Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
File: cLqzJoCFMIofjVcIS52qHr-V4Nw.mft (raw, json)
Hash identifier: G6prbyg4iQkTgoR/ppCRy/10qiAuDIJsU3rb6H3eiU8=
Subject key identifier: AC:86:75:5C:05:06:39:07:2A:51:E5:4E:D5:77:8F:9F:CD:18:B8:B7
Authority key identifier: 70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC
Certificate issuer: /CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
Certificate serial: 01974E57703D24F14EE8A47160BA83D68882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
Manifest number: 1579
Signing time: Sun 08 Jun 2025 07:00:42 +0000
Manifest this update: Sun 08 Jun 2025 07:00:42 +0000
Manifest next update: Mon 09 Jun 2025 07:00:42 +0000
Files and hashes: 1: cLqzJoCFMIofjVcIS52qHr-V4Nw.crl (hash: oZe26oq1/fyeewsdrBYuK5Em2tbWT1q0e0QW9IdYP4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:70:3d:24:f1:4e:e8:a4:71:60:ba:83:d6:88:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
Validity
Not Before: Jun 8 07:00:42 2025 GMT
Not After : Jun 9 07:00:42 2025 GMT
Subject: CN=ac86755c050639072a51e54ed5778f9fcd18b8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:21:5a:e9:b2:d8:a5:42:64:73:86:d6:34:
3b:2b:21:c3:4b:0c:1f:32:f4:62:12:bd:78:09:b6:
d0:12:2f:32:ae:0a:11:e4:a6:84:12:92:9f:37:6e:
a8:13:d0:17:b7:61:d7:fc:34:5a:80:32:4f:bb:76:
7b:8a:f7:e6:ae:65:63:58:89:5b:0b:18:43:96:1e:
9f:b2:ed:8a:4f:d1:19:d3:ba:b9:68:a2:04:d5:85:
85:aa:32:53:74:06:d5:f4:7b:81:c8:b0:68:e8:0e:
51:69:f2:81:d6:88:4f:f7:23:de:86:99:1b:59:3d:
5b:3d:52:c0:a4:a1:9d:11:8e:c2:e3:16:d0:5e:a3:
b7:f9:83:67:46:74:b5:c9:35:60:c2:8a:f1:b8:ee:
5a:95:8e:b2:4d:1a:3e:c1:7d:b2:4b:bd:b0:61:89:
97:c6:64:60:d8:5a:3d:66:a8:03:a8:a5:64:fa:98:
6b:7a:f1:a0:71:bf:46:8a:4e:dd:6e:f8:b4:8b:94:
a0:0d:9c:ae:6c:51:0c:49:00:42:3f:1f:6c:b3:59:
9b:8a:41:fc:10:ed:2b:25:c5:9e:41:20:53:fe:11:
96:7c:cf:87:eb:4c:79:b4:4d:46:9b:57:2e:33:e1:
79:4f:17:86:f3:50:a7:04:4d:a7:19:ee:77:9d:f5:
87:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:86:75:5C:05:06:39:07:2A:51:E5:4E:D5:77:8F:9F:CD:18:B8:B7
X509v3 Authority Key Identifier:
keyid:70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:08:1a:5d:89:6a:11:82:28:50:57:aa:26:78:75:0d:1f:80:
2c:fa:52:c1:0b:bc:13:b2:38:26:f7:86:d5:f3:17:e9:a7:29:
e7:ac:12:7c:a2:a9:b9:71:d6:af:a9:dd:bf:36:ba:44:61:42:
2b:02:94:0d:04:da:4d:6b:19:77:da:85:0f:3d:8b:38:6d:bd:
cc:5d:89:5e:30:fa:1f:6a:53:e1:cf:a2:4b:d8:35:07:b9:56:
ce:de:62:43:32:7b:ff:77:bd:57:e3:22:40:20:69:38:05:3c:
d8:32:33:4c:a5:cf:12:b9:dd:05:f8:dd:69:57:74:45:b0:c7:
b8:03:84:e1:fb:67:e6:8a:b6:5d:af:9d:04:9d:47:ed:99:6f:
4f:fa:85:92:57:ff:11:fc:1a:87:51:e2:09:65:82:10:9c:44:
e7:0c:2d:dc:fd:3e:5e:1d:b7:75:ba:2f:92:09:83:96:39:bb:
3e:2d:ef:51:a3:33:b5:fb:52:1a:7a:8c:42:0a:8e:42:6b:fb:
c1:82:74:25:fc:48:f6:92:9c:e9:16:52:59:8d:5c:90:64:0c:
9d:60:cd:fa:82:87:03:9c:ec:7f:56:de:11:fd:b2:95:d3:11:
88:ad:a9:b5:71:8b:8c:ac:e8:2f:d3:a4:eb:a7:9a:79:22:b0:
22:8e:d1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:38:26 2025 by rpki-client