Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
File: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft (raw, json)
Hash identifier: +WnPlBNNE2c6kGjrV/Ihz8oj1br6qlQvn+37+w5Xiug=
Subject key identifier: D3:A4:F7:F9:07:ED:33:DC:5D:62:21:73:AD:EC:C0:A8:09:FD:A3:7D
Authority key identifier: 44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
Certificate issuer: /CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Certificate serial: 01974E5798A414F7643F33C6FADD50E610F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 07:00:52 +0000
Manifest this update: Sun 08 Jun 2025 07:00:52 +0000
Manifest next update: Mon 09 Jun 2025 07:00:52 +0000
Files and hashes: 1: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl (hash: FW6qn1hx3LT/JHh2WQjoGvk+RgnxYXcy6o7PT9RSzk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:98:a4:14:f7:64:3f:33:c6:fa:dd:50:e6:10:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Validity
Not Before: Jun 8 07:00:52 2025 GMT
Not After : Jun 9 07:00:52 2025 GMT
Subject: CN=d3a4f7f907ed33dc5d622173adecc0a809fda37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:fa:3c:28:eb:5a:46:cc:f3:4d:3c:34:fa:
67:55:6a:d7:35:9b:e9:7e:36:d9:e6:5a:dc:4c:54:
7b:1f:b9:87:b8:9a:de:3f:ae:23:bf:8d:ab:50:c2:
10:87:17:d2:22:af:92:c3:59:94:50:ba:10:c3:7f:
a9:e5:9a:a6:77:1a:2d:42:4f:4f:47:e6:44:e4:74:
80:7d:b6:48:c6:ff:46:5d:20:d3:f8:15:fe:e6:9e:
95:bd:ba:b4:9a:9f:dc:0c:16:0c:4e:34:c2:b8:88:
fd:04:e5:61:86:3d:2a:77:b9:4e:88:be:3d:56:cc:
f9:6a:81:f5:a7:57:00:a7:18:37:fd:14:85:e1:b2:
12:ac:0f:93:3b:54:03:43:05:8f:81:41:a7:48:0a:
cf:97:5e:ee:e6:80:76:e1:c3:c1:3c:78:d7:15:52:
4f:75:0d:3e:96:3f:ce:df:0d:f1:b0:3b:5d:08:f8:
99:f1:31:50:75:c8:f3:86:b0:24:f9:04:1b:d2:7d:
54:4e:4f:82:c1:90:9a:f1:20:fc:dc:a9:8b:2e:4a:
ff:c5:bb:78:9b:48:1a:a1:d7:c6:5b:c8:a6:a0:76:
e2:dd:df:95:f8:9f:8d:73:9b:8d:1c:58:3e:4f:be:
20:19:e1:4d:52:58:f2:7b:8d:21:8f:b9:dd:2f:4a:
97:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A4:F7:F9:07:ED:33:DC:5D:62:21:73:AD:EC:C0:A8:09:FD:A3:7D
X509v3 Authority Key Identifier:
keyid:44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:43:00:95:3b:b6:67:e4:a5:ad:ed:69:d4:4e:93:89:e2:0f:
a2:66:46:85:bc:a7:8c:8a:b6:0a:bb:00:2a:0a:bb:f8:c4:fb:
0d:60:c8:a0:f0:10:e6:c7:6a:2f:48:30:69:e3:0c:a4:c4:1f:
77:ee:47:73:62:fd:b5:f2:ca:90:07:31:b6:94:a8:96:66:1e:
52:b4:b1:1c:52:94:66:0c:19:86:19:ee:00:f1:36:ec:d2:d3:
52:fd:89:3b:7c:a4:54:14:6c:03:80:3b:91:9e:fa:c2:5d:62:
22:ed:ee:0c:52:e4:20:08:dd:44:9f:a6:b6:d3:40:09:7e:ef:
9c:79:7d:eb:5c:d2:99:4d:70:19:9d:e5:fb:c1:a7:e3:ea:cb:
90:0a:af:28:a0:77:f4:cd:4f:f2:1e:fc:0d:b2:bd:c2:d6:9f:
5c:e6:67:83:de:1d:e3:e0:41:9e:83:0b:de:22:fb:16:bd:7e:
91:fa:ab:d5:1d:c4:22:41:7c:20:dd:fe:90:68:85:5d:5d:cc:
8d:90:6f:88:75:a7:a7:89:aa:4c:27:72:58:7e:8b:c0:4d:14:
ce:3e:f6:66:0f:e5:a3:27:ec:d7:7e:33:bf:bb:70:95:d8:a1:
19:b6:70:2c:25:af:2b:73:8f:5c:47:c4:58:7d:28:e1:74:29:
27:58:5c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:20:36 2025 by rpki-client