Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
File: cMySQTZlvWsN3lGpprVl5ywyHlI.mft (raw, json)
Hash identifier: 9cd4fEkDfNmmy9xmpPqpD/hvnO/9J0ib2ILQzkROZOM=
Subject key identifier: C3:9F:D3:4D:1A:70:82:7E:25:0A:92:D4:47:3B:43:E6:E4:DE:32:19
Authority key identifier: 70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
Certificate issuer: /CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Certificate serial: 01975422A982574B94553F40B31D33571B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
Manifest number: 065E
Signing time: Mon 09 Jun 2025 10:00:47 +0000
Manifest this update: Mon 09 Jun 2025 10:00:47 +0000
Manifest next update: Tue 10 Jun 2025 10:00:47 +0000
Files and hashes: 1: cMySQTZlvWsN3lGpprVl5ywyHlI.crl (hash: SCX0TyrBUwL0UBDTXO0xQD4EkuL3CF93Pf2bTP7KIKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:a9:82:57:4b:94:55:3f:40:b3:1d:33:57:1b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Validity
Not Before: Jun 9 10:00:47 2025 GMT
Not After : Jun 10 10:00:47 2025 GMT
Subject: CN=c39fd34d1a70827e250a92d4473b43e6e4de3219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e8:90:74:05:b5:d5:59:ad:90:ca:08:74:30:
e7:30:f4:8d:17:be:4b:3d:93:29:b8:97:96:9d:0e:
6d:44:a1:92:11:4c:87:27:80:96:bc:7c:cd:3d:70:
92:b1:41:44:83:0a:6a:bc:4c:8c:89:bf:da:b5:0e:
9a:ee:70:03:24:c2:65:75:84:7e:f3:a4:ea:bb:82:
5e:9a:9a:a6:47:74:11:b4:76:64:8f:64:99:e5:3b:
80:16:82:d7:6b:1e:62:33:a9:45:cb:69:00:24:48:
bb:a7:e4:19:33:ab:63:75:de:f9:91:5c:76:1e:16:
93:51:2c:69:1c:f9:65:e7:c0:76:07:5f:eb:66:44:
45:00:75:bc:1d:eb:7e:21:c5:a0:e7:51:3f:52:70:
e0:18:8d:f6:1f:d9:9c:49:cb:07:99:30:ba:bf:99:
12:c5:a5:0f:28:79:47:b1:66:3c:cf:0f:31:af:dc:
52:30:04:d1:da:86:1e:a3:61:d2:11:ea:c0:3e:74:
45:cd:43:af:40:82:2e:57:a3:76:37:01:e2:89:95:
d2:20:36:c6:a6:4f:0d:66:8b:4e:33:85:63:49:b7:
ac:2f:24:45:52:9b:ee:2a:ab:e2:f0:50:26:7f:18:
86:c4:3a:4d:61:53:7f:52:9f:47:69:dd:f9:fa:f4:
0c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9F:D3:4D:1A:70:82:7E:25:0A:92:D4:47:3B:43:E6:E4:DE:32:19
X509v3 Authority Key Identifier:
keyid:70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6b:88:ee:5a:6f:9a:77:2d:52:e3:5f:4c:44:1f:46:ca:6f:
79:08:90:00:fc:0d:0d:89:9d:75:e2:78:7c:d0:f6:0a:01:a0:
b0:4c:43:4e:f1:f7:2d:f7:29:53:3b:12:41:a4:77:dc:ff:c9:
1a:eb:07:29:39:4a:15:34:07:42:02:d2:42:f3:2e:8a:d9:48:
dd:57:b0:3d:cd:b5:67:72:25:f0:0f:21:16:64:e8:e1:bb:b9:
0e:d7:28:ec:34:85:33:91:f8:ab:72:dd:5d:fe:50:87:33:fa:
75:06:07:7c:ee:16:0a:57:a7:25:09:e9:40:84:f3:d5:e0:d2:
28:d1:68:e8:28:74:e0:47:3b:4d:f1:d4:0f:42:27:ae:2f:f9:
6f:f2:fe:c6:b7:83:18:e2:43:77:aa:6e:42:f7:12:85:28:bf:
d6:c2:15:a7:d6:1d:27:38:78:1a:5f:5b:02:84:14:8a:1e:a9:
4b:eb:23:04:dc:0c:a4:01:62:46:d7:df:b3:60:29:5f:2b:31:
47:85:ff:d6:81:1f:9c:0f:c8:1e:74:f4:98:d9:f8:a4:e8:6f:
65:a3:0c:67:04:48:aa:2b:24:4b:94:d6:9f:68:17:52:3a:47:
07:9a:66:6d:c4:76:8b:fb:a2:91:2f:56:40:e1:89:1c:38:03:
0b:4d:af:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:56:58 2025 by rpki-client