Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
File: clLH1e2MWivCrQMGXUHD5LOsFXU.mft (raw, json)
Hash identifier: P/VGeRplLhDeMGfVzPm/nc3qOuWXDhQGfZPbtalbiyU=
Subject key identifier: C2:5C:C4:66:BE:C0:DE:E4:1F:D1:14:78:71:A2:92:06:83:1E:53:53
Authority key identifier: 72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
Certificate issuer: /CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Certificate serial: 01974F33288712A27CC31A3B4890B8BB955B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
Manifest number: 127F
Signing time: Sun 08 Jun 2025 11:00:42 +0000
Manifest this update: Sun 08 Jun 2025 11:00:42 +0000
Manifest next update: Mon 09 Jun 2025 11:00:42 +0000
Files and hashes: 1: clLH1e2MWivCrQMGXUHD5LOsFXU.crl (hash: vVA1yZ8ehATrDUhXC6YZ3RnqWBwCFZSks0SBjUmTgMs=)
2: pEayhHqE2LsS2JqNOu8wTigFXWQ.roa (hash: xO5IfYrXWQX7NXGLAWvUM5o4fMaOdr7urJcP0f6HOKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:28:87:12:a2:7c:c3:1a:3b:48:90:b8:bb:95:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Validity
Not Before: Jun 8 11:00:42 2025 GMT
Not After : Jun 9 11:00:42 2025 GMT
Subject: CN=c25cc466bec0dee41fd1147871a29206831e5353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:fb:4e:6a:b5:f8:c5:f8:3c:ea:7e:2e:55:
c6:b5:ad:d5:bf:35:a8:4d:50:31:6e:22:cf:bd:5f:
c2:84:7f:92:81:37:67:02:a4:0a:eb:cd:c0:09:b6:
27:6b:08:94:b2:af:33:58:ee:25:b8:77:7c:7b:54:
bb:dd:ae:1c:36:dd:b8:6a:c5:76:ad:16:06:93:2e:
87:4a:94:65:32:24:4e:8c:2e:40:ae:8c:f7:a1:2b:
fc:5f:92:2d:e9:ae:95:3e:11:ac:68:1f:78:f4:cd:
05:60:0f:9e:09:6b:15:43:cf:dc:3e:a7:b6:4a:9b:
09:f9:ee:b6:18:fb:1b:aa:65:c5:a3:ff:00:7e:44:
36:81:fb:27:a8:30:43:53:bc:83:49:3a:64:b5:e6:
cd:b3:90:fb:f0:97:99:a7:2a:b4:5f:ea:14:92:21:
af:13:fa:0c:4e:f7:6b:20:c0:25:ae:f4:97:43:4a:
74:7d:5a:21:49:da:61:a3:83:07:a9:4b:c6:37:29:
6e:a0:a5:42:df:7b:99:c6:2b:e7:9c:4d:4f:32:92:
ad:54:a3:06:c4:17:d7:2b:a9:cd:70:2d:a6:9c:f9:
1e:4f:4b:4b:37:6d:90:a4:4d:c4:c3:e0:0f:6a:41:
4a:b0:89:e1:71:20:18:ee:eb:39:13:61:e6:ae:ae:
9a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5C:C4:66:BE:C0:DE:E4:1F:D1:14:78:71:A2:92:06:83:1E:53:53
X509v3 Authority Key Identifier:
keyid:72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:12:30:41:8d:40:97:79:b7:44:b3:c3:1e:76:fb:28:da:e0:
f0:11:78:fd:24:11:bf:45:80:aa:cb:70:9b:4e:0e:4d:d6:9b:
20:f0:b3:8f:fa:76:31:67:02:05:ee:6f:ad:85:d8:30:97:c5:
0a:85:2a:c5:eb:56:cb:85:26:91:84:73:66:47:45:15:88:96:
28:40:11:c0:18:a2:7e:9e:38:5a:a5:e1:cf:d8:48:f3:11:69:
9c:92:4a:41:d2:32:db:9c:ec:4b:14:a2:e5:09:66:11:7a:93:
a4:cf:5a:67:4b:b2:d4:9b:ac:6f:f1:21:2b:54:d3:de:59:32:
49:e1:87:9f:4a:07:54:d5:43:64:d9:08:ee:07:85:59:81:03:
08:64:01:4c:d5:d9:02:f9:bf:fc:ae:75:e4:32:7e:14:2b:e4:
3b:52:59:d3:55:6c:9b:8a:e9:c0:da:e5:d3:8f:6e:62:5d:d7:
d9:8c:87:f7:93:0b:f6:26:9e:dd:7a:a4:db:4d:9d:1c:73:dc:
e2:3d:31:47:cb:4a:cc:6d:ff:e7:f0:08:f7:ae:e1:c0:50:5a:
04:86:19:1f:ae:2c:ee:c8:b0:28:ba:c5:e5:79:12:29:24:82:
72:ff:c1:6b:09:2c:5c:09:4c:3c:4d:fe:65:40:31:02:fa:d7:
6d:e2:e5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:46:41 2025 by rpki-client