Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
File: 81bN1aSc5sQqmjX6d7lyeBloiJY.mft (raw, json)
Hash identifier: n3GRrvB0xdxezyvJGGFnr5asSwrs9fIiYLf+RE0xT0k=
Subject key identifier: 23:B8:73:85:37:E0:49:4E:E9:B7:50:74:94:13:E3:01:FE:42:F2:E5
Authority key identifier: F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
Certificate issuer: /CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Certificate serial: 01974A7A96A6EF777A9C0ABB466EED1087C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
Manifest number: 0C20
Signing time: Sat 07 Jun 2025 13:00:37 +0000
Manifest this update: Sat 07 Jun 2025 13:00:37 +0000
Manifest next update: Sun 08 Jun 2025 13:00:37 +0000
Files and hashes: 1: 81bN1aSc5sQqmjX6d7lyeBloiJY.crl (hash: tkxm9yh9QAUipC61TtDhTLSKPgYUYsadBYii713svTY=)
2: FFFquzyoI6V8zUirU5qgTnYffFE.roa (hash: UkzzNUPit9F8YYAkgHSPwBmxXN79Y3LDHaSScH7xgPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:96:a6:ef:77:7a:9c:0a:bb:46:6e:ed:10:87:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Validity
Not Before: Jun 7 13:00:37 2025 GMT
Not After : Jun 8 13:00:37 2025 GMT
Subject: CN=23b8738537e0494ee9b750749413e301fe42f2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:57:5d:85:5b:eb:cb:d4:cb:f0:33:0e:a0:11:
4e:53:0e:f8:4b:a9:cb:6a:19:3c:15:c8:99:d3:86:
1d:aa:43:46:e1:8b:3a:40:db:69:db:00:93:12:74:
6a:07:b5:73:57:e8:db:54:09:35:07:44:2e:83:93:
ea:03:49:8c:d5:3e:c6:cd:cf:8e:e2:18:7a:f2:6d:
e2:3c:0f:63:3a:f2:93:4e:34:80:a1:73:24:e3:04:
a5:1e:d9:e5:f4:df:3d:9a:d4:09:4d:27:79:6b:a5:
a6:f1:82:14:56:8c:97:9a:41:cf:55:2a:99:0c:5a:
90:e4:c2:dc:f3:c6:1e:66:76:e2:04:ad:54:57:d4:
7b:4e:2e:f0:5c:b4:94:82:8e:97:57:6d:a8:3c:ff:
b4:1a:cd:a1:8f:7e:f8:fb:f8:4d:5a:8c:88:b9:f6:
13:da:bd:eb:8d:86:3b:79:e4:0e:9b:9b:34:91:e8:
bb:0d:00:f5:b9:2e:44:bf:e2:90:de:fd:78:87:3e:
ba:4a:c0:a5:b2:4e:ed:8a:44:9d:2a:4b:e7:3f:64:
96:cb:29:65:2b:4a:08:61:6d:cf:54:3a:c8:9c:ab:
e8:b3:6b:6a:72:56:36:39:b0:4d:5a:21:e8:69:fb:
29:bf:76:3b:64:32:85:02:57:df:4c:a4:00:dc:8f:
b8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B8:73:85:37:E0:49:4E:E9:B7:50:74:94:13:E3:01:FE:42:F2:E5
X509v3 Authority Key Identifier:
keyid:F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9d:1e:61:eb:d0:12:04:93:c6:09:2b:7a:13:6d:6a:01:e2:
b4:35:8b:8a:c7:91:8b:b3:53:1b:90:d1:ed:2a:94:ff:44:3e:
eb:6c:59:91:02:d1:fe:fd:73:4c:28:51:9f:5f:ad:9b:59:75:
da:7a:a9:cc:81:cd:52:33:bc:08:24:e7:9e:23:25:09:b1:a8:
96:6d:c5:2e:74:a8:01:97:df:3f:1c:ab:8f:f6:51:a5:27:52:
1b:f2:13:00:1b:37:82:49:4a:78:58:15:90:53:ad:a6:28:f4:
dc:65:f3:f3:6d:2c:8e:05:e9:58:80:49:e4:ed:21:f3:25:df:
65:fd:d1:46:53:54:e7:62:5b:d8:c4:9b:41:6f:85:5f:ad:e7:
44:58:66:09:4d:c1:3b:9c:02:28:bf:7a:fe:83:94:d8:8c:ae:
9f:f1:f8:fa:ec:6b:02:cf:2a:bc:c2:1e:ea:40:52:6b:7a:df:
73:35:eb:8e:bd:77:c4:1f:70:9f:ae:fd:0c:d7:45:7e:09:e8:
09:21:01:f1:ca:db:5a:0b:17:f7:5d:ef:27:7a:36:eb:35:74:
70:3e:b0:d6:42:f0:52:28:b5:d0:9a:23:ab:c0:5d:d0:00:b1:
03:03:57:55:c8:f2:2c:16:c1:9d:76:4a:f7:51:e3:ba:68:b2:
87:10:7a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:20:23 2025 by rpki-client