Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
File: cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft (raw, json)
Hash identifier: dynaX7GwG/nRbhk98auF5Ie+fTHBksPmDPaMsJNP4kE=
Subject key identifier: 60:95:4B:13:DF:F2:9B:1D:8B:2D:98:90:B6:C5:DE:25:11:94:78:D6
Authority key identifier: 70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D
Certificate issuer: /CN=70379a6713e79e598d9feaa66dca169188e0218d
Certificate serial: 019745F8FE52A8DDAEC867190012266BAD86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
Manifest number: 0D7F
Signing time: Fri 06 Jun 2025 16:00:35 +0000
Manifest this update: Fri 06 Jun 2025 16:00:35 +0000
Manifest next update: Sat 07 Jun 2025 16:00:35 +0000
Files and hashes: 1: cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl (hash: 2PkAqq92uP06/zHMJU+DEFLKnHmM+4t46L40slb85mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:fe:52:a8:dd:ae:c8:67:19:00:12:26:6b:ad:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70379a6713e79e598d9feaa66dca169188e0218d
Validity
Not Before: Jun 6 16:00:35 2025 GMT
Not After : Jun 7 16:00:35 2025 GMT
Subject: CN=60954b13dff29b1d8b2d9890b6c5de25119478d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:6a:9c:c8:71:3f:1b:b2:05:93:e7:d9:37:
e1:7e:c9:17:51:8c:4a:5e:13:b2:f2:e5:00:2a:9d:
c1:0c:f2:29:b5:63:bc:63:33:2e:32:35:2a:fa:f6:
2b:45:39:dd:65:df:4c:b7:b0:49:d4:e9:b3:24:4a:
1a:f8:d3:d4:b0:77:5c:2b:9e:f9:1f:e6:ab:b8:a2:
43:ed:03:d5:c6:c4:85:62:51:cb:2b:28:7a:a9:7c:
b4:8e:c5:bf:35:1a:8e:26:60:e0:72:66:24:52:19:
a5:c7:ae:40:a0:5f:b5:43:b5:4f:7e:b0:f0:f9:1c:
61:b2:5c:77:37:10:2d:f9:b6:0d:3d:68:85:6d:30:
8c:8d:59:c6:3d:fa:fe:5c:fe:57:1c:6a:66:f7:e8:
9f:92:10:b0:f1:ca:a1:94:cf:31:1c:21:4d:2d:63:
ec:18:60:67:20:7c:9c:e4:34:5f:94:98:65:7b:f3:
dc:08:af:e6:46:27:4a:07:f1:6c:40:82:72:71:18:
f4:6b:50:52:08:4a:81:bf:8a:d4:33:d1:a5:d5:63:
c6:2c:a4:f8:e2:87:40:ae:9c:b5:89:8c:23:62:d2:
63:ab:cf:b1:da:28:af:3b:91:c6:57:d4:38:05:95:
f0:35:ae:17:74:0b:e6:04:fa:6e:c1:29:a3:47:08:
04:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:95:4B:13:DF:F2:9B:1D:8B:2D:98:90:B6:C5:DE:25:11:94:78:D6
X509v3 Authority Key Identifier:
keyid:70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7a:bf:1a:ae:c6:8d:57:3a:06:f0:1c:4a:31:ed:93:43:f5:
4a:0d:0a:35:c2:8c:8c:07:f1:53:df:e4:71:d5:53:a8:65:ab:
42:89:39:57:d9:a7:5b:db:dd:ab:3c:ce:e8:72:ab:88:91:1b:
df:2d:54:85:fd:7c:9c:cf:bd:6c:d4:7b:84:6a:ff:1d:50:89:
4c:d2:ef:e1:ae:7c:1c:ae:8e:23:f9:70:fd:5a:4a:a0:30:05:
0b:5b:60:2c:37:9f:cf:b1:f8:35:ac:66:ae:a9:7a:8c:d6:3e:
5c:6d:d9:01:da:be:c4:79:ac:ca:85:be:de:55:8c:86:63:b9:
b1:a6:2d:ea:3b:3f:64:ef:04:1c:b9:a8:b3:9d:7f:d5:a8:c9:
e3:88:4a:18:49:f5:95:15:c2:52:8d:78:bd:77:3a:70:4c:ff:
c0:98:21:31:1c:32:9c:54:65:20:fc:8b:e0:2a:4f:9d:0e:48:
95:99:21:79:0a:5f:d1:03:dc:44:c4:3a:b3:1c:15:aa:01:87:
22:f4:41:4b:8a:52:60:88:3c:07:48:5c:9b:21:f4:a3:fc:e8:
00:f3:ca:4d:ee:3e:d7:b9:21:61:8b:ee:45:72:05:4d:64:cf:
fe:cc:30:38:93:bc:41:c3:c6:eb:ed:bd:42:4e:1e:af:18:1d:
35:10:de:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:31 2025 by rpki-client