Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
File: aBHhJcs1cHby-jE4yT6aJoGxeJM.mft (raw, json)
Hash identifier: wNIZobN+1WIhP7vlr6zqQTUt+31IjcpRXRw/y4FhdRg=
Subject key identifier: F2:6E:88:24:E3:CC:C7:A9:BD:81:97:3B:FE:35:51:1E:C5:58:D9:F5
Authority key identifier: 68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93
Certificate issuer: /CN=6811e125cb357076f2fa3138c93e9a2681b17893
Certificate serial: 01974A7B343E48443789D0292D014B39060D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 13:01:17 +0000
Manifest this update: Sat 07 Jun 2025 13:01:17 +0000
Manifest next update: Sun 08 Jun 2025 13:01:17 +0000
Files and hashes: 1: aBHhJcs1cHby-jE4yT6aJoGxeJM.crl (hash: YRoztSAVdn1kffZIpz4tK19cDAU472FaHRyAeAuTmPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:34:3e:48:44:37:89:d0:29:2d:01:4b:39:06:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6811e125cb357076f2fa3138c93e9a2681b17893
Validity
Not Before: Jun 7 13:01:17 2025 GMT
Not After : Jun 8 13:01:17 2025 GMT
Subject: CN=f26e8824e3ccc7a9bd81973bfe35511ec558d9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:21:f2:52:b3:00:91:e8:e0:a1:26:55:0d:36:
b2:0c:fc:16:a4:f9:ea:83:f5:80:4f:c4:ea:2b:e9:
ca:39:83:30:49:c5:cc:ce:38:a4:ad:14:85:77:94:
08:d9:59:d1:d5:2b:c9:d7:fe:1b:99:61:88:49:9b:
6f:1d:c7:e6:11:88:6f:d8:a6:7b:4d:25:f5:45:7b:
eb:f7:08:dc:94:f7:3a:77:ed:d8:28:08:28:0c:c7:
a2:d2:fd:fa:ef:35:4d:99:4f:82:eb:75:c9:a7:66:
3e:5c:3d:43:37:2e:da:a1:f5:e1:bf:33:f1:41:42:
e3:bd:b9:4b:3b:c4:ef:f5:99:73:5c:8d:21:ed:3a:
25:05:3b:6f:95:9c:07:fc:a8:a3:de:07:86:88:a7:
6e:89:e4:c7:ef:85:8a:4f:85:bd:b3:fd:c7:65:74:
d0:d2:94:aa:3e:24:e4:24:de:63:ba:60:5e:e9:0e:
25:6b:8b:6e:9c:57:d0:8b:30:79:96:20:8c:4e:2f:
28:13:dc:59:8c:5b:4b:63:4b:4a:7b:99:41:f7:9c:
fd:2d:6c:a9:6b:51:44:11:28:f0:78:30:2c:ea:af:
88:7a:0d:3e:21:4c:31:8c:e1:92:f9:40:22:ca:70:
9b:4b:a2:53:8e:9f:96:bb:4d:0e:8c:e2:86:d3:71:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6E:88:24:E3:CC:C7:A9:BD:81:97:3B:FE:35:51:1E:C5:58:D9:F5
X509v3 Authority Key Identifier:
keyid:68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1e:fe:f5:58:a1:aa:69:de:4d:8b:fc:f9:b8:df:0c:24:c6:
a1:44:4d:6d:34:f0:fb:cb:a8:c4:d2:a0:13:3c:d5:3e:6d:1f:
1e:37:79:b6:2b:b4:6d:43:3d:ee:0c:c9:63:ac:16:09:c3:bb:
aa:d2:4b:96:04:05:06:8e:29:87:93:22:60:3d:6b:9f:75:bb:
c2:a7:3c:99:56:37:66:48:d4:71:12:c8:bd:5d:f3:2a:5e:86:
28:22:79:5a:3f:79:15:9f:92:38:19:e7:f2:e2:f8:b5:b2:c4:
dc:85:72:09:7e:92:4b:e8:c3:06:cc:d3:d0:20:72:4e:60:03:
58:ae:a9:74:e0:ef:95:eb:4f:61:6c:7d:4c:39:07:b8:4f:54:
a8:5e:77:0a:aa:48:95:ae:40:b6:18:af:9e:f2:27:29:71:49:
a5:2c:1e:8a:aa:7e:a3:e5:61:dd:4d:3c:70:a7:87:85:e3:7d:
3b:2f:53:aa:8e:b2:e9:56:ac:58:5b:8c:79:68:84:7b:e5:65:
ba:b5:84:e7:c1:22:dd:c4:84:64:ff:38:40:a5:8a:9e:50:2d:
cc:36:8a:4f:00:f3:7d:f1:fe:44:0e:56:c2:24:07:ae:90:2b:
0c:f2:6d:e6:b0:f5:78:3a:80:e3:c4:03:42:59:4f:be:3f:4c:
db:a9:24:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:34 2025 by rpki-client