Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
File: cUKDDu7SiwS83QP6P9pIxUha_P4.mft (raw, json)
Hash identifier: vva/rDbzFCg4DmaYwsRsyG+IOKe9K1S3B7UchwWF+Gk=
Subject key identifier: FB:E0:B8:25:48:F2:56:B2:87:9D:4B:F3:CF:18:A5:F8:60:81:2C:D1
Authority key identifier: 71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
Certificate issuer: /CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Certificate serial: 019757FFC7CDB4295F5C602FE2C37D4D85F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
Manifest number: 0E57
Signing time: Tue 10 Jun 2025 04:01:09 +0000
Manifest this update: Tue 10 Jun 2025 04:01:09 +0000
Manifest next update: Wed 11 Jun 2025 04:01:09 +0000
Files and hashes: 1: cUKDDu7SiwS83QP6P9pIxUha_P4.crl (hash: GcN+1JAO9D4BLVgrgAThi6XAumiLCIUxop+kdOLU3aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:ff:c7:cd:b4:29:5f:5c:60:2f:e2:c3:7d:4d:85:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Validity
Not Before: Jun 10 04:01:09 2025 GMT
Not After : Jun 11 04:01:09 2025 GMT
Subject: CN=fbe0b82548f256b2879d4bf3cf18a5f860812cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:ff:37:2a:ca:c3:11:7b:81:c9:9c:e5:41:
d3:6e:86:78:de:a4:a3:0b:2d:ba:d2:92:e4:27:d8:
29:ae:16:e7:83:f8:15:9b:d9:2a:54:6a:30:dc:5b:
8c:f4:14:fb:14:3a:b0:cf:31:b8:1c:06:63:04:78:
9c:f3:e7:19:23:be:73:d4:41:a0:d0:de:6e:b8:06:
37:ac:18:d4:54:c0:42:db:17:f0:6b:f3:b6:c9:b3:
2a:90:48:15:ed:6c:3f:53:50:5d:f5:28:22:3f:42:
5f:3c:07:ac:84:75:5b:8b:7a:6e:bf:d3:e6:88:4e:
0d:30:f1:06:9a:54:2d:88:0c:63:06:67:b9:fe:8c:
f8:4e:9f:ea:d5:ca:5d:c2:0d:e9:0d:a5:b8:ef:20:
2a:00:d0:1f:30:8f:18:a8:67:c1:bb:2e:b9:b5:e0:
bf:4c:3e:9a:09:9f:a1:40:75:fc:f5:00:d3:f5:7a:
1f:e4:9d:cb:e6:ae:ba:48:f7:68:6b:f4:56:34:a4:
5e:a9:c6:62:25:82:a9:17:a4:67:b3:f1:ba:a5:10:
fc:0e:76:93:36:31:9e:f8:8f:41:e0:5b:20:56:46:
19:4f:a8:6e:9c:76:79:63:22:09:1d:27:6c:5e:93:
28:98:a8:16:68:62:28:18:d1:cc:cd:20:c9:91:3c:
91:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E0:B8:25:48:F2:56:B2:87:9D:4B:F3:CF:18:A5:F8:60:81:2C:D1
X509v3 Authority Key Identifier:
keyid:71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:19:f0:bf:65:fc:e3:a3:30:3c:15:61:49:da:f8:0c:6f:aa:
05:3c:ba:9a:0d:48:b3:75:72:89:4a:9d:98:53:46:9f:8d:d0:
f9:b7:d8:ce:38:63:8b:3c:99:e8:a4:15:b4:b2:54:a5:64:db:
1b:2e:2b:d6:21:63:5e:ec:77:40:cf:2b:23:81:21:52:b2:05:
50:09:ff:3b:5c:6d:ae:57:49:35:31:83:28:6b:51:dd:dc:6e:
1c:c1:ab:45:0b:ef:80:6b:ce:9e:ce:4d:6d:97:16:c8:2f:fe:
45:64:9a:f6:7e:6e:66:fe:40:2f:9f:47:4a:0f:15:2b:40:0c:
61:fd:7c:08:e4:0f:80:54:98:1f:04:c6:8d:05:9e:e1:5f:bb:
dc:ee:17:14:0c:f4:79:ab:95:c4:f0:45:b6:9b:58:29:80:ad:
89:58:d5:18:56:c0:e6:a9:85:7c:a2:ce:d4:0f:3c:c6:89:d5:
d4:c9:52:35:54:06:25:bf:52:5a:b2:5a:45:40:5a:66:c5:c7:
30:d9:39:2b:a3:b7:72:dd:a9:b7:3a:bf:78:29:be:6e:bc:8b:
67:29:5e:f3:17:30:2e:a9:a8:68:7c:e1:36:f7:73:e5:b3:53:
6e:79:81:d3:19:1f:5b:5e:80:b4:d2:ca:6d:46:12:de:86:e3:
3a:ea:26:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:56:09 2025 by rpki-client