0:e6:bc:
0d:3b:c3:55:06:45:42:06:81:51:39:b9:be:9f:96:
56:4d:b4:8f:41:63:01:5e:dd:cb:0f:51:a0:de:da:
7d:67:ed:5a:12:da:7a:fc:89:8d:2e:78:2e:2c:6f:
2a:f3:34:26:32:ae:d5:36:d1:9f:68:49:f2:4a:fe:
73:08:27:8d:f9:83:64:cd:d8:f1:b6:0a:d7:c9:59:
e5:45:d5:59:2b:1b:90:9f:50:69:a4:bd:87:5f:c2:
2b:a2:e3:af:ee:bb:50:e3:60:7b:31:97:45:f6:14:
06:cc:34:44:08:cf:cb:5c:24:10:9e:db:c6:6f:2b:
ed:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:ED:8D:86:3A:B0:6E:EF:49:F8:8B:A8:36:31:E5:74:BD:91:B3:BA
X509v3 Authority Key Identifier:
keyid:98:7A:BA:6F:74:45:5C:4F:A3:AB:E2:3A:A8:23:06:7E:CF:C3:3C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:74:ff:45:eb:09:59:09:86:2c:36:ab:a1:42:d6:00:28:b3:
fc:45:03:29:1d:be:fc:5d:ba:89:1d:a9:e8:37:60:21:94:96:
45:4c:3b:c5:1d:b9:93:13:16:93:99:fe:29:0e:66:21:05:00:
d1:d9:0d:e7:24:c3:3d:9f:7b:27:dc:22:9a:82:7b:bf:0e:17:
e3:e5:43:b3:bb:41:8a:95:31:91:da:3a:38:88:d1:64:49:93:
78:db:d3:f6:a8:bc:99:10:2b:da:e4:87:34:3b:9d:a8:e9:eb:
3c:69:8b:9d:8e:c7:11:f2:85:6d:69:29:f0:e2:96:df:05:cc:
2e:9d:78:b8:ec:3f:64:37:47:8d:c1:fc:19:18:8e:63:c4:52:
91:d2:ed:f1:fc:95:0e:32:59:93:03:37:1a:8c:e7:eb:bf:47:
38:07:78:21:b0:bf:99:ff:21:cf:3c:fa:43:8c:bb:8f:1f:b6:
38:23:4e:9f:6b:80:0d:32:47:c5:e6:c8:cf:24:66:c1:48:81:
83:f7:61:44:41:f1:14:04:1d:c3:2a:a2:75:98:db:26:f7:50:
29:a9:dd:2d:fb:ba:bb:4c:0f:47:1e:b3:56:0a:40:10:87:47:
c4:28:01:78:28:1f:0e:c4:3d:28:ec:9d:50:c5:8e:e2:02:d2:
37:97:72:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:06:23 2025 by rpki-client