Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
File: MFKpUR4ZpULAuyN4td6PT7RSHb4.mft (raw, json)
Hash identifier: dQadY19/oFQ6oToawtd5focd5E8cJKsxG61LV8XFyWY=
Subject key identifier: 90:2D:BB:A3:85:E0:08:2B:02:15:A0:CC:9A:5F:B6:4A:70:71:2B:D5
Authority key identifier: 30:52:A9:51:1E:19:A5:42:C0:BB:23:78:B5:DE:8F:4F:B4:52:1D:BE
Certificate issuer: /CN=3052a9511e19a542c0bb2378b5de8f4fb4521dbe
Certificate serial: 01975234F38299A880F4DA0DE4BE13C312A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
Manifest number: 1510
Signing time: Mon 09 Jun 2025 01:01:31 +0000
Manifest this update: Mon 09 Jun 2025 01:01:31 +0000
Manifest next update: Tue 10 Jun 2025 01:01:31 +0000
Files and hashes: 1: MFKpUR4ZpULAuyN4td6PT7RSHb4.crl (hash: rCcbJBMj7CTQXtf4/EFb6pYBU3+6BY4tX6dwFm5vRIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:f3:82:99:a8:80:f4:da:0d:e4:be:13:c3:12:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3052a9511e19a542c0bb2378b5de8f4fb4521dbe
Validity
Not Before: Jun 9 01:01:31 2025 GMT
Not After : Jun 10 01:01:31 2025 GMT
Subject: CN=902dbba385e0082b0215a0cc9a5fb64a70712bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:43:08:61:5d:ce:1b:a3:03:93:4b:ca:74:
2c:4c:d4:56:fc:9c:bf:99:eb:62:4d:b9:c6:f0:b2:
1a:cc:f5:5f:6e:84:dc:a2:d0:80:10:f6:70:92:05:
ef:2b:0b:f0:b7:f1:92:96:15:fb:da:57:0d:2f:63:
85:2f:97:cd:37:65:d4:f1:8f:59:ff:90:22:83:ec:
4c:00:00:aa:19:20:58:c4:66:0e:0b:02:1e:18:6f:
55:e2:55:56:08:ba:2b:f8:f2:52:81:1f:5e:f6:04:
6e:0d:b2:1a:c8:2a:51:67:54:19:b0:29:70:c6:b9:
53:c9:f6:ba:c8:15:9c:9b:9f:db:8a:a7:d8:79:92:
9b:b3:d8:21:75:38:75:f7:66:6f:02:e7:8f:a5:52:
4e:c1:91:69:f5:30:ff:3c:2a:fd:55:d3:35:df:1b:
24:af:b8:33:04:00:f9:5c:c2:73:7b:9c:3a:e7:7c:
9e:8c:77:87:1d:e6:47:18:ea:22:66:02:b4:73:81:
d7:c7:6a:58:ba:a6:70:15:91:4b:fb:50:84:c7:b2:
87:69:55:f4:9b:09:cf:90:60:03:bf:1d:9e:30:23:
6b:e1:e0:db:88:e5:6a:21:28:5f:d4:4f:c7:a3:1c:
01:15:ae:19:72:a0:32:78:c2:80:c4:cf:7c:39:bc:
98:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2D:BB:A3:85:E0:08:2B:02:15:A0:CC:9A:5F:B6:4A:70:71:2B:D5
X509v3 Authority Key Identifier:
keyid:30:52:A9:51:1E:19:A5:42:C0:BB:23:78:B5:DE:8F:4F:B4:52:1D:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:97:ad:76:9a:c1:ea:22:40:59:36:74:47:9f:80:d2:f4:25:
e3:d4:df:18:12:ca:4a:17:a5:60:06:96:83:24:8e:b9:63:9d:
28:1f:e1:26:a5:6d:f7:4d:7c:68:d6:1a:0e:6d:f1:b9:bb:bb:
08:e8:94:86:e4:95:07:f4:d9:87:87:3c:9a:5e:b0:54:13:c1:
46:20:fa:ff:3b:c1:2e:7e:64:85:c7:61:66:6b:05:23:28:29:
b9:c2:c8:42:f1:23:a3:2b:8e:6f:25:56:b8:bc:08:e5:31:f4:
92:fd:a2:7e:8e:55:36:0e:42:17:2c:7b:79:98:db:6a:03:28:
a1:11:c7:d3:2d:54:2d:ea:14:60:f8:6e:81:f7:ac:20:7a:43:
8f:21:bb:82:47:cd:bb:13:7d:81:6b:9f:4f:ee:34:13:11:7a:
fc:db:81:0a:ed:7c:b9:6e:96:bd:bd:46:d9:c9:5b:f6:13:3a:
7e:f1:81:ee:f9:77:b0:db:d2:09:97:98:dc:56:66:f8:3c:6d:
21:b7:b4:bc:f8:86:0e:f2:f2:cc:d0:17:9d:6d:14:98:fb:8a:
ba:b2:01:d9:9b:9f:17:34:9c:97:87:53:54:be:fd:28:a2:cd:
33:22:53:d5:97:59:a7:f0:82:a6:d4:e1:2e:95:ea:3c:ca:20:
79:96:c5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:07:23 2025 by rpki-client