Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
File: edFXhuZE1JfLeisyU71D2S5Jxas.mft (raw, json)
Hash identifier: 2aadVgCa9IbJ2ozyTfesaNzv42dpBtYch8P1O4YBmdA=
Subject key identifier: 37:57:0E:EA:01:E2:1A:5A:5C:9A:CD:5B:47:61:C2:1B:65:AE:E5:A2
Authority key identifier: 79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
Certificate issuer: /CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Certificate serial: 01974A7AFD7C4C1DA2B315708403C7949324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 13:01:03 +0000
Manifest this update: Sat 07 Jun 2025 13:01:03 +0000
Manifest next update: Sun 08 Jun 2025 13:01:03 +0000
Files and hashes: 1: edFXhuZE1JfLeisyU71D2S5Jxas.crl (hash: yazkTB/b9NY7K/HRVHvhrgj7myvORbUf1zPLAMH1yas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:fd:7c:4c:1d:a2:b3:15:70:84:03:c7:94:93:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Validity
Not Before: Jun 7 13:01:03 2025 GMT
Not After : Jun 8 13:01:03 2025 GMT
Subject: CN=37570eea01e21a5a5c9acd5b4761c21b65aee5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:d4:3f:e7:62:e8:37:c1:be:00:d6:a8:3a:
5b:22:09:f5:fb:1d:af:39:7a:48:d1:1c:34:fd:a7:
a0:bf:53:76:b3:7c:7b:0a:61:0b:aa:14:fd:e7:fa:
db:e3:14:e6:fc:d8:ca:ad:02:10:60:ba:b5:32:63:
4f:64:67:7e:25:5c:8d:e7:27:31:0f:71:25:4f:6d:
38:69:30:39:df:4d:67:d8:74:1a:cb:2a:c2:27:a3:
4b:c6:57:aa:a6:dc:93:fb:7a:c1:33:c8:7c:9a:70:
ef:55:ac:3f:28:33:e6:b5:08:4a:d0:d2:70:66:55:
0a:a2:cf:d6:88:14:37:1f:b2:7a:e2:2e:c1:8c:52:
b7:b8:f6:c9:01:3d:b6:08:2a:9b:c8:4f:64:44:d6:
2b:62:6b:20:8c:62:37:e8:d1:0d:c3:8e:7a:0a:3b:
6a:7d:fa:10:ea:99:d8:99:6b:12:ff:09:48:fd:39:
dd:8b:2d:1f:cf:05:32:ae:44:29:95:d8:0a:81:49:
6b:30:1b:0b:7f:3d:8a:cd:65:bb:8a:9c:df:10:c8:
31:96:f4:b3:13:de:0b:ab:c1:1c:a2:dd:54:51:5f:
ad:34:0d:d4:5d:d5:da:34:b7:56:69:69:04:29:98:
ce:84:71:94:c4:82:b8:61:ec:b8:12:4d:0b:65:61:
d8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:57:0E:EA:01:E2:1A:5A:5C:9A:CD:5B:47:61:C2:1B:65:AE:E5:A2
X509v3 Authority Key Identifier:
keyid:79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5b:8d:cd:4e:fb:f3:17:3a:51:e9:64:44:49:03:ef:00:ad:
c3:cf:fe:d2:b4:77:ac:70:82:73:c4:2f:a7:a7:0f:e6:75:ac:
04:00:ab:50:2d:92:2c:cf:94:4c:89:b3:f4:ff:6d:74:be:86:
2d:cb:af:42:a8:09:f1:3e:88:8d:0b:36:b5:ac:12:df:40:d7:
cb:58:61:96:b5:d9:d4:b9:bc:f5:6a:f6:95:9a:91:31:78:d3:
87:71:cf:8e:41:07:d6:12:26:df:d7:5e:32:47:64:a7:97:fc:
1d:20:74:12:a2:34:3a:cd:75:0d:92:aa:f0:90:fa:e2:0c:61:
2a:1e:b2:70:5f:da:bd:41:60:95:55:16:3b:1d:39:06:da:22:
52:e8:d8:fd:3e:c1:10:d8:91:7c:09:2f:b3:34:2b:cd:7c:b6:
39:75:94:04:e0:b7:f0:f1:2f:27:d1:1c:94:d2:a8:00:93:32:
6d:30:ad:ee:e5:25:d6:48:a6:e5:01:40:11:43:bb:be:54:b6:
83:19:3c:52:ac:81:09:47:e7:5c:8e:cd:e2:70:09:b8:b4:5b:
5b:9c:7a:d5:fe:8f:47:9a:69:4e:bb:fd:14:59:02:21:14:fc:
85:63:00:37:b8:83:17:d1:24:f7:82:4d:6a:d7:f0:14:7a:bd:
73:37:30:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:59 2025 by rpki-client