Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
File: cT5FABqFXik4GRnXmdzLbBGQtaw.mft (raw, json)
Hash identifier: /2hbEjwk05jHIaKwjcy/A+8x3v0K42U16335zTLVTF4=
Subject key identifier: 13:8D:CD:22:74:62:AC:FC:1B:4B:BC:84:24:6B:CD:88:CA:BE:7F:B7
Authority key identifier: 71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
Certificate issuer: /CN=713e45001a855e29381919d799dccb6c1190b5ac
Certificate serial: 01974A43FFCBF939BB3B14D9F9BEA0A382DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
Manifest number: 08AF
Signing time: Sat 07 Jun 2025 12:00:59 +0000
Manifest this update: Sat 07 Jun 2025 12:00:59 +0000
Manifest next update: Sun 08 Jun 2025 12:00:59 +0000
Files and hashes: 1: cT5FABqFXik4GRnXmdzLbBGQtaw.crl (hash: 7Uq0i8FkxAoStpLzCuAOR1I7IBLnwWqBVMuS8b31vJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:ff:cb:f9:39:bb:3b:14:d9:f9:be:a0:a3:82:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713e45001a855e29381919d799dccb6c1190b5ac
Validity
Not Before: Jun 7 12:00:59 2025 GMT
Not After : Jun 8 12:00:59 2025 GMT
Subject: CN=138dcd227462acfc1b4bbc84246bcd88cabe7fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:8d:8d:14:e9:49:32:b6:35:ad:8e:3e:4b:
76:0e:b0:50:13:cd:30:73:9b:c3:67:88:c9:b1:54:
b1:e3:05:85:13:9d:f3:64:c4:8a:81:53:e9:34:48:
2c:18:cc:6f:24:9a:4e:1e:cf:16:f5:24:20:26:05:
1e:2a:72:9f:ed:b1:fc:4d:22:32:df:ac:e4:34:65:
0b:6d:e4:60:e7:21:be:8c:7d:a6:7b:1b:0e:cd:c9:
1a:4d:d1:c4:6f:c3:5b:d4:d1:08:32:32:99:d9:fb:
0e:cf:1d:aa:1c:09:3e:9b:be:d2:66:d8:ff:47:3b:
c1:0a:a2:4c:f0:8b:2b:ad:c3:70:d7:2e:22:74:61:
e2:73:eb:88:4d:de:91:06:b9:5f:0c:b1:6d:c0:77:
30:e3:46:5e:74:f2:64:11:57:c0:a0:9b:c2:a5:c9:
27:de:44:bd:de:de:59:9d:8c:98:b8:94:d7:85:e1:
36:13:23:b9:4a:49:a4:78:f4:a8:88:fe:36:3c:ea:
08:e4:10:ee:f0:0a:b6:ac:1c:81:e6:6e:b4:58:79:
89:66:3a:24:87:4d:35:9b:bd:03:f6:69:97:c3:8b:
cf:c7:6f:ed:e7:16:3f:01:e6:1a:f3:c4:4f:c0:b1:
7b:6b:7d:de:25:12:71:52:fd:34:62:ec:f0:99:1e:
42:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8D:CD:22:74:62:AC:FC:1B:4B:BC:84:24:6B:CD:88:CA:BE:7F:B7
X509v3 Authority Key Identifier:
keyid:71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a6:76:49:fb:3b:4d:90:71:c1:15:a4:14:cc:36:41:59:e0:
a6:84:97:19:57:05:a7:f1:d5:de:bc:00:e2:8f:88:51:14:ba:
12:b5:06:8b:cf:73:83:c7:5c:3d:43:cd:c1:d5:9f:2c:0e:47:
b1:b1:50:a3:95:bc:79:f3:cc:51:b6:b0:7b:25:eb:f4:06:bd:
b1:7a:17:67:a3:53:6d:b8:9d:0e:29:92:1b:c0:64:71:ab:9f:
df:9c:b5:b5:b4:7e:73:7d:f8:ee:e3:98:e7:d9:1a:75:ef:03:
47:1d:79:78:a4:d2:f8:e8:1e:db:65:59:9c:b8:76:ea:24:43:
a2:ba:d2:62:e4:77:54:a4:26:33:8d:b2:f5:bf:e1:7d:b8:33:
82:9b:2f:b8:2e:89:23:89:c0:78:bf:29:cd:10:e9:c3:c3:18:
65:23:ea:c8:75:59:65:a6:5d:c5:59:89:e1:2c:bd:df:aa:f3:
54:97:32:93:2b:31:cc:03:1b:aa:91:02:73:66:51:51:89:53:
50:c8:42:39:f4:af:45:e1:ce:27:ac:30:0f:c5:95:d5:b0:ee:
b3:fe:13:58:cc:47:bf:4d:49:1a:de:0f:10:ea:c1:72:a7:fa:
5c:8c:1a:d0:69:89:a4:5e:f4:95:4b:4d:fe:0d:49:5c:75:d1:
ba:ac:2d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:15 2025 by rpki-client