Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
File: hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft (raw, json)
Hash identifier: NboJi2em/SNCM//5jmxGdBOiW9OAdQ1SwBvVK+P3RaI=
Subject key identifier: D8:E0:4A:78:81:21:F3:D8:6F:7E:10:10:92:BD:EE:87:72:C3:91:6D
Authority key identifier: 85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E
Certificate issuer: /CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e
Certificate serial: 019747427E48AEA46A5E7090215B2AC973EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
Manifest number: 7F
Signing time: Fri 06 Jun 2025 22:00:29 +0000
Manifest this update: Fri 06 Jun 2025 22:00:29 +0000
Manifest next update: Sat 07 Jun 2025 22:00:29 +0000
Files and hashes: 1: hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl (hash: da6S7SjNtXgPa9Tf9CCRT1I1sWJSn6dS0DLF5af6QoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:7e:48:ae:a4:6a:5e:70:90:21:5b:2a:c9:73:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e
Validity
Not Before: Jun 6 22:00:29 2025 GMT
Not After : Jun 7 22:00:29 2025 GMT
Subject: CN=d8e04a788121f3d86f7e101092bdee8772c3916d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:e8:cc:c5:7d:f6:3b:41:d7:94:d6:f1:35:
3d:47:3b:a4:69:6f:fd:d4:9f:12:df:2a:e9:0b:9c:
a4:7d:4f:55:65:47:4f:f1:fc:31:f9:16:a3:c9:bb:
a1:b2:7e:d2:b7:c2:dc:96:6f:c8:06:8b:07:31:d2:
c0:22:46:87:2c:7b:36:ba:25:e1:7e:ef:ad:ef:54:
5e:6f:90:cd:b2:4c:91:a4:1c:e0:6b:95:a6:a8:27:
4b:e2:25:00:75:b2:17:89:67:31:29:af:80:5f:40:
58:15:0a:e8:b7:e4:9b:93:34:b3:21:06:30:27:45:
d9:9d:76:e2:f3:ea:49:e3:38:40:10:b1:c8:fa:5f:
9e:a4:d3:fe:46:15:37:0f:e5:50:d1:8e:6f:28:82:
44:46:1d:bb:ee:ad:4e:83:fb:25:70:55:98:64:c5:
20:c1:64:91:de:e2:d4:17:f4:38:47:f8:c1:4d:cb:
25:a0:83:9e:78:80:18:a6:da:6b:1d:44:e5:26:6c:
64:d6:1a:45:7e:35:e2:7a:2f:42:f8:bf:fe:a0:10:
70:94:16:54:f6:fa:9e:9e:3f:ab:1c:17:b9:df:b9:
56:b0:e0:04:f2:78:53:c3:e9:a6:98:20:a7:03:2b:
2c:bc:66:6e:71:26:23:fa:a5:65:6c:eb:87:7f:1a:
42:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E0:4A:78:81:21:F3:D8:6F:7E:10:10:92:BD:EE:87:72:C3:91:6D
X509v3 Authority Key Identifier:
keyid:85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ac:6a:40:b9:83:83:c1:18:e7:ec:77:8f:c2:a8:c4:e0:a6:
49:c4:1a:ae:6e:9d:14:59:43:a2:4e:4f:26:12:6c:f6:8e:82:
d6:b0:8f:76:b8:64:36:58:6d:98:9f:e2:d8:cf:8a:49:7e:70:
7f:65:fb:79:a5:4c:9b:2d:da:1b:01:84:bf:3f:84:44:f4:61:
4c:7a:a4:ae:ff:6f:55:e6:b2:17:99:8a:20:44:20:52:8f:26:
eb:8b:ef:68:3f:2a:e0:56:d9:e5:51:d6:a5:e0:e1:6d:bd:e2:
ca:af:63:b3:37:7a:fa:99:c4:5a:5e:05:10:69:84:c5:30:88:
74:7f:71:de:50:fc:9a:e9:7b:8f:f7:52:a2:b9:70:d9:92:e3:
98:b6:bc:77:52:fb:fa:99:a9:09:3a:45:75:47:de:b2:aa:85:
3a:bf:97:b8:8b:df:9a:0d:7e:a6:b1:e8:cb:21:37:6c:38:d1:
b0:dd:f5:0f:c7:5a:56:bf:6a:ab:a2:dd:79:d2:eb:c3:fb:5c:
5e:94:0c:53:fe:d6:3a:68:dd:4a:4d:0d:33:23:9c:80:ed:67:
e8:6d:1c:00:a2:5b:3e:58:ab:a6:2f:16:54:b9:74:44:ad:cb:
fd:27:b4:c4:00:dd:ae:24:fd:56:f3:5d:ce:5f:8d:8f:11:48:
03:45:e6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:31:01 2025 by rpki-client