Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
File: 15WKlFA6cEIXSd7wXv5joxfRisI.mft (raw, json)
Hash identifier: eF3ti6ex68SsZ+isBfOJaGHKUNvIrMUCJMnH1m5955g=
Subject key identifier: 7B:FE:39:9D:05:F5:B2:C2:40:A7:ED:B1:6F:74:78:DD:F1:60:5B:D5
Authority key identifier: D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
Certificate issuer: /CN=d7958a94503a70421749def05efe63a317d18ac2
Certificate serial: 019749682BD56A417960FBC7F16CE0ECCA3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
Manifest number: 068B
Signing time: Sat 07 Jun 2025 08:00:53 +0000
Manifest this update: Sat 07 Jun 2025 08:00:53 +0000
Manifest next update: Sun 08 Jun 2025 08:00:53 +0000
Files and hashes: 1: 15WKlFA6cEIXSd7wXv5joxfRisI.crl (hash: CzZLRLqK0m5vusczbO4e2ievpnI4eDL+jehPg66Xfsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:2b:d5:6a:41:79:60:fb:c7:f1:6c:e0:ec:ca:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7958a94503a70421749def05efe63a317d18ac2
Validity
Not Before: Jun 7 08:00:53 2025 GMT
Not After : Jun 8 08:00:53 2025 GMT
Subject: CN=7bfe399d05f5b2c240a7edb16f7478ddf1605bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7e:4d:e5:fa:85:20:f2:0b:71:0d:1b:d7:2c:
fc:b5:e0:da:08:8e:d4:03:18:05:00:15:bc:9e:06:
a4:f7:01:28:90:1f:5d:77:81:a9:de:f4:b7:0e:60:
81:8a:28:a7:8d:b4:33:79:d7:27:16:56:4c:f1:3e:
8c:8b:28:df:77:f3:4c:66:b9:00:f9:dd:e2:6e:1e:
6b:0d:c6:66:b7:e5:25:3a:66:47:0c:80:22:71:5b:
38:21:e8:c1:2c:c9:ec:d1:03:ec:63:c2:f3:76:7d:
ba:c1:57:2b:5b:47:12:96:30:22:6d:0d:a1:42:fc:
23:c5:14:ed:c7:cb:4f:4a:ad:98:26:7d:d8:c6:1c:
81:7b:07:3e:bb:c8:04:bc:ae:37:5f:39:70:3d:cc:
93:b0:89:e6:79:f6:59:e4:f3:76:da:b4:fc:eb:e2:
3f:d7:7e:80:0a:ed:aa:0f:56:ed:c4:12:31:3e:6d:
bb:8c:f2:e4:fc:cd:b2:b0:a8:c0:d7:e6:b3:03:48:
00:a0:2b:35:6a:ed:74:cb:27:09:68:d6:35:03:8b:
7f:eb:59:ed:bf:5f:c8:97:a8:51:40:6d:30:57:90:
36:56:06:31:69:09:67:56:3f:be:90:d8:a2:0c:3d:
05:10:93:a3:6d:17:44:b9:8b:b6:2e:2d:9c:6c:4b:
d4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FE:39:9D:05:F5:B2:C2:40:A7:ED:B1:6F:74:78:DD:F1:60:5B:D5
X509v3 Authority Key Identifier:
keyid:D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:9a:77:d3:7b:93:71:19:68:5b:42:e8:bb:79:da:85:7e:7e:
a2:a5:08:30:85:e1:5d:f5:2c:35:3a:d0:96:fb:68:59:91:f4:
96:c1:ac:7e:d9:07:db:ea:c8:05:46:8d:c8:02:c4:f6:51:09:
77:a0:44:a7:8d:19:33:b4:e3:62:82:83:3e:73:92:0a:7f:34:
3a:02:d1:49:11:49:d0:40:ec:9f:a3:9e:59:36:7a:c2:03:70:
96:ef:13:49:3f:d2:46:f9:a6:e7:3b:d2:fb:0c:19:40:cb:93:
fa:9d:e8:a1:58:f6:fd:c0:e3:d0:08:c3:03:67:bd:7c:4d:9e:
3c:cd:fb:f8:9e:49:c8:e6:52:5e:60:2e:9c:28:97:66:76:3d:
24:1a:f5:a5:19:08:c1:fc:30:99:0a:c4:8f:e5:f1:32:e9:af:
f3:3b:6a:ed:48:f8:e5:cc:20:7b:87:e3:3b:a4:06:02:64:87:
00:62:dd:99:3b:83:fd:cc:f5:ad:37:aa:96:bc:4b:4a:46:ff:
d5:f2:49:f0:2d:c9:4c:75:c9:f8:dd:72:33:2c:48:e0:4d:59:
ce:e4:e1:88:42:a9:7d:de:12:9f:24:ea:da:46:c4:2f:ff:d4:
fc:40:b5:8a:3f:8c:61:fe:89:4c:5b:a9:33:17:86:35:1e:39:
3c:b7:a1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:30 2025 by rpki-client