Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
File: pWT0IqqXs96coPZ5Gfv4LrH93dI.mft (raw, json)
Hash identifier: l7bvT8lPtqT3KeGauNVd4nCmktnQga04UR+CVhaF5Lw=
Subject key identifier: 8A:53:70:2F:35:F4:F1:11:22:A5:63:1C:43:27:CC:83:AA:E1:11:86
Authority key identifier: A5:64:F4:22:AA:97:B3:DE:9C:A0:F6:79:19:FB:F8:2E:B1:FD:DD:D2
Certificate issuer: /CN=a564f422aa97b3de9ca0f67919fbf82eb1fdddd2
Certificate serial: 019752350A56DA8DEE06811AFC5A5D84B769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
Manifest number: 05AB
Signing time: Mon 09 Jun 2025 01:01:37 +0000
Manifest this update: Mon 09 Jun 2025 01:01:37 +0000
Manifest next update: Tue 10 Jun 2025 01:01:37 +0000
Files and hashes: 1: pWT0IqqXs96coPZ5Gfv4LrH93dI.crl (hash: cuG+D9lt1gMgkliaBMwgemL5Ikjpd8w6OglEuPpjZnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:35:0a:56:da:8d:ee:06:81:1a:fc:5a:5d:84:b7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a564f422aa97b3de9ca0f67919fbf82eb1fdddd2
Validity
Not Before: Jun 9 01:01:37 2025 GMT
Not After : Jun 10 01:01:37 2025 GMT
Subject: CN=8a53702f35f4f11122a5631c4327cc83aae11186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:c8:17:9e:73:5f:af:35:c3:a0:cb:5e:3d:
35:a0:25:14:86:59:b7:ec:cf:27:23:fd:6f:f8:7f:
76:c9:ab:97:18:ef:31:b9:bf:db:09:9e:47:a2:9a:
58:cd:59:77:34:39:75:29:0f:9b:67:da:8f:01:be:
c2:ac:de:27:79:28:b4:c2:2d:9b:cf:a6:ae:8d:4f:
47:cc:ad:24:fb:11:02:10:6e:92:97:ff:d4:e5:c2:
fc:69:08:59:69:45:7b:3d:b2:2f:fb:97:04:a5:55:
0a:22:67:0e:c8:ce:10:17:51:91:09:33:20:3c:51:
ed:af:38:3e:e2:78:ea:bf:2e:7b:5b:6b:00:8f:28:
79:40:94:91:35:b3:31:60:25:f9:94:1f:54:2a:79:
2f:9d:40:8c:2e:89:c0:94:1e:ba:ee:cf:29:9f:0b:
c9:14:5d:69:94:56:07:db:c1:a9:a1:39:7d:b5:47:
23:72:c5:31:bc:a1:4e:c0:12:30:01:85:9f:34:53:
09:b4:f4:6d:bf:3f:e9:74:3b:66:b0:11:2b:26:a8:
f8:ad:12:35:da:7b:e5:7c:0e:28:c1:b8:90:6d:c4:
5b:39:ae:4a:a8:08:cc:f1:e2:b9:3a:c4:25:1c:f4:
dc:f9:dc:00:47:1e:42:6f:d6:b5:29:64:6e:11:9d:
b4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:53:70:2F:35:F4:F1:11:22:A5:63:1C:43:27:CC:83:AA:E1:11:86
X509v3 Authority Key Identifier:
keyid:A5:64:F4:22:AA:97:B3:DE:9C:A0:F6:79:19:FB:F8:2E:B1:FD:DD:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c8:79:98:a2:91:f0:32:22:bf:17:de:0b:9c:23:e7:73:9d:
a6:1c:e4:72:22:38:9d:99:ee:86:68:cf:d0:0f:18:e1:ef:37:
86:39:f6:c7:01:25:06:a9:83:52:f2:16:18:e9:7f:dc:e1:3a:
35:d3:e2:86:b1:53:bb:d1:79:88:84:15:0c:d1:8e:bd:42:b7:
63:4c:0d:b9:d5:6b:ae:b2:9a:49:24:a7:c1:ef:d5:ee:ab:60:
3d:a3:0a:e7:5b:4e:b4:38:0a:f2:f5:8c:41:92:49:b9:9f:31:
78:8f:30:d1:de:23:a4:15:ee:9c:ee:a1:e6:2e:85:54:0d:c6:
b9:14:85:53:50:6d:66:f8:2f:1f:4f:cc:42:44:9d:c4:a2:b0:
13:77:2f:31:34:95:af:2b:47:82:83:cf:e8:7e:33:27:b9:45:
4c:d0:fb:ea:69:2f:00:81:d6:dd:42:8f:6b:ba:7e:4b:18:53:
e8:2a:5e:ac:10:ee:ea:b7:47:42:7c:02:51:6e:59:d9:f3:95:
89:40:51:aa:87:0a:2b:44:83:54:64:44:64:0f:0b:fd:82:79:
6a:b0:e2:98:0c:9b:0e:93:a3:c7:69:76:77:b5:29:54:29:dc:
50:63:54:69:06:95:d0:1a:2a:08:de:69:c3:90:bb:89:d9:8d:
9f:b3:fd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:48:52 2025 by rpki-client