Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
File: Rii90MjhtQTSlPijkEyNV65jg_Q.mft (raw, json)
Hash identifier: sK1tp/9vWhZkqWMt2QIsqow9+YQHFqjLwbMynWnUTYc=
Subject key identifier: 1B:1C:4E:99:1F:4D:13:4C:19:6F:65:47:AB:2E:B2:64:29:B6:59:22
Authority key identifier: 46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4
Certificate issuer: /CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4
Certificate serial: 01974C698E08A28A0B421A2DED63B92CFE78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 22:01:15 +0000
Manifest this update: Sat 07 Jun 2025 22:01:15 +0000
Manifest next update: Sun 08 Jun 2025 22:01:15 +0000
Files and hashes: 1: Rii90MjhtQTSlPijkEyNV65jg_Q.crl (hash: qrxkPhpBkOFrsvAPpoFXuyxK+WMdaahE3c1josMZN0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:8e:08:a2:8a:0b:42:1a:2d:ed:63:b9:2c:fe:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4
Validity
Not Before: Jun 7 22:01:15 2025 GMT
Not After : Jun 8 22:01:15 2025 GMT
Subject: CN=1b1c4e991f4d134c196f6547ab2eb26429b65922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a1:a4:a1:52:73:b3:49:23:e0:71:83:a1:6f:
80:a3:cb:62:04:52:62:dc:85:a3:b8:43:bc:8e:ee:
b7:39:ff:12:d4:41:f5:70:03:76:cf:14:75:b7:b6:
86:e8:f9:cd:60:48:3b:d3:09:62:97:4a:e0:39:b5:
1a:9e:a2:f0:d4:f7:cc:7d:be:ff:24:e3:fc:e1:dc:
bc:95:4b:11:60:d6:e0:ad:73:63:25:82:48:f4:7f:
70:f3:c5:50:83:66:4b:b4:4b:57:24:d2:d3:77:15:
33:af:de:e7:cf:45:5b:40:a6:bc:23:a9:c3:f5:6b:
ef:74:46:0d:23:f9:b3:d3:be:9f:20:1d:c3:c3:87:
9a:8e:ef:3c:dd:14:f4:a5:42:a4:fd:92:95:bc:39:
aa:af:04:93:53:4e:66:a8:63:bb:20:f8:30:95:25:
70:68:ca:c7:3a:4f:ed:b7:b3:74:fa:a2:d2:7f:24:
7a:c4:7c:cc:53:50:de:63:43:fc:85:eb:ef:7c:d2:
6b:e7:f3:dc:b6:45:64:8d:21:65:f9:8e:cd:b0:3e:
7b:27:b1:52:9a:84:32:0c:be:62:38:f2:0c:40:9d:
33:ac:70:58:d8:7c:cc:d7:32:95:24:ca:ed:84:cd:
e1:c0:a0:a3:ec:9a:51:d6:89:6d:ab:29:db:5b:b8:
d4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1C:4E:99:1F:4D:13:4C:19:6F:65:47:AB:2E:B2:64:29:B6:59:22
X509v3 Authority Key Identifier:
keyid:46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:1b:ff:19:38:42:b9:ee:30:21:cf:b5:55:2b:71:1a:98:48:
15:9f:e1:9f:e7:f0:8a:2e:a5:aa:88:39:f4:d6:e1:8a:13:04:
d0:6a:d6:1d:ac:b0:e5:02:3b:d3:fb:f4:db:f5:bd:95:1c:a9:
4a:6d:32:68:dc:1f:ce:b6:3f:84:a2:f5:e8:c0:9e:4c:9d:6c:
f9:7e:b7:67:62:02:0a:50:79:5f:7b:eb:b4:33:a8:a7:88:40:
ab:ba:8a:bc:5c:ab:22:60:40:d2:67:7a:03:7b:7a:5c:ca:d0:
cf:71:9c:83:61:08:1e:d0:e1:95:b4:7c:b8:90:b4:d5:db:13:
b4:9c:f2:3a:e6:65:13:2e:eb:4e:24:16:63:d5:ae:c8:2d:e4:
97:50:cf:31:4e:c3:24:cb:bc:97:30:ae:32:33:0d:6d:07:ba:
c8:fa:0f:b4:b1:8f:40:7a:b3:88:ae:3a:a1:1d:96:9c:5e:01:
5e:65:0b:b8:44:3f:e0:b0:b5:c5:73:36:c1:ca:f6:ad:7f:50:
a0:3e:d4:98:61:72:db:76:4b:55:35:ba:10:f5:11:d1:53:58:
64:45:e8:31:dd:b3:bc:d8:e7:b7:c7:53:44:be:d2:62:9b:fd:
73:84:19:32:8f:82:ab:b6:72:cb:7d:43:ac:85:ef:0d:e8:45:
79:52:12:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:44:34 2025 by rpki-client