Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
File: MtYmm4lSBJZffsl_Gdi12ckwt40.mft (raw, json)
Hash identifier: +sO142OWpVilOh2CYaqqKkcvfnOw8CoBaXZxBhkvJ/Q=
Subject key identifier: 81:F1:FF:80:4F:9B:D9:C4:73:F5:71:BF:0B:27:39:FA:E7:1E:24:5B
Authority key identifier: 32:D6:26:9B:89:52:04:96:5F:7E:C9:7F:19:D8:B5:D9:C9:30:B7:8D
Certificate issuer: /CN=32d6269b895204965f7ec97f19d8b5d9c930b78d
Certificate serial: 019748551F0366DC2736229126A6EA401A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtYmm4lSBJZffsl_Gdi12ckwt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
Manifest number: 30
Signing time: Sat 07 Jun 2025 03:00:27 +0000
Manifest this update: Sat 07 Jun 2025 03:00:27 +0000
Manifest next update: Sun 08 Jun 2025 03:00:27 +0000
Files and hashes: 1: MtYmm4lSBJZffsl_Gdi12ckwt40.crl (hash: G0h+Qio7CPtdHzoOLykHSIWWAg2PiwsUfTpQe9gL7As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtYmm4lSBJZffsl_Gdi12ckwt40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:1f:03:66:dc:27:36:22:91:26:a6:ea:40:1a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d6269b895204965f7ec97f19d8b5d9c930b78d
Validity
Not Before: Jun 7 03:00:27 2025 GMT
Not After : Jun 8 03:00:27 2025 GMT
Subject: CN=81f1ff804f9bd9c473f571bf0b2739fae71e245b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:b5:2d:52:7a:2d:ba:5a:84:eb:82:b1:fa:
1f:86:5c:a8:52:93:b1:db:c5:a6:b5:30:70:bb:11:
ff:f8:f4:4f:10:d4:39:8d:42:19:1a:c4:fe:bb:b6:
60:1b:5b:a3:35:68:35:b0:4b:23:58:69:1d:09:32:
44:e9:a5:39:72:3e:c1:8e:75:2e:27:81:01:73:7b:
83:ef:74:65:c8:b0:5f:02:af:5e:82:97:8a:13:22:
78:e0:4e:86:e0:de:00:a5:f7:7f:42:ab:db:87:f2:
51:47:8f:31:31:1c:04:29:e6:8f:15:9c:9a:cc:5c:
81:c9:3c:df:3c:9c:13:c3:7e:a3:2b:eb:c4:a7:bb:
d5:ff:99:52:f5:fb:95:d6:e1:41:9e:73:6b:9f:7e:
be:10:14:40:58:b9:9d:6e:29:7d:b6:5f:c3:be:ed:
58:da:69:7f:94:08:a7:8b:1a:6d:04:30:aa:e1:bb:
01:69:5f:58:fc:5b:7f:8d:4f:aa:eb:d7:61:c8:72:
ce:57:66:7e:f1:46:d2:06:d2:9a:0f:f3:62:0c:98:
2c:da:46:13:43:ff:6d:b9:73:82:15:1e:09:69:15:
59:ea:e3:b2:f9:5f:26:86:53:7d:7d:2b:ba:da:9a:
b7:59:b7:b5:fa:e3:41:a6:df:a4:ac:ba:b6:fd:42:
65:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F1:FF:80:4F:9B:D9:C4:73:F5:71:BF:0B:27:39:FA:E7:1E:24:5B
X509v3 Authority Key Identifier:
keyid:32:D6:26:9B:89:52:04:96:5F:7E:C9:7F:19:D8:B5:D9:C9:30:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtYmm4lSBJZffsl_Gdi12ckwt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5f:d3:f5:c1:bb:5c:70:c9:d3:4d:1a:cd:8d:e9:dc:9a:c3:
46:e7:79:89:c9:dd:84:6e:fb:94:20:af:45:2d:da:29:16:8c:
2c:a5:f7:c6:99:ce:f4:2b:96:33:d2:bd:f9:de:71:f8:e1:82:
9d:f1:fb:c4:b4:ba:27:1d:67:67:4e:aa:16:2a:68:b0:c9:cf:
ea:0c:53:0d:d5:6e:c4:03:70:00:74:f7:07:7f:51:97:cf:ca:
5b:8a:29:0a:e2:e2:a2:93:a6:62:b6:78:a9:2d:a9:be:48:a0:
2f:28:d7:de:a3:12:95:a1:6a:93:5c:7b:ac:29:9a:56:70:df:
4f:21:bf:29:35:5e:fd:ba:72:7c:e1:de:b7:fc:03:1f:43:35:
ec:df:0c:47:fb:e6:98:b4:fd:72:74:ba:87:a0:a0:a0:6c:57:
73:73:d7:17:ce:a4:10:45:8e:83:6f:19:0b:bf:aa:ec:c0:cf:
a0:40:fa:ef:ed:5e:a2:3f:71:91:66:d7:09:7e:cc:20:ec:ca:
8e:2e:34:2c:8a:9c:4e:3a:64:03:c9:1d:b2:24:f5:98:5e:c8:
10:18:58:d7:33:2b:4d:83:97:f2:93:b1:6a:cc:21:df:46:26:
f9:38:6a:22:0e:70:bd:68:8a:45:d4:2d:a6:63:c7:99:e1:68:
a6:f6:64:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:25:38 2025 by rpki-client