Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
File: ccWe2rmO-wzTdnYPQGnkxouL2iA.mft (raw, json)
Hash identifier: /zBwAWd6sdAqWiThbUSynE3pzR//Wa5vvo0CR/02VGA=
Subject key identifier: DB:87:35:AA:84:69:AE:29:32:A9:AC:F7:66:53:03:C8:C2:0A:32:68
Authority key identifier: 71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20
Certificate issuer: /CN=71c59edab98efb0cd376760f4069e4c68b8bda20
Certificate serial: 01974C69CE78B0EE22F42FDE85CC97E30BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
Manifest number: 06CE
Signing time: Sat 07 Jun 2025 22:01:31 +0000
Manifest this update: Sat 07 Jun 2025 22:01:31 +0000
Manifest next update: Sun 08 Jun 2025 22:01:31 +0000
Files and hashes: 1: ccWe2rmO-wzTdnYPQGnkxouL2iA.crl (hash: 8rim4Dqq2SsMh7rp2ez3F0roz9qfrvdYch7KFffGH4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:ce:78:b0:ee:22:f4:2f:de:85:cc:97:e3:0b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71c59edab98efb0cd376760f4069e4c68b8bda20
Validity
Not Before: Jun 7 22:01:31 2025 GMT
Not After : Jun 8 22:01:31 2025 GMT
Subject: CN=db8735aa8469ae2932a9acf7665303c8c20a3268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:f5:4e:58:4f:34:68:84:fc:89:63:5f:bf:
a7:ce:30:93:79:a1:ac:53:27:b9:fa:a8:24:40:28:
f9:06:08:31:98:18:27:72:49:fa:e6:54:62:6a:bd:
32:e8:64:da:b8:3c:b5:b2:e8:3e:1c:e9:c0:04:f9:
3a:e0:89:d7:90:db:37:ca:bb:45:5c:9d:6d:e2:5e:
1c:d9:25:07:cc:cb:eb:ff:56:f3:61:96:d6:2e:3e:
3e:45:3d:f1:a7:8a:71:5c:c5:93:30:15:65:79:b3:
e1:ee:98:92:df:da:74:76:f2:66:1d:6a:00:97:f2:
cb:17:5b:a6:66:d5:40:76:ec:41:8b:b7:1e:66:de:
a2:f4:7d:6e:17:6b:de:66:b5:d4:f8:2c:ad:20:45:
46:83:40:7e:e2:08:99:4c:4d:4e:41:c7:22:d6:a1:
4a:43:c9:2d:06:da:38:ec:31:9b:fa:86:bd:a0:86:
39:31:74:b0:78:ca:84:a5:09:15:94:0e:7b:6f:c2:
5c:fc:90:32:fd:55:07:f2:b6:3f:d3:93:86:53:f8:
46:7b:8c:9e:55:ee:41:b1:ef:1a:b4:97:3b:0c:70:
65:4f:61:22:7e:4f:c8:f1:a9:01:bb:37:10:16:c8:
ff:26:50:8a:90:ab:70:ab:57:0b:59:6e:2e:98:e4:
71:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:87:35:AA:84:69:AE:29:32:A9:AC:F7:66:53:03:C8:C2:0A:32:68
X509v3 Authority Key Identifier:
keyid:71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3a:e8:db:0d:e1:c7:23:f1:c0:1d:ef:80:38:47:43:70:8f:
7a:30:21:88:84:5c:39:d2:76:ed:bd:e7:97:4e:35:a2:cf:19:
66:19:39:75:b6:72:d9:19:99:3d:6d:67:aa:85:88:30:b2:cc:
c9:34:87:4d:11:77:ea:02:7a:9e:81:74:89:75:af:26:f4:fa:
ff:e6:80:d1:5d:2e:53:85:61:80:7f:c5:76:be:f4:de:26:ad:
5a:c2:3a:41:6c:72:74:ba:d4:af:c2:3c:8f:6a:41:c6:69:e3:
85:88:68:1e:52:44:7e:5d:b5:5d:76:f7:f9:dd:7f:ed:f2:94:
2a:d8:3f:ab:c0:f2:c0:c9:2e:e2:71:ef:60:6a:c7:00:46:03:
00:7b:d8:01:75:0f:5c:7a:69:fa:01:65:4c:89:cc:8d:1a:bc:
29:6b:3f:a6:13:1f:94:7d:6a:0c:0c:cb:d7:dc:a1:cd:b7:52:
17:91:22:53:b7:4a:ff:e3:b4:cf:65:ca:a2:1b:46:de:f2:7d:
db:02:18:ae:ed:e5:dd:c5:90:b0:0d:8c:76:bd:06:35:eb:7c:
2e:24:0e:ad:b3:fc:a4:e4:0a:97:0a:90:22:d6:a9:89:1f:9d:
1d:76:14:65:c4:61:b8:00:2d:5d:fa:6b:00:7a:f0:3f:c5:f4:
5a:ad:54:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:41:44 2025 by rpki-client