Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
File: a-pT2WLWegFI5je0tGib5NCEqeU.mft (raw, json)
Hash identifier: Rz4csgQZ5ILDV66BbbJJFzD4vSkKkeu7KQsx9ty3kiQ=
Subject key identifier: 59:A7:3D:A2:CC:57:F8:4D:69:86:4A:DE:F5:7E:D5:B0:D5:1F:BF:B8
Authority key identifier: 6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
Certificate issuer: /CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Certificate serial: 0197567E7E2DBC6028CD184717F9F81E40BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
Manifest number: 0561
Signing time: Mon 09 Jun 2025 21:00:19 +0000
Manifest this update: Mon 09 Jun 2025 21:00:19 +0000
Manifest next update: Tue 10 Jun 2025 21:00:19 +0000
Files and hashes: 1: a-pT2WLWegFI5je0tGib5NCEqeU.crl (hash: sF2ADHoVoDvgHs27nyxNdm700xGBYtse0/KAHpGoKec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:7e:7e:2d:bc:60:28:cd:18:47:17:f9:f8:1e:40:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Validity
Not Before: Jun 9 21:00:19 2025 GMT
Not After : Jun 10 21:00:19 2025 GMT
Subject: CN=59a73da2cc57f84d69864adef57ed5b0d51fbfb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:43:c2:15:b0:94:6c:f8:53:b7:c3:0c:d0:47:
0c:f9:9b:ac:bb:18:d9:04:ca:9c:23:0d:19:7b:be:
54:7e:a9:2e:45:b2:e9:cf:ff:96:08:76:6e:2c:99:
c6:94:31:19:4b:6a:bd:d5:1c:bf:2f:d5:8f:ed:1d:
a1:48:3e:ff:8a:59:48:f8:78:61:e4:7a:b0:3a:d4:
ac:63:f8:9f:45:02:78:4c:d7:a5:92:a0:68:f0:c9:
3b:0d:47:66:22:d4:25:e7:f7:2b:e4:1a:03:17:73:
23:cf:5a:9a:ba:b4:a7:8e:9d:3b:04:36:86:9e:6a:
ea:c1:3a:30:54:76:26:7b:eb:3c:08:b6:37:91:c7:
0f:99:8b:90:b8:ac:3f:04:da:36:52:4e:e2:38:92:
25:0e:af:b4:f8:ff:4c:5d:05:63:08:2a:f6:f6:f7:
81:d8:29:88:a0:81:de:18:ec:72:73:d5:d2:e1:b7:
04:6f:e8:96:a6:68:52:1e:cb:e0:7b:f9:09:b5:73:
b0:36:43:6d:a0:d6:5c:27:f3:a7:27:14:b8:59:b5:
9f:7d:a7:22:c7:8b:b9:11:1a:50:c3:a7:ad:49:db:
c6:23:b5:f8:22:0d:29:ba:bd:20:cb:33:31:92:cd:
d2:57:d1:a3:04:d8:fa:d3:32:ea:2b:f9:60:22:bf:
df:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A7:3D:A2:CC:57:F8:4D:69:86:4A:DE:F5:7E:D5:B0:D5:1F:BF:B8
X509v3 Authority Key Identifier:
keyid:6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:39:e8:ed:24:44:2b:d3:9c:cd:08:dc:a9:a1:c7:92:21:db:
08:0b:7f:24:aa:cc:91:7e:71:c3:55:80:ab:9b:cd:5e:14:a8:
b8:a5:5d:3d:5e:af:17:6d:ef:a3:46:0e:71:69:52:fe:c5:75:
52:12:ac:58:88:3a:af:54:f7:07:87:2a:44:00:03:cc:06:b1:
37:ef:10:93:b7:a8:3c:5f:ae:49:74:0b:eb:37:b0:49:bb:6d:
f3:97:eb:87:bf:10:90:e4:49:c6:d6:f7:f2:57:df:a0:cd:8c:
f5:1b:76:0f:58:92:77:6d:ac:56:57:b4:bf:ab:bd:48:18:31:
da:05:db:b8:78:08:a1:67:3d:3c:cf:c4:23:44:d1:07:b0:bf:
0e:0a:b6:0c:2e:ea:81:5b:63:18:82:2d:85:37:cd:ad:9d:b4:
1f:43:19:97:ec:ba:da:58:94:bb:d3:a6:b1:ab:0f:9b:f6:e7:
ff:99:95:86:e7:eb:e4:b2:0d:6b:fa:73:a2:14:14:15:57:47:
7b:c4:72:59:47:2d:07:6e:9f:d3:0e:18:ba:2c:14:b9:9e:ab:
b9:63:39:e8:aa:c5:ed:b9:18:8e:5f:65:3d:db:17:b8:8d:79:
f5:4b:da:4b:6b:97:3b:42:b1:3b:88:07:dc:92:1f:cf:f1:ef:
dd:4e:7b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:41:48 2025 by rpki-client