Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
File: 88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json)
Hash identifier: VEuAx24SUaHmqumMSMQD0EBA11WcJr+iF8WQ9VdOouk=
Subject key identifier: 59:91:2C:F9:11:37:2F:34:75:CE:BA:D0:37:DD:03:BD:C8:A6:8C:02
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Certificate issuer: /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial: 019752A29D4971206C3DA75D8571244E7645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 03:01:18 +0000
Manifest this update: Mon 09 Jun 2025 03:01:18 +0000
Manifest next update: Tue 10 Jun 2025 03:01:18 +0000
Files and hashes: 1: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: 8gnVIRiI5f/cV8SJjAfyPwWQKsrnKmSw4UnxGlRSe4M=)
2: HuqhC6vYeI3U9LbLd2vPzvJJgjY.roa (hash: wSYDAGLK1hTNyvlQrxhKmWYaQ0H+BBeF5/EeuiOBKAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:9d:49:71:20:6c:3d:a7:5d:85:71:24:4e:76:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Validity
Not Before: Jun 9 03:01:18 2025 GMT
Not After : Jun 10 03:01:18 2025 GMT
Subject: CN=59912cf911372f3475cebad037dd03bdc8a68c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:01:02:a2:10:01:f6:65:05:e4:87:a8:b6:
af:91:52:b2:4f:6a:22:25:46:fb:a4:dd:88:2d:3b:
9c:87:62:3a:83:6e:a0:f8:69:e9:3a:8b:8e:b6:4e:
0e:02:b9:d9:a9:d0:b1:9c:c6:87:f8:d4:8e:7a:c5:
37:23:37:78:05:1a:22:30:33:2b:f9:a1:5b:a1:88:
72:f7:d7:bc:a3:52:76:19:18:d7:24:57:9c:dd:92:
67:90:da:2d:bd:84:62:f7:40:51:13:ff:71:ce:58:
9f:81:7a:78:16:9e:0d:2b:d3:6a:03:d2:0b:3a:8c:
e5:e2:34:c2:ec:b2:92:62:fb:5d:87:20:4c:ec:27:
87:4f:df:99:d9:49:29:d8:ba:5c:db:52:32:f9:92:
98:78:a4:53:88:6c:cc:5d:25:2c:2b:65:ca:4c:c3:
3e:20:e2:be:23:35:39:fa:f1:e4:c5:b6:03:b6:ae:
43:f6:df:55:c4:58:cb:91:bd:a7:4f:95:16:43:13:
7f:55:48:8c:11:2a:43:c4:65:93:80:00:f8:2c:99:
3b:d0:99:51:3d:71:b3:92:3c:7f:ad:3e:22:11:05:
7b:be:b2:4d:4f:a4:d5:cb:21:9e:18:cb:6a:d3:89:
f3:59:38:b5:bf:fe:55:13:96:e3:05:8a:eb:b8:b5:
1a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:91:2C:F9:11:37:2F:34:75:CE:BA:D0:37:DD:03:BD:C8:A6:8C:02
X509v3 Authority Key Identifier:
keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d7:93:59:8e:6f:13:06:80:92:71:1e:d9:65:4f:16:41:24:
97:6d:3f:3a:c9:c2:3b:24:e5:93:ac:59:28:1a:d8:68:07:85:
6d:d7:cd:26:5e:00:84:96:ce:f7:48:ae:38:47:e2:60:56:83:
11:15:38:23:84:2c:c3:2e:5e:c6:81:dc:95:8d:0c:3c:2b:e3:
2b:f3:34:26:22:8e:30:d2:5c:8a:fe:b8:81:b3:79:b8:51:0a:
f5:e5:a3:b9:b9:da:08:ef:06:c6:3a:af:6b:2a:9d:3d:26:55:
21:e8:a5:fc:1d:3b:b6:c4:eb:31:15:6a:da:0a:06:e0:97:9f:
54:b4:43:34:f5:b7:40:97:a0:3e:b3:96:c1:18:2c:3b:ce:5c:
18:93:ab:3a:a1:fe:bf:43:a1:3e:fc:07:d8:5f:73:18:bd:5c:
cc:21:5f:8b:f7:60:2f:d5:d4:57:bb:e4:69:05:43:34:b3:f5:
22:43:f1:5b:3d:dc:64:74:70:fb:27:42:d7:6d:bb:45:19:ea:
5f:bb:2b:c5:8e:16:f7:41:28:cf:35:ae:2f:6a:1d:03:16:c6:
2e:4d:39:dd:94:78:74:89:ed:b6:87:5d:a8:fe:14:0e:c9:38:
aa:e4:f8:88:2c:2b:a3:26:7c:2e:b4:0b:f4:8e:b1:2f:cd:13:
de:15:53:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:32:03 2025 by rpki-client