Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.mft
File: 21LN5wkMV9jpwx1Rh0jfkiueBM4.mft (raw, json)
Hash identifier: Rw+525EPhTfLZfkL9CzBewlu4cWHffYRvmklWF2uCxc=
Subject key identifier: 17:68:D3:02:95:95:88:03:F4:B1:37:22:26:E1:15:25:43:10:AA:31
Authority key identifier: DB:52:CD:E7:09:0C:57:D8:E9:C3:1D:51:87:48:DF:92:2B:9E:04:CE
Certificate issuer: /CN=db52cde7090c57d8e9c31d518748df922b9e04ce
Certificate serial: 01974BC3EB6B5159DC8AE37C3E773C5A9721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21LN5wkMV9jpwx1Rh0jfkiueBM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.mft
Manifest number: 13F1
Signing time: Sat 07 Jun 2025 19:00:20 +0000
Manifest this update: Sat 07 Jun 2025 19:00:20 +0000
Manifest next update: Sun 08 Jun 2025 19:00:20 +0000
Files and hashes: 1: 21LN5wkMV9jpwx1Rh0jfkiueBM4.crl (hash: Jq0pfP1csme81j93S93xFWD8/4arWBpeBt9iiRa5GLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/21LN5wkMV9jpwx1Rh0jfkiueBM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c3:eb:6b:51:59:dc:8a:e3:7c:3e:77:3c:5a:97:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db52cde7090c57d8e9c31d518748df922b9e04ce
Validity
Not Before: Jun 7 19:00:20 2025 GMT
Not After : Jun 8 19:00:20 2025 GMT
Subject: CN=1768d30295958803f4b1372226e115254310aa31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:5a:20:80:1f:47:c8:3b:f4:60:e6:bc:db:
f0:9c:26:ca:55:86:7e:50:7e:47:52:7d:60:7c:39:
c0:aa:5c:e6:f4:26:81:d8:45:96:c0:ba:4e:79:ed:
2f:1d:70:e8:fb:05:5f:cf:0d:6f:40:0e:a0:23:68:
b4:c0:81:c7:0e:34:09:9e:c8:4c:09:5b:1b:7a:72:
bd:10:35:30:63:48:fd:5e:87:bf:13:a7:8b:b4:fb:
58:65:45:64:10:c8:03:4c:11:3e:e8:92:d3:41:00:
7b:9b:66:d4:0f:a4:79:5a:1c:ac:b4:68:44:90:27:
0b:37:9f:dd:f2:28:08:c8:30:4d:29:c2:a8:13:d8:
79:4e:db:6c:68:2b:6d:66:36:71:1c:8e:e5:79:14:
32:4c:52:1c:f3:30:aa:40:35:9f:2c:ff:08:a3:56:
1a:e8:13:07:ca:75:85:51:99:26:bc:72:79:58:ba:
7b:af:07:73:f3:d1:e6:6b:bd:c1:bd:d4:dc:48:a4:
96:bc:b4:b2:4a:5c:2d:17:c1:0a:88:9e:2b:5f:77:
c1:38:ea:ce:d9:28:7c:5e:40:f5:70:e4:2d:2b:8a:
bc:a6:ee:04:76:3e:7c:9f:a6:a9:37:fb:aa:cc:6f:
f8:8f:0c:a8:2d:97:66:a4:8c:09:9e:fa:2b:b9:20:
cd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:68:D3:02:95:95:88:03:F4:B1:37:22:26:E1:15:25:43:10:AA:31
X509v3 Authority Key Identifier:
keyid:DB:52:CD:E7:09:0C:57:D8:E9:C3:1D:51:87:48:DF:92:2B:9E:04:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21LN5wkMV9jpwx1Rh0jfkiueBM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fc:33:ac:ea:77:2b:4e:0e:e5:11:83:bb:7a:89:a7:b6:85:
0f:7a:eb:f9:39:6f:0c:43:5a:c4:a4:ca:f4:c0:cb:bd:51:be:
1c:3e:da:1a:54:79:9f:a4:72:60:26:82:d3:73:b8:06:dc:c8:
50:24:c2:7e:0b:6f:b8:88:ed:68:59:79:b0:d8:86:53:ce:84:
53:42:74:c3:ca:c2:d7:b4:23:0c:d8:2f:6f:49:bb:63:0c:d2:
13:18:7b:d3:b5:04:a1:2d:8c:d6:f3:4a:b5:ab:fa:6a:bb:03:
e8:5d:7b:e4:47:ed:9f:f5:0f:18:d4:26:b8:50:3d:ed:b4:0d:
45:13:b1:81:71:b4:43:ef:03:9b:5e:d7:b7:bc:eb:f0:c1:a5:
5b:36:53:79:e9:18:95:90:30:47:44:ea:80:9e:ea:d1:3c:de:
4b:6e:e6:71:ad:24:24:5e:2e:c1:3d:45:9a:e9:11:ba:9a:43:
20:86:08:3f:d9:3f:3c:50:92:b2:81:7c:e7:42:94:cd:1d:72:
60:44:c9:c8:91:d4:bc:31:f0:7f:ec:74:58:db:2c:e9:5a:58:
0f:28:a8:88:ee:82:86:9b:2b:dd:82:b6:fa:51:8d:29:b1:9d:
54:ba:bc:35:18:ff:5c:01:f8:1a:7a:70:fa:09:a4:b1:25:f1:
e9:87:f7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:53:31 2025 by rpki-client