Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
File: eruW1HY31HxxYVtg2h9pHEpvC3A.mft (raw, json)
Hash identifier: /uSL/klGT89fSxyd9jK/Kgg3nur3aJfTu6FcYCBAutI=
Subject key identifier: 41:21:1D:A3:60:B6:16:EF:6C:09:05:53:22:D3:C0:A7:7A:83:FD:86
Authority key identifier: 7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
Certificate issuer: /CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
Certificate serial: 01975422C01F4166017ED53958BC989E57C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
Manifest number: 09D2
Signing time: Mon 09 Jun 2025 10:00:52 +0000
Manifest this update: Mon 09 Jun 2025 10:00:52 +0000
Manifest next update: Tue 10 Jun 2025 10:00:52 +0000
Files and hashes: 1: eruW1HY31HxxYVtg2h9pHEpvC3A.crl (hash: lE7G+hHHifyUi+JNSFg5Es667sTSXN93lxexytLDQGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:c0:1f:41:66:01:7e:d5:39:58:bc:98:9e:57:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
Validity
Not Before: Jun 9 10:00:52 2025 GMT
Not After : Jun 10 10:00:52 2025 GMT
Subject: CN=41211da360b616ef6c09055322d3c0a77a83fd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:70:6d:57:df:c2:d3:f6:82:62:b3:d4:b0:b9:
45:dd:8c:15:2b:82:15:95:de:2f:54:8e:ea:e4:72:
c0:71:f2:52:cc:ee:ca:d0:75:0e:6b:e5:66:3b:e9:
75:9f:48:7c:c6:2f:18:24:56:a8:2c:be:46:ca:61:
10:07:1f:5e:c9:37:f2:f3:a1:c1:39:fe:4b:a4:f6:
da:1f:1c:e4:04:46:bc:5b:35:0f:50:de:49:42:33:
99:83:bf:ff:06:15:20:cd:95:99:45:8c:73:e1:8b:
47:1d:9b:8a:bd:01:64:9c:70:c5:33:fc:1d:57:a7:
15:ca:24:c4:74:90:15:79:7a:6f:d2:2b:5d:1a:0a:
c0:da:75:4f:98:cd:c4:f4:cd:d1:46:f0:d1:61:3d:
e4:48:52:db:3e:dd:26:df:ec:1b:82:ce:ac:4f:7b:
5e:b7:4f:b6:1d:f2:3a:9e:4b:30:38:e6:c9:f4:c0:
bb:9a:34:33:db:fe:bc:42:e8:e4:08:9c:2f:04:c2:
cc:a9:c9:22:b8:67:f4:eb:d3:c1:2c:10:28:a5:6c:
b2:e4:86:b7:3e:ee:95:d0:d5:47:67:6a:a1:a7:99:
e9:fd:6a:17:fb:90:c6:6a:c2:c6:05:78:7b:d4:e1:
b9:7a:22:ee:c4:17:a2:35:62:53:12:7b:1d:04:06:
5b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:21:1D:A3:60:B6:16:EF:6C:09:05:53:22:D3:C0:A7:7A:83:FD:86
X509v3 Authority Key Identifier:
keyid:7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:1f:fa:a6:75:df:c7:37:0c:ae:39:75:8e:d9:0e:36:81:0a:
d9:f8:63:79:bf:ad:52:dd:3e:20:0a:34:e1:4d:8a:32:dd:30:
27:41:14:b2:1f:e2:98:80:f5:b3:8d:dd:60:9d:54:a6:da:52:
7d:9e:b0:d1:7d:ea:20:77:66:b6:e1:4a:41:41:38:22:9f:b3:
38:fb:17:58:16:2c:56:b2:1e:6d:53:eb:f8:a3:72:25:03:9a:
8d:ca:b0:e8:91:f4:af:88:59:f8:3a:92:c4:a9:04:a0:9e:19:
f5:36:53:2d:06:ef:7c:9c:08:94:01:28:a5:09:3b:5e:68:e3:
cd:b5:93:1c:2d:bf:b0:ac:25:78:52:62:65:03:28:91:28:85:
f9:29:c8:ee:5a:77:d1:cc:22:1e:f6:93:b5:cf:f4:b4:e4:c8:
c1:9c:9d:84:81:60:ac:5f:2b:98:f2:cc:5a:fa:2e:1e:2c:aa:
33:50:b0:c5:67:a1:ff:a9:fe:71:96:57:16:0e:a0:c3:12:cf:
87:27:21:30:28:f2:c1:da:6d:49:78:f8:17:ab:46:78:73:56:
9f:a5:4e:8a:92:49:8a:f9:1d:c1:2c:2f:fd:8a:b6:b6:95:ac:
da:02:63:14:42:da:28:eb:ec:db:3b:d5:53:a0:9a:e7:17:3c:
ee:ee:91:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:27:26 2025 by rpki-client