
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
File: 0ur89N6SC5zmRdbmlt8IqosFUZs.mft (raw, json)
Hash identifier: np9EW1tH+u/MsPeBwvC7FTgQdKSa4WUIflYldfuU0HY=
Subject key identifier: 6E:2A:1D:0E:80:F0:CF:84:32:73:CC:B9:03:4D:E3:A5:19:B9:9D:06
Authority key identifier: D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
Certificate issuer: /CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Certificate serial: 0197458B5648F735DCB15E1746C7CD163BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
Manifest number: 127C
Signing time: Fri 06 Jun 2025 14:00:48 +0000
Manifest this update: Fri 06 Jun 2025 14:00:48 +0000
Manifest next update: Sat 07 Jun 2025 14:00:48 +0000
Files and hashes: 1: 0ur89N6SC5zmRdbmlt8IqosFUZs.crl (hash: gFdyDutcDt+oodl6hHKSBaAIZAno/kGxPpnOyXfVeJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:56:48:f7:35:dc:b1:5e:17:46:c7:cd:16:3b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Validity
Not Before: Jun 6 14:00:48 2025 GMT
Not After : Jun 7 14:00:48 2025 GMT
Subject: CN=6e2a1d0e80f0cf843273ccb9034de3a519b99d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:c4:f9:c8:c8:85:bf:e6:84:2f:16:93:5c:
2a:ef:fa:81:ef:16:d8:d8:e1:05:9c:ce:88:6e:20:
07:f5:f9:3f:79:e1:53:04:17:77:93:78:ce:81:06:
84:72:99:5c:2d:cb:22:12:70:6d:b0:de:a3:a8:5f:
73:8f:99:cb:77:91:db:0c:bb:91:88:69:5d:61:1f:
b0:fc:31:99:de:41:99:fa:b9:31:ec:fa:7d:52:64:
ac:23:0f:0e:60:75:26:78:0d:56:70:d3:99:2e:57:
67:23:20:4e:00:df:95:f0:be:aa:8c:e0:12:f7:4a:
76:51:ae:d8:69:7f:e5:27:2b:fc:fc:bc:97:90:df:
18:3a:27:65:1c:4d:f1:b4:b4:e6:6f:cc:6e:fd:8f:
8d:14:ad:ef:ef:63:94:5f:91:ef:ff:ef:62:e1:5f:
10:1c:01:37:29:48:f9:7f:e2:35:61:71:15:c1:ae:
02:e1:62:2f:4f:79:6e:dc:79:49:a1:06:a2:4d:cc:
4b:de:0e:01:57:e8:88:50:ee:e9:88:53:fd:d9:ea:
ee:13:84:fa:e2:85:52:a4:53:ed:cb:3e:46:08:d4:
58:f1:49:ba:5f:ce:52:ea:35:70:0b:28:e8:aa:41:
88:98:b7:3a:f3:1c:02:1a:31:bc:96:5b:10:d1:ec:
a7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2A:1D:0E:80:F0:CF:84:32:73:CC:B9:03:4D:E3:A5:19:B9:9D:06
X509v3 Authority Key Identifier:
keyid:D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:23:d2:ef:73:6f:b8:73:8a:20:08:59:4d:88:c8:54:b6:f5:
96:8c:a2:46:b4:5d:86:87:e0:a3:46:e7:62:c9:19:a0:64:6f:
77:4a:e9:3f:28:8d:d9:a1:b2:b3:2d:53:fd:4c:ae:2d:7d:15:
c3:f5:10:22:21:e4:c5:41:cf:a7:8b:a6:84:08:91:d9:a1:0c:
d7:0f:15:39:de:af:5d:1b:2d:0e:60:ac:0e:9c:dd:61:c5:67:
da:f4:5b:3e:c6:88:76:1f:80:6d:8e:79:d3:70:7f:6c:85:f2:
42:c5:c9:3c:2b:fe:e3:a5:b2:89:85:e3:d3:45:d6:04:99:76:
b2:6c:fa:59:62:e8:7f:4a:9e:c5:c3:b1:b9:b8:c2:6e:78:7f:
0b:7e:bf:8b:34:d7:31:bf:b2:28:17:4d:d1:f7:89:03:75:b1:
7b:b0:83:1b:2f:03:e9:5e:ae:ca:85:c5:d1:cc:c7:c4:b3:d7:
ea:36:fe:e7:9b:c6:7a:e9:33:37:95:82:2b:41:06:e3:70:8e:
1c:36:06:e7:2e:68:2b:a5:27:ae:43:f2:38:70:5e:6b:b7:e7:
f2:c6:82:2e:ac:e4:02:fb:26:3b:ba:3b:fd:cc:f2:65:6d:77:
47:1f:fb:62:66:2b:e6:cd:b8:19:85:ef:14:cf:44:62:3f:a1:
b8:fd:15:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:25 2025 by rpki-client