Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
File: cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json)
Hash identifier: pFjsQmKxlkv8MhermU5UpYzxODikyy+1vYZPMejQEQg=
Subject key identifier: BC:98:26:42:45:54:F0:F9:DF:AD:E8:03:DA:4A:04:67:07:8E:C3:9B
Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
Certificate issuer: /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Certificate serial: 0197586DBCD8C495691FF724F1DED2601A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
Manifest number: 03A9
Signing time: Tue 10 Jun 2025 06:01:16 +0000
Manifest this update: Tue 10 Jun 2025 06:01:16 +0000
Manifest next update: Wed 11 Jun 2025 06:01:16 +0000
Files and hashes: 1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: Q9z61+p4NDiAPeA0cyEwV7i1bDA7sLnRdKcls9JvAeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:bc:d8:c4:95:69:1f:f7:24:f1:de:d2:60:1a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Validity
Not Before: Jun 10 06:01:16 2025 GMT
Not After : Jun 11 06:01:16 2025 GMT
Subject: CN=bc9826424554f0f9dfade803da4a0467078ec39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:98:26:08:a7:07:fc:79:d8:a1:b5:42:f8:83:
4f:f8:20:d4:bd:e3:06:07:67:48:e6:7f:75:88:fb:
ec:6b:b7:65:ca:f8:bc:d4:bf:ba:00:13:4b:2c:b1:
d8:3d:da:e2:37:92:11:69:04:57:9f:d1:7e:53:2b:
87:de:3c:13:3a:84:f9:22:30:13:68:16:37:57:d9:
d7:e2:28:7d:8e:96:5a:14:c0:f9:f6:ac:0c:dc:a1:
7a:db:26:35:8d:3c:a7:ba:3c:f3:4b:c8:e6:a2:80:
14:c6:59:53:b8:a1:a4:e5:58:b4:f3:e4:84:f2:e7:
99:2b:b2:60:75:c9:22:ae:58:c6:42:c2:ef:e2:ec:
5a:7c:ed:a8:bf:7a:ea:90:dd:e4:2f:95:e4:bc:14:
4d:8a:0d:13:91:3c:15:b7:81:11:02:fa:dc:a1:76:
14:5c:92:63:7d:86:b2:f6:c0:4a:74:a4:10:0a:7c:
b2:bd:54:67:b1:d0:8e:37:4b:38:f6:5b:4e:35:5c:
fb:74:96:4f:a8:ed:60:7d:54:b5:a6:08:bc:16:2f:
72:6a:20:14:a4:cc:b9:6f:df:82:00:87:5f:95:aa:
5b:04:da:cd:fa:ba:82:ca:62:22:00:b9:ae:51:9c:
2d:23:14:ce:c1:d8:45:5d:30:fa:75:05:d3:9f:5a:
c2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:98:26:42:45:54:F0:F9:DF:AD:E8:03:DA:4A:04:67:07:8E:C3:9B
X509v3 Authority Key Identifier:
keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c7:35:50:b1:52:31:3f:87:e3:02:21:c9:da:b6:6b:cc:5c:
1e:7d:d4:5c:5a:09:fd:22:14:36:87:06:6f:ac:3c:7c:e1:8f:
d7:33:63:03:2e:36:f0:d0:fb:a4:26:d4:ab:e2:88:85:89:43:
fa:9e:7b:07:ee:53:ab:cd:12:8f:f6:f8:7b:e9:18:21:26:83:
9a:a2:2b:56:bb:0d:79:b1:7c:b0:5f:38:c9:f8:0f:f1:f7:b5:
19:62:d2:e9:50:98:8d:63:98:e7:2a:7c:c0:b8:d9:67:53:ad:
1f:cc:bb:85:d3:a3:46:22:79:f1:96:69:49:8e:36:f9:42:c1:
17:13:73:8c:51:ae:79:66:4f:b0:2a:2f:1a:57:ec:d3:3a:52:
60:d2:e3:8b:8f:a5:94:60:c7:f8:1f:28:b4:06:23:6d:b1:d6:
27:28:cf:25:25:11:98:1f:21:37:d2:10:a5:8e:2a:fd:84:4e:
22:f3:70:48:2f:1b:3e:06:86:a6:02:b9:bb:65:15:8a:13:e2:
f6:ca:17:01:c0:47:a1:f5:ea:0b:45:b7:b4:32:b8:82:e0:87:
e3:56:29:2d:b9:2b:d4:5b:c4:fd:a7:20:e6:91:2f:b8:c1:ad:
32:6a:8c:8f:da:1e:2f:5d:37:48:4f:b7:42:ee:b0:45:8b:0b:
3c:15:8f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:03:44 2025 by rpki-client