
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
File: 65fOljUzDxRxFMZG72qTR9aJFjs.mft (raw, json)
Hash identifier: H60CD1r26uhXsn2bnt2syb9COi8GmfLuK6Wfrd+aois=
Subject key identifier: 85:15:CD:59:9C:59:83:D1:85:79:A7:39:0F:A3:3D:20:F5:03:F0:43
Authority key identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
Certificate issuer: /CN=eb97ce9635330f147114c646ef6a9347d689163b
Certificate serial: 01974B5679B3E998D282E716F21AE8AA42E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
Manifest number: 150C
Signing time: Sat 07 Jun 2025 17:00:47 +0000
Manifest this update: Sat 07 Jun 2025 17:00:47 +0000
Manifest next update: Sun 08 Jun 2025 17:00:47 +0000
Files and hashes: 1: 65fOljUzDxRxFMZG72qTR9aJFjs.crl (hash: tmfJ7WQgiFw4swSGqjsRrY0BOFlPIKPoguRDVhistUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:79:b3:e9:98:d2:82:e7:16:f2:1a:e8:aa:42:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb97ce9635330f147114c646ef6a9347d689163b
Validity
Not Before: Jun 7 17:00:47 2025 GMT
Not After : Jun 8 17:00:47 2025 GMT
Subject: CN=8515cd599c5983d18579a7390fa33d20f503f043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:16:77:1b:ec:ae:19:9a:33:2b:2b:e1:44:
0f:6b:02:06:9f:50:a3:b8:17:c2:66:64:d2:e5:4d:
f2:95:93:09:b1:4f:a1:5a:a0:ad:b6:8b:4f:67:e0:
43:16:ff:46:c8:91:7d:12:7e:5c:a4:ee:5a:61:6a:
30:e9:1f:f6:2e:10:10:54:ef:6d:1c:b5:05:81:96:
44:88:d1:37:b1:00:9a:da:21:b3:05:97:a4:6f:55:
d8:76:79:af:c3:64:a6:0e:08:ab:df:4c:bd:55:cb:
0b:68:ad:3a:90:eb:71:3f:65:77:90:1e:ff:33:1f:
dc:ba:98:a6:13:02:84:5e:09:fa:90:36:16:28:e1:
a2:07:fa:27:de:06:05:5a:78:9b:2d:10:91:ce:e2:
13:2e:cb:2b:5d:0a:5f:29:a1:ed:a8:61:55:61:41:
90:59:aa:34:88:da:28:23:45:3a:5f:18:2f:ca:92:
93:60:0a:fd:71:b4:50:fd:2f:09:c5:1e:a9:5e:90:
ce:eb:fd:e4:88:bc:fb:bf:1b:93:cc:e9:e9:90:ca:
03:f7:3b:fe:45:8c:35:bd:27:3a:80:18:0f:4e:e7:
dc:58:7f:58:92:d9:35:56:bb:13:b5:17:29:47:24:
27:d4:ca:b4:02:fd:94:7e:b4:2d:9b:4d:8d:c6:cc:
f2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:15:CD:59:9C:59:83:D1:85:79:A7:39:0F:A3:3D:20:F5:03:F0:43
X509v3 Authority Key Identifier:
keyid:EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:07:bb:8c:bb:fc:55:97:61:33:f0:f0:61:2d:25:25:79:dd:
a7:13:fc:02:b9:c8:d6:17:6a:6e:71:2a:c3:bd:ac:b9:9a:36:
3b:6c:5b:01:e5:c0:4a:64:d1:63:64:84:28:0a:ca:08:c9:c2:
2d:45:57:7b:1d:21:31:10:6f:d8:53:6f:4a:e1:2e:a5:37:4c:
a9:95:fb:fa:bf:d9:15:2a:ed:15:fb:98:7a:0b:39:c1:7c:2e:
e1:8f:ea:3b:05:b7:c3:68:38:e6:16:8b:7a:a2:95:de:9e:7d:
93:a2:b4:61:a6:9d:eb:83:1d:d9:ed:20:77:32:2a:54:70:c1:
e4:0e:1e:c8:ca:0b:45:1a:bc:e9:1b:04:7d:f2:27:38:8c:3c:
6f:7c:04:a0:84:71:36:08:b1:31:9b:38:ed:21:18:d3:25:ca:
f6:dd:df:78:46:6a:d7:49:69:ce:a8:8d:3b:e9:2f:f0:b3:55:
75:f0:72:cc:71:fc:73:28:94:bd:4b:04:cd:56:42:be:33:0a:
04:8b:5a:ef:15:2c:ca:44:8b:0a:02:e0:89:ea:42:0e:c7:b4:
b4:20:99:7e:a1:aa:cf:d8:e1:24:ca:74:5f:89:80:b2:6f:49:
b5:5d:b2:a3:9c:9f:0c:fc:56:93:1e:c0:e0:23:bb:c6:b4:3c:
98:65:94:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:34:47 2025 by rpki-client