Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
File: 41wFcLO3dz0eEYgufdLGJVN-sJw.mft (raw, json)
Hash identifier: gY06AB7UTON7eEFSRJF/Pg9NglIHBmqRtYkl05rbnD8=
Subject key identifier: AA:7D:54:8F:E5:88:5A:9E:FE:D1:57:7C:AD:B3:AD:02:D7:CC:CE:05
Authority key identifier: E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C
Certificate issuer: /CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c
Certificate serial: 019752351F33A1BC32D4FFBA5B3C9E65BA2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
Manifest number: 12B9
Signing time: Mon 09 Jun 2025 01:01:42 +0000
Manifest this update: Mon 09 Jun 2025 01:01:42 +0000
Manifest next update: Tue 10 Jun 2025 01:01:42 +0000
Files and hashes: 1: 41wFcLO3dz0eEYgufdLGJVN-sJw.crl (hash: sPt9R/vn25E4GZomXh/Dr8ufcBpDF7jC2PR97X8Px3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:35:1f:33:a1:bc:32:d4:ff:ba:5b:3c:9e:65:ba:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c
Validity
Not Before: Jun 9 01:01:42 2025 GMT
Not After : Jun 10 01:01:42 2025 GMT
Subject: CN=aa7d548fe5885a9efed1577cadb3ad02d7ccce05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8d:cc:3e:fc:1c:ee:1c:cd:a0:93:b3:a8:6b:
9a:09:d3:95:7b:92:5c:86:95:79:a4:e4:ec:cf:ae:
c9:7a:e0:12:ac:21:5b:f5:8a:59:4b:02:e9:8c:79:
bf:14:78:38:a0:11:99:8d:b1:9d:f3:12:db:65:1c:
41:8c:1d:48:8f:be:15:d5:86:43:c8:59:b1:16:c3:
8e:a3:f9:37:3e:e4:50:ec:c5:db:70:8f:14:e5:96:
c8:be:ee:83:29:8a:d7:d7:46:30:7a:9f:96:1e:d8:
c2:1c:33:dd:ff:68:4c:9e:e8:a9:1a:e9:16:2f:25:
97:e3:85:68:6d:b0:e9:48:af:b0:ef:a9:b8:f9:32:
b9:ce:04:73:9b:9e:9f:bd:96:42:ce:73:5c:3b:63:
7f:d7:d9:e8:59:3f:a5:66:7d:6e:41:7b:71:2d:36:
98:38:80:64:59:ee:09:a7:32:49:c7:25:c0:d8:8f:
3d:32:07:0e:6e:63:87:e0:12:e3:c7:21:c4:cd:6d:
83:6d:1b:e5:d3:8a:c5:7e:f0:88:d2:ef:d7:d1:fb:
fa:06:9d:09:9a:31:89:8a:d5:9e:2a:c1:a7:77:86:
ca:0c:91:50:bc:15:6c:db:84:d4:46:d3:fc:67:df:
d0:0f:7b:7f:e1:cb:b6:b5:09:fb:21:dd:2e:a0:a3:
30:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7D:54:8F:E5:88:5A:9E:FE:D1:57:7C:AD:B3:AD:02:D7:CC:CE:05
X509v3 Authority Key Identifier:
keyid:E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b3:57:7e:fb:9d:0b:76:0c:3f:1f:9b:78:c3:b8:28:aa:23:
d9:c3:87:ac:e3:2c:14:30:73:fd:f2:4f:6e:9e:a2:70:06:cd:
97:77:fd:db:92:a4:23:27:ab:be:c4:af:b3:a1:19:f9:13:3b:
f3:2c:bd:e3:c1:44:e1:26:66:eb:70:83:e9:34:ae:b1:66:21:
a8:fd:e3:af:44:d1:dc:15:b0:53:9f:ce:89:ba:47:82:ad:18:
1e:13:fb:cd:12:3a:d1:7f:5e:66:8b:00:77:92:93:34:42:20:
f4:97:7c:a0:ca:bd:66:fb:e5:04:74:f4:c9:96:e9:9c:e2:13:
f3:81:4f:96:ce:38:4a:61:b8:5c:c9:64:de:d6:e7:41:fb:04:
6e:bd:b3:63:49:de:5e:79:31:61:22:0b:19:61:24:58:f9:9a:
92:5f:2d:62:85:0d:bc:9e:fa:56:24:1e:f5:86:8d:20:a8:3b:
3f:a3:29:df:aa:eb:8f:28:70:5f:33:af:f2:fa:be:f6:ff:33:
1d:a9:17:80:a6:dd:77:0a:20:93:e7:df:f5:ba:91:14:b2:81:
d2:16:e9:86:58:01:ec:82:f2:0f:62:74:5f:53:d2:98:22:65:
02:81:15:62:cc:ef:54:8f:84:ad:57:b2:6c:b4:db:f8:9d:75:
7e:33:7f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:48:19 2025 by rpki-client