Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
File: E7ur4fopzNr8vU-Utcfk0NH4lH0.mft (raw, json)
Hash identifier: zzlqKoHqGcc0nDxOwIGsR5TyjqZKsIHif5s81GIlIi0=
Subject key identifier: CF:33:E2:DE:D4:36:91:8D:C0:E9:FC:F2:CF:1E:6E:36:CF:09:5C:79
Authority key identifier: 13:BB:AB:E1:FA:29:CC:DA:FC:BD:4F:94:B5:C7:E4:D0:D1:F8:94:7D
Certificate issuer: /CN=13bbabe1fa29ccdafcbd4f94b5c7e4d0d1f8947d
Certificate serial: 01974F6A5733C1ADEC8BCED2FDBD12410DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
Manifest number: 010B
Signing time: Sun 08 Jun 2025 12:00:58 +0000
Manifest this update: Sun 08 Jun 2025 12:00:58 +0000
Manifest next update: Mon 09 Jun 2025 12:00:58 +0000
Files and hashes: 1: E7ur4fopzNr8vU-Utcfk0NH4lH0.crl (hash: hIiuf0lzyBe+D/uL002ijZxHyEgr4Y+ri9kjR1KeSZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:57:33:c1:ad:ec:8b:ce:d2:fd:bd:12:41:0d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13bbabe1fa29ccdafcbd4f94b5c7e4d0d1f8947d
Validity
Not Before: Jun 8 12:00:58 2025 GMT
Not After : Jun 9 12:00:58 2025 GMT
Subject: CN=cf33e2ded436918dc0e9fcf2cf1e6e36cf095c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:41:37:65:67:a7:7d:4b:3a:6f:4a:f5:02:
aa:ea:a8:ae:dc:f7:be:87:3d:90:25:b6:b1:07:33:
cf:0f:b2:50:18:68:cb:9c:95:f7:17:66:78:10:41:
cd:93:be:68:52:31:8f:de:b6:d4:71:38:14:15:46:
dc:63:21:37:04:64:06:e1:aa:23:6b:71:c8:9a:c0:
96:e4:83:94:b1:cc:08:ce:65:4f:5f:1e:66:0e:ac:
09:32:01:41:76:85:42:2d:c3:58:dd:20:ae:98:c8:
14:1b:0f:08:17:ab:44:11:aa:81:1d:99:e8:c9:9a:
14:90:c5:35:8d:b7:20:31:2b:d5:97:3e:a3:40:e6:
44:eb:27:f9:1f:32:1a:9e:d1:b2:3c:2e:59:ec:3e:
d8:0d:57:b3:56:c9:66:82:b9:13:86:80:de:a0:04:
4d:98:26:f0:4e:9c:d2:b5:e9:cc:c7:f3:e1:c6:2e:
25:1e:5d:c2:9f:64:9c:3a:10:1a:6b:4d:8c:a7:6b:
36:58:30:e2:40:84:f1:c7:a2:d8:dc:c6:66:69:7c:
6f:05:46:8e:45:7f:d1:96:7a:8d:d8:0a:72:e9:59:
a6:44:07:85:06:05:94:09:64:f7:21:cf:16:56:83:
15:66:bf:fb:f5:25:16:e6:7c:68:0a:f5:52:ac:c3:
1b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:33:E2:DE:D4:36:91:8D:C0:E9:FC:F2:CF:1E:6E:36:CF:09:5C:79
X509v3 Authority Key Identifier:
keyid:13:BB:AB:E1:FA:29:CC:DA:FC:BD:4F:94:B5:C7:E4:D0:D1:F8:94:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7f:bc:01:2b:ec:62:54:9b:65:28:e6:11:d1:2f:6d:f9:ae:
23:45:b7:81:40:9a:59:ae:76:02:70:33:51:70:5b:82:bd:3a:
b3:23:9d:c6:6d:6e:20:94:c8:e8:96:76:61:5e:10:bf:b8:44:
73:98:c0:e4:fd:c6:bd:ae:3b:1b:76:9d:7c:69:81:03:6f:b1:
f7:aa:c6:9d:45:b0:c7:a9:bc:76:0e:c0:8d:8d:27:0f:36:50:
fc:47:be:64:eb:29:dd:4e:6b:d0:07:36:dd:a7:69:d2:47:03:
cc:9d:c4:ee:2a:94:7a:fe:c6:51:50:6e:0b:99:b0:a5:f7:04:
51:47:d5:5b:f1:ec:62:a3:36:12:d2:e0:b1:a6:fa:15:c7:a1:
3f:e2:e8:8d:d8:96:5e:25:9d:21:d9:5e:16:d9:6d:bb:df:df:
42:46:40:0e:bf:a1:c5:02:9c:41:b5:23:9c:c3:5e:c4:cd:98:
89:53:bd:ff:bc:8e:90:6d:21:d6:9a:d3:37:84:0d:06:fb:c8:
d8:d5:22:c9:a5:9e:16:1f:7a:e3:c9:44:ce:42:04:bb:3f:3e:
36:a1:2c:ce:84:4f:dd:4a:24:27:e6:3e:e3:dc:bf:08:98:0a:
2c:c0:71:41:d6:8f:fc:f1:f7:c2:5e:1a:dd:5e:f8:5a:a1:d0:
a9:b6:6c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:20:40 2025 by rpki-client