Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
File: s48zUI2SUxNJ3z0L6bVF_I4fXms.mft (raw, json)
Hash identifier: /WsNvWz8H4m7FTFmihpPBILnlrCnF4YV20i+t9NamzA=
Subject key identifier: D2:A2:26:64:EA:D7:E9:7F:0C:CA:5D:09:56:96:23:A7:81:37:29:6D
Authority key identifier: B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B
Certificate issuer: /CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
Certificate serial: 01974742B73911E7C795FB1E2DC9813BF3F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
Manifest number: 09C8
Signing time: Fri 06 Jun 2025 22:00:44 +0000
Manifest this update: Fri 06 Jun 2025 22:00:44 +0000
Manifest next update: Sat 07 Jun 2025 22:00:44 +0000
Files and hashes: 1: s48zUI2SUxNJ3z0L6bVF_I4fXms.crl (hash: 5WP2e8TRg9W3hZMBLUFwOfB35ttdnh5heG/odRt+MVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:b7:39:11:e7:c7:95:fb:1e:2d:c9:81:3b:f3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
Validity
Not Before: Jun 6 22:00:44 2025 GMT
Not After : Jun 7 22:00:44 2025 GMT
Subject: CN=d2a22664ead7e97f0cca5d09569623a78137296d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:9a:43:f5:9d:bd:d5:36:4f:d1:ef:b5:bb:
8c:9e:de:03:38:1a:e4:59:89:46:96:ea:13:ae:11:
55:5e:9f:24:89:5a:ab:75:2a:71:d0:f9:20:29:d4:
55:ee:14:39:69:4a:ef:2d:74:81:e2:27:a9:1b:d2:
f7:51:d2:d0:b1:28:4d:ef:f9:af:61:fe:60:67:99:
8b:f3:b0:78:54:9c:cd:a4:a5:2f:05:06:ef:e0:c8:
df:43:f4:db:96:8f:0d:90:ca:a1:8f:e7:82:6b:15:
76:d9:13:4c:9c:49:a5:8a:0d:d1:6d:f4:aa:20:b6:
88:e2:e0:19:09:a9:be:37:0f:39:fc:38:c0:1e:50:
2e:eb:d5:c3:bf:79:94:b2:7f:47:2b:21:1c:b5:e9:
8c:90:c8:2d:b6:27:0d:30:ee:0e:61:f6:3b:08:0d:
4e:18:9d:3f:d4:f7:63:b6:32:38:c9:2b:90:7f:9c:
2b:46:03:98:df:8d:32:a5:7e:bb:64:f2:70:aa:a4:
d4:aa:53:a9:55:eb:37:db:72:1b:71:ed:0b:55:4d:
8b:cb:1d:08:17:5f:c1:1c:9f:f0:a8:f5:88:6e:31:
bd:cf:f3:bf:64:da:92:82:1c:f0:4b:cc:e9:99:bd:
be:d2:e2:13:25:cb:b8:89:ad:96:d6:f7:3a:d1:5b:
e8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A2:26:64:EA:D7:E9:7F:0C:CA:5D:09:56:96:23:A7:81:37:29:6D
X509v3 Authority Key Identifier:
keyid:B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:34:df:e0:e2:ee:05:68:d2:7f:7c:3f:cb:b5:56:6f:f8:11:
19:94:cb:f2:d0:fc:08:58:a4:9a:0e:64:86:28:ce:03:2e:97:
bd:1b:6c:3b:45:21:f5:39:e0:df:05:59:00:b1:13:e0:95:c0:
f4:22:30:3b:f8:74:06:34:c3:75:bd:24:3f:48:86:91:5e:b5:
89:74:7b:a7:1c:cd:53:54:0b:22:41:12:32:52:3d:97:28:6e:
46:89:ad:77:b5:58:92:c1:f1:66:6d:02:20:c6:1c:7e:62:72:
69:c0:a5:12:ea:d6:f3:95:5e:84:b5:0c:3a:0e:c8:49:d1:85:
dd:78:af:f5:09:fd:59:a0:0b:f5:fb:db:6f:08:56:bc:1c:84:
28:96:89:e1:a6:36:b5:dd:7b:36:e5:d6:f1:79:15:9f:e8:98:
05:5e:bf:f3:40:d9:15:5c:a5:93:e9:45:26:05:3d:04:6d:12:
f7:18:63:a6:27:df:97:02:6f:19:65:87:f1:2e:48:fe:e6:73:
ce:50:9b:96:86:f1:88:55:e2:ea:a1:e9:11:f3:0d:2a:6d:04:
47:9f:6f:fa:48:27:7d:9b:91:de:fe:3e:cb:a6:4a:61:a5:47:
97:44:75:af:43:5a:0d:47:36:73:fd:b4:6e:25:d6:f5:02:b4:
46:a6:a7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:19 2025 by rpki-client