Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
File: cdV4WLGdypZzvB9nIZ71Ab873Oo.mft (raw, json)
Hash identifier: fVdD1owJ/I5HpbT+7VZXnc1H5Gswvu2FqPKpaZR/Ppo=
Subject key identifier: AA:F1:CD:73:BF:93:B1:48:72:58:F1:6E:45:93:35:4F:19:03:4F:FC
Authority key identifier: 71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
Certificate issuer: /CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Certificate serial: 01974C691B0D9381F00F8F2ED1E114051EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
Manifest number: 045C
Signing time: Sat 07 Jun 2025 22:00:45 +0000
Manifest this update: Sat 07 Jun 2025 22:00:45 +0000
Manifest next update: Sun 08 Jun 2025 22:00:45 +0000
Files and hashes: 1: cdV4WLGdypZzvB9nIZ71Ab873Oo.crl (hash: RxPsRka4e0C/hjhtfWNU3DgxynTKElICxvmaGI17Ers=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:1b:0d:93:81:f0:0f:8f:2e:d1:e1:14:05:1e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Validity
Not Before: Jun 7 22:00:45 2025 GMT
Not After : Jun 8 22:00:45 2025 GMT
Subject: CN=aaf1cd73bf93b1487258f16e4593354f19034ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:c1:2a:50:cc:c3:18:b7:14:1c:2e:12:60:
05:f0:0a:58:78:dc:5d:c6:59:67:10:10:2c:6f:6b:
71:42:a0:d0:8c:39:c3:83:43:e9:f0:30:51:65:f0:
df:b0:ed:08:16:5a:85:2a:ea:01:56:a2:da:92:47:
c2:1b:76:a7:71:89:c3:e8:ed:38:4e:65:e4:56:0a:
e0:5f:c5:fd:60:ef:1b:68:34:d9:7d:b5:90:ca:b5:
76:54:d3:fe:25:3f:c9:41:19:1c:34:46:3e:98:96:
7f:0d:d2:db:6b:32:ca:f9:64:52:09:e3:ed:fc:da:
48:77:53:c9:78:d4:23:69:11:18:1b:14:07:e7:a3:
b8:ad:7e:f2:1d:5e:d4:98:5f:59:64:92:8b:3e:1f:
a7:8c:37:7d:b2:45:77:6b:3d:cf:ad:52:73:12:27:
4a:aa:dd:2f:1f:15:57:c4:48:dc:0c:ef:3d:5b:b7:
ee:05:8a:aa:51:86:32:22:a1:e1:04:02:96:a6:7d:
3f:be:99:3b:58:c1:3f:c8:1c:40:2a:77:bc:ce:d0:
f8:2e:f7:e0:5e:5c:8f:ac:81:61:6d:09:5c:f4:a4:
38:65:c7:8b:65:7b:25:14:6b:05:07:f3:16:da:60:
58:cf:9a:0b:85:52:a3:d9:2f:6b:fd:18:27:d0:ef:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F1:CD:73:BF:93:B1:48:72:58:F1:6E:45:93:35:4F:19:03:4F:FC
X509v3 Authority Key Identifier:
keyid:71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1f:8f:38:15:1a:b8:03:75:c6:78:e9:72:46:99:fa:f9:16:
b5:9e:eb:6a:5d:77:aa:70:a9:53:17:ff:94:fa:b0:e5:ee:07:
7f:d8:72:0f:24:32:c4:f7:77:57:df:d0:14:4b:1c:d9:3c:39:
18:b1:4b:90:4c:35:f4:93:0d:22:29:42:56:7d:82:b7:70:4c:
7e:00:56:5d:2a:18:ec:81:a5:ca:76:0d:18:06:df:6b:8b:0e:
f9:73:cf:1c:8c:41:e4:33:27:46:22:57:52:9f:13:4f:1b:aa:
c8:d3:ab:b4:03:f6:d0:bf:99:8b:c2:7c:c7:75:5d:d4:41:4d:
7b:91:43:8f:60:43:01:ad:0c:ef:dc:a7:ef:d8:5f:54:00:0f:
d3:bc:19:37:44:f2:38:59:01:f5:09:fb:ae:94:21:58:39:6a:
75:d5:cc:90:38:70:d7:1c:0a:77:83:ba:6f:6b:16:b1:4d:e1:
b6:aa:71:a9:2b:32:03:d3:24:f0:23:0d:15:6f:43:9d:51:da:
56:89:fa:23:39:a1:ee:a3:bc:28:ef:e0:31:f5:21:7c:af:ce:
ea:ba:30:c5:92:d6:fb:25:1b:97:47:be:bc:83:0d:7d:f0:e7:
48:fa:1a:9f:1a:63:cc:40:83:b8:de:36:e0:72:49:c8:ae:59:
7e:08:95:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:40:41 2025 by rpki-client