Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
File: CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft (raw, json)
Hash identifier: Cr8uwGStWSWrB7JWPSIYwtWTivWMpg9R9atVkN33Ijk=
Subject key identifier: E0:50:C4:E5:E5:22:49:5D:79:A3:B4:AD:23:DA:98:69:0D:09:7F:09
Authority key identifier: 09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D
Certificate issuer: /CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
Certificate serial: 01974D7BB4EF48B02F95B4C68CED412C7502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
Manifest number: 031D
Signing time: Sun 08 Jun 2025 03:00:42 +0000
Manifest this update: Sun 08 Jun 2025 03:00:42 +0000
Manifest next update: Mon 09 Jun 2025 03:00:42 +0000
Files and hashes: 1: CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl (hash: I6rajmFaEKgaFRNOb32QDBUa2cbvWXEehWwsBEoTHBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:b4:ef:48:b0:2f:95:b4:c6:8c:ed:41:2c:75:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
Validity
Not Before: Jun 8 03:00:42 2025 GMT
Not After : Jun 9 03:00:42 2025 GMT
Subject: CN=e050c4e5e522495d79a3b4ad23da98690d097f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f0:73:33:a2:a2:60:7f:dd:9a:49:e4:6a:43:
92:69:ea:00:b7:be:fd:93:d5:48:4f:ac:21:a4:ce:
47:97:e2:6c:57:e9:c7:43:aa:8e:cb:37:0c:48:6f:
4b:fe:96:19:ab:58:48:63:af:75:24:23:4d:ac:f7:
d3:f8:f2:3d:3d:4c:ba:aa:70:0e:e6:d3:fc:9c:c6:
29:09:cb:e8:b3:61:c0:fe:93:38:cc:69:17:e0:14:
36:35:e2:ae:79:ad:ce:1a:49:5f:38:e0:5b:6f:b7:
b0:46:42:85:5a:9d:cd:d3:0c:db:fa:23:d9:2d:e1:
63:96:86:4a:cf:2d:91:9a:d1:33:fe:64:10:f0:ea:
db:56:3e:df:a8:35:71:0b:7b:1e:c6:40:f4:e9:28:
76:78:7c:e1:6c:ed:51:30:1c:1e:3c:0c:fd:4f:4e:
1d:af:98:02:c5:c8:d0:bd:cc:50:e8:d8:ed:a5:bf:
ae:96:5b:ec:50:5e:86:0b:4f:fa:88:ff:c9:49:62:
a7:d8:77:72:3f:b4:db:e3:11:9f:b7:fd:ae:b9:94:
aa:48:b4:65:eb:17:73:1c:1b:d8:90:fe:9a:d4:aa:
92:68:77:91:65:f4:8e:af:53:e2:df:17:3c:8c:ee:
c2:1e:b1:37:ac:a0:42:8e:10:93:3e:ea:60:3b:ec:
58:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:50:C4:E5:E5:22:49:5D:79:A3:B4:AD:23:DA:98:69:0D:09:7F:09
X509v3 Authority Key Identifier:
keyid:09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:bd:48:5e:76:12:cc:d1:63:f8:52:60:75:cd:78:b1:65:32:
d9:69:d8:f7:b5:4f:51:5c:93:45:fa:42:a8:57:1a:d3:5e:15:
85:3c:bd:77:37:1c:68:7c:72:6e:e3:e0:f1:c5:d1:e4:25:96:
27:90:00:0e:d0:46:65:84:9e:c3:d9:11:19:97:8f:ea:ab:b0:
2e:c9:f6:56:cd:d9:2e:9e:81:81:73:38:0c:47:6e:7c:ca:57:
23:fd:11:f9:ab:f4:08:b2:d0:69:51:cb:50:bf:49:fa:51:23:
55:21:ed:43:9f:63:96:2d:73:f0:ff:6b:bc:03:26:d3:76:e1:
c6:30:22:6e:6c:83:ef:7f:da:a5:a7:17:7b:ea:54:d2:ce:59:
0d:d9:23:46:4e:4c:be:7f:8f:58:6a:be:cb:ee:ba:9c:b8:0e:
ce:41:8b:ee:e3:3f:04:4f:cf:3a:1d:23:7c:7f:46:39:81:04:
2a:0d:b8:66:1e:dd:53:9b:32:71:06:9b:2f:69:33:ac:f8:51:
af:9e:bc:82:50:29:ee:53:bb:49:37:6f:ac:9d:82:e0:69:29:
a8:ac:96:89:cc:f0:6b:69:e4:56:00:fd:3a:23:88:03:9c:ec:
3b:62:f8:0a:85:a9:44:e1:38:96:85:d0:8c:86:57:e7:9f:08:
ad:ca:16:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:40:37 2025 by rpki-client