Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
File: eSttblvaBSZfwM6XGaYzvgSm6Xk.mft (raw, json)
Hash identifier: I1FZbkWn+O0CCJxWhDvnlMzStbH3+2V6JzZ7M9ctXe0=
Subject key identifier: CE:C6:3C:1A:65:B2:21:6E:9B:B7:CE:0F:0C:89:22:9D:7E:FB:66:81
Authority key identifier: 79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
Certificate issuer: /CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Certificate serial: 01974A7B7DE21DF56953ABD8FB105B9F4E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 13:01:36 +0000
Manifest this update: Sat 07 Jun 2025 13:01:36 +0000
Manifest next update: Sun 08 Jun 2025 13:01:36 +0000
Files and hashes: 1: eSttblvaBSZfwM6XGaYzvgSm6Xk.crl (hash: kKVFJPvVDyacfQYK3qCqR/bZVnEbwM6da+C6LJAYJD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:7d:e2:1d:f5:69:53:ab:d8:fb:10:5b:9f:4e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Validity
Not Before: Jun 7 13:01:36 2025 GMT
Not After : Jun 8 13:01:36 2025 GMT
Subject: CN=cec63c1a65b2216e9bb7ce0f0c89229d7efb6681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:8b:44:ac:f4:ea:99:1a:5a:5a:c5:87:a2:
a2:14:95:79:73:fd:9c:04:1e:55:f9:64:e0:2c:f2:
66:2a:d5:5d:14:fe:14:61:bf:90:fc:3d:7d:e8:cb:
54:cc:e5:fa:79:5b:0f:df:03:2a:f0:b0:59:5b:d4:
a0:d3:04:dd:fb:78:fd:55:d3:24:3a:d4:2a:06:ba:
ac:e0:8d:e4:cc:c8:7f:0e:7f:df:b9:c8:b8:e8:cd:
64:06:39:9b:60:61:2c:1a:d7:2a:f9:07:38:31:52:
a3:74:e8:1f:09:c1:ea:c7:4c:a0:14:59:f1:a1:50:
e0:4f:6d:46:a7:99:38:b7:66:e6:be:2c:cb:12:d5:
57:6e:86:d5:8d:51:11:5e:07:be:06:7f:41:ad:0e:
02:8e:e6:6e:dd:08:8d:71:ec:4c:64:b0:95:e7:00:
fa:72:53:c7:a4:9f:2e:f8:10:21:1b:e5:3e:f7:09:
5c:3c:e7:db:c1:51:fc:57:9a:0a:f6:6d:fc:e6:3e:
e1:b7:24:b1:4a:29:8c:78:64:41:a8:ff:d8:17:be:
98:e9:60:64:00:b3:15:f2:27:a9:64:09:b4:e7:2d:
c6:ae:dc:30:29:70:6b:7b:84:c3:50:3e:e7:a3:70:
1f:bd:2c:96:e6:dc:70:44:53:99:67:3f:6c:38:1a:
45:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C6:3C:1A:65:B2:21:6E:9B:B7:CE:0F:0C:89:22:9D:7E:FB:66:81
X509v3 Authority Key Identifier:
keyid:79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:a5:8d:c0:6f:2b:59:e3:02:3d:3f:5b:ad:a6:cb:c3:a0:a5:
eb:c1:a2:34:a1:7e:fc:9f:5a:0c:af:c5:d1:00:13:4f:24:ea:
4a:3c:50:e8:fb:46:93:4d:cb:1d:9d:77:94:2b:fc:c0:ac:7a:
0e:48:83:e8:1b:82:d2:7c:45:d9:e1:37:8c:07:92:a9:e2:2c:
05:ed:ca:fa:a3:6a:2b:bd:27:3b:d7:e6:38:1c:d3:01:ba:c6:
a8:76:2b:87:1c:49:e0:f0:79:58:76:9e:cc:44:b2:ef:bc:32:
a7:dc:02:ff:c5:09:e5:5f:08:48:c1:fa:57:46:61:b5:2b:e3:
a7:e5:f8:1d:2e:10:96:f9:43:f6:1c:6b:3b:9f:4b:32:37:28:
c8:7f:01:28:64:04:5e:c4:83:95:00:2d:78:4a:dc:71:ce:fa:
4d:b1:a4:b1:f4:6c:e0:d2:c6:5e:a6:be:78:b5:8f:16:be:08:
66:09:3b:47:95:e0:d3:7a:52:65:62:2f:f2:9a:b7:4b:13:8a:
c8:67:39:cd:4b:fc:7c:38:0d:0d:30:e3:ef:e3:be:3a:44:36:
6b:33:c8:e1:79:fd:71:a9:e1:79:60:fe:d1:8f:25:2f:81:7f:
3d:d4:8a:66:97:14:b4:d5:66:c6:93:33:f3:55:d5:28:2d:c4:
cc:49:1b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:01:55 2025 by rpki-client