Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
File: cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json)
Hash identifier: 6oKcGuQ9btBV/YQT7pwsO7gS38nX10wJjdARLyooIO8=
Subject key identifier: 40:10:DC:B9:66:E0:32:95:65:66:CC:FA:D1:C3:5E:7E:C2:C9:FF:26
Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
Certificate issuer: /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Certificate serial: 0197602726349486DBAA869502C86C03C20D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
Manifest number: 03AD
Signing time: Wed 11 Jun 2025 18:01:07 +0000
Manifest this update: Wed 11 Jun 2025 18:01:07 +0000
Manifest next update: Thu 12 Jun 2025 18:01:07 +0000
Files and hashes: 1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: uhe6eeeLtzGK185Wwpc6aMlLgejGBgmHwMCvQBBMHlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:27:26:34:94:86:db:aa:86:95:02:c8:6c:03:c2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Validity
Not Before: Jun 11 18:01:07 2025 GMT
Not After : Jun 12 18:01:07 2025 GMT
Subject: CN=4010dcb966e032956566ccfad1c35e7ec2c9ff26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:60:39:da:95:ea:6d:e0:16:5b:5e:b6:5b:
ee:57:51:71:8e:94:45:0c:72:c2:79:d9:44:67:47:
ff:bb:f9:a9:d9:9b:9c:9b:9c:09:ed:76:7f:69:58:
07:9e:56:f9:2b:43:72:c1:27:e0:d4:c8:7a:0c:55:
0c:a3:60:18:39:1a:3f:45:97:7e:35:7e:e2:03:bd:
c9:f0:32:b9:62:b1:f4:81:30:fd:c1:e4:e1:fe:44:
3c:97:f0:f3:c6:71:a1:a4:a2:9e:7b:0d:16:2f:96:
bf:4d:47:c8:22:cc:52:5e:23:40:a4:27:7b:c0:a7:
bf:7a:4f:4d:ba:d7:31:c4:92:35:17:f1:ef:a8:13:
4a:c7:15:66:0e:9f:ee:71:b0:b5:7e:2b:f9:f8:d5:
b0:e4:86:85:30:b7:b2:7e:8c:ec:50:fd:ec:b3:b5:
e0:11:38:a3:d6:49:30:9f:12:df:1b:eb:7f:cd:c4:
ec:b9:0d:23:84:b2:bc:c3:87:91:ca:a3:99:a2:36:
64:78:91:6c:5e:3b:19:64:6d:94:12:c5:4d:75:a4:
21:e0:71:ac:0a:6e:b1:bb:38:87:06:93:8c:7e:86:
84:6d:4f:0b:9a:ef:36:b8:84:7b:1b:b0:b0:37:e7:
e7:1e:15:97:9d:25:05:0a:07:6b:40:49:38:22:10:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:10:DC:B9:66:E0:32:95:65:66:CC:FA:D1:C3:5E:7E:C2:C9:FF:26
X509v3 Authority Key Identifier:
keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c6:2f:78:2e:44:bc:62:5d:23:6b:1a:75:3c:bb:0f:cd:3d:
00:77:dc:3b:c7:88:3a:9b:f0:6a:df:29:64:f0:14:47:54:28:
1c:54:e9:20:55:0b:c0:6e:66:be:44:4c:8e:34:0c:04:e9:21:
c0:84:ec:a9:eb:8f:59:ac:ec:8c:26:0c:be:dc:2d:b8:8a:eb:
ba:5d:4d:d6:35:0b:c6:87:1a:67:31:07:ed:dc:35:2b:1b:a2:
39:c5:58:74:75:41:6c:e8:15:f0:79:c1:5a:b8:52:11:15:d2:
88:12:89:4c:2b:24:69:85:63:a0:81:51:45:62:f3:f5:a3:87:
4b:0f:9d:aa:d9:d0:e7:66:01:51:08:53:bc:79:32:9f:8b:a5:
3d:4d:f4:f9:ea:9b:03:4b:ee:75:f5:67:a5:da:ef:4b:4e:02:
b2:71:f0:b4:0e:99:74:89:e5:c1:1b:83:e5:58:21:e6:2e:e1:
a1:d8:6a:e1:a1:c8:18:d3:03:7e:98:64:24:23:9e:00:5f:34:
85:d5:fd:25:18:34:b9:04:90:85:fc:6b:90:0a:46:6e:fd:99:
bc:07:c7:de:d3:bd:91:8e:34:93:04:14:9a:f0:43:7b:8b:2a:
7f:d3:bb:e6:5a:a4:6f:e5:b7:de:04:80:a0:41:01:27:76:b3:
ed:02:eb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:10:49 2025 by rpki-client