Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
File: ru85tCEAXzAraRD5Y5P0tlR6j-w.mft (raw, json)
Hash identifier: H7VUQNpjGD+r/cfSjJ+7wApREIb8ppJrrMOfg3NVKpg=
Subject key identifier: C1:98:EF:7A:62:B5:83:3C:B9:92:6F:8B:9D:5C:3F:FC:D8:75:DA:CE
Authority key identifier: AE:EF:39:B4:21:00:5F:30:2B:69:10:F9:63:93:F4:B6:54:7A:8F:EC
Certificate issuer: /CN=aeef39b421005f302b6910f96393f4b6547a8fec
Certificate serial: 01974AE8F3BB3070774B817F2AFE7F8FA211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
Manifest number: 1E
Signing time: Sat 07 Jun 2025 15:01:09 +0000
Manifest this update: Sat 07 Jun 2025 15:01:09 +0000
Manifest next update: Sun 08 Jun 2025 15:01:09 +0000
Files and hashes: 1: ru85tCEAXzAraRD5Y5P0tlR6j-w.crl (hash: 3hKwniAtymiEL4FJBSHFeq7VxvXlsd2dARlMwqSP3ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:f3:bb:30:70:77:4b:81:7f:2a:fe:7f:8f:a2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeef39b421005f302b6910f96393f4b6547a8fec
Validity
Not Before: Jun 7 15:01:09 2025 GMT
Not After : Jun 8 15:01:09 2025 GMT
Subject: CN=c198ef7a62b5833cb9926f8b9d5c3ffcd875dace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:86:ed:a5:16:a6:34:41:73:b9:8b:12:8e:
42:2b:76:90:50:39:53:b5:02:35:1b:27:ae:82:13:
73:34:9a:ad:5b:ad:55:e4:2a:51:f0:c6:c5:4b:91:
32:01:eb:62:28:b8:b8:1c:bc:15:bf:01:a9:f4:ab:
59:12:14:a8:83:71:bb:f9:ee:c5:38:5f:ea:25:74:
da:51:96:5a:2d:06:bb:ff:15:78:ff:04:45:cb:c7:
55:0d:00:b4:2c:0d:1b:dd:d3:17:66:dc:a1:cc:3a:
bb:2e:52:33:54:22:c3:2d:e7:e6:7a:a8:17:8c:b8:
7b:d2:af:8f:dc:db:6f:b6:4e:ad:d4:9c:73:fd:b0:
53:55:48:52:51:d7:8c:c2:0f:26:ab:9c:5e:6a:8a:
d5:2a:8d:ae:e6:13:a6:f5:17:23:c9:6f:6d:02:84:
ec:d0:98:aa:5c:96:20:e3:38:fb:3c:8e:47:0e:0f:
02:e9:17:41:b1:8b:2f:62:80:29:a1:39:69:44:0d:
4f:ac:9a:04:d9:1f:4c:c3:4a:92:91:21:0a:a5:a4:
42:5e:4d:45:92:a5:98:69:c3:63:1e:5d:7c:4d:c1:
54:9a:69:1e:5d:24:43:15:14:7b:85:fe:4b:d3:dd:
c8:3f:9d:0c:7d:96:54:2e:4d:7e:22:44:0d:35:9a:
00:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:98:EF:7A:62:B5:83:3C:B9:92:6F:8B:9D:5C:3F:FC:D8:75:DA:CE
X509v3 Authority Key Identifier:
keyid:AE:EF:39:B4:21:00:5F:30:2B:69:10:F9:63:93:F4:B6:54:7A:8F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b8:f6:e1:ba:41:a3:eb:f8:41:6d:ea:0a:69:74:9b:42:4c:
b5:4e:b2:77:2f:c4:13:38:a7:2b:4b:b3:ea:66:c1:44:00:3c:
ad:93:de:38:4d:65:be:cc:f9:b4:ac:27:bf:45:79:2b:be:15:
0f:dd:dc:1a:93:8e:b3:89:2c:13:fa:2d:07:b5:27:c8:ee:d4:
75:dc:35:e9:b9:97:c5:ff:24:69:94:3c:41:ca:89:7d:9c:23:
74:2a:c5:10:d3:64:ab:05:68:0c:1b:53:14:ff:71:f5:16:b3:
3c:32:ca:4e:8d:cb:95:c2:53:01:de:fc:ee:c0:fe:ce:b9:45:
1e:19:c5:dc:25:90:ea:ab:a7:c5:9b:c4:34:55:53:5f:2f:9b:
e2:9b:fa:62:3f:ca:04:2d:9b:0d:f7:f3:4e:2f:12:a2:b7:f6:
06:a8:40:22:19:22:0e:2b:4e:36:0b:08:4c:92:83:37:8b:cc:
e8:ed:d1:5d:16:9b:04:06:0a:1d:5f:d3:6f:e4:a8:de:18:24:
00:3e:88:ab:d8:af:82:4c:87:93:7b:e5:1b:77:40:09:31:6e:
d5:c4:96:3f:8e:fe:ce:15:02:83:0c:ff:c7:17:4c:1c:36:c7:
49:da:96:12:2e:73:09:29:68:82:fe:50:fa:b0:d1:15:49:e0:
b8:cd:59:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:05 2025 by rpki-client