Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
File: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft (raw, json)
Hash identifier: lPNXnhwtyVMXdTi4Rn7pqIpg+5daPwMtZtB+aFqpYFI=
Subject key identifier: 41:0E:E7:2B:FE:DC:67:14:18:DF:4E:11:7B:EE:5B:B7:F7:5D:BA:98
Authority key identifier: D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
Certificate issuer: /CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Certificate serial: 01974DB2B251FFEFB3123F055EF5A6A6A891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
Manifest number: 0EA3
Signing time: Sun 08 Jun 2025 04:00:45 +0000
Manifest this update: Sun 08 Jun 2025 04:00:45 +0000
Manifest next update: Mon 09 Jun 2025 04:00:45 +0000
Files and hashes: 1: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl (hash: 64MVGatm1VeHWstqYP+106QTDL7xFmUT/bX9SxFfqI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:b2:51:ff:ef:b3:12:3f:05:5e:f5:a6:a6:a8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Validity
Not Before: Jun 8 04:00:45 2025 GMT
Not After : Jun 9 04:00:45 2025 GMT
Subject: CN=410ee72bfedc671418df4e117bee5bb7f75dba98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:24:b6:90:64:f7:e0:45:3d:c1:89:5a:75:93:
d0:89:21:b7:c2:e2:de:3e:da:53:0a:cc:59:8a:0f:
a4:f3:35:52:01:a2:c7:cc:36:b2:97:35:e6:62:16:
81:2b:9c:c3:8a:8b:09:6a:1e:25:7e:df:32:8b:a2:
3c:43:7d:0c:6f:8e:1d:d3:4d:ab:0c:da:ba:2a:0d:
2d:6c:7c:38:49:69:00:8a:39:ea:4e:70:b4:f6:75:
e6:a7:68:1a:0d:f7:fc:ae:73:35:38:6a:a6:cc:6d:
44:1e:ef:09:ef:62:83:8b:16:3e:b2:2c:f5:fd:b6:
df:9e:ed:92:27:d6:76:76:88:97:b4:1d:2e:59:e7:
74:f5:68:40:4f:72:03:88:58:69:e0:4e:3c:68:36:
46:24:a5:92:32:a2:17:1a:d8:0f:8f:1e:d8:b7:bb:
a5:cb:79:b1:42:b3:cf:29:bd:93:69:43:59:c7:04:
a4:32:04:64:fa:6a:9f:81:85:37:94:56:01:82:90:
31:7b:67:1b:3d:32:97:55:c8:82:bb:e6:fe:af:c0:
87:e0:ab:53:b1:34:4a:8a:90:f8:fc:0d:8c:6c:ae:
b9:ba:7b:b3:bf:88:c2:19:06:f0:38:6a:22:7b:46:
35:68:89:02:ab:bc:90:18:1d:24:7b:79:bb:f2:f2:
b5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0E:E7:2B:FE:DC:67:14:18:DF:4E:11:7B:EE:5B:B7:F7:5D:BA:98
X509v3 Authority Key Identifier:
keyid:D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:77:1f:4e:9c:a6:55:c2:9d:2b:86:dd:d3:d1:b5:40:eb:48:
a4:8b:cd:45:d5:b1:5d:4c:9d:a7:0e:56:68:7e:d9:10:f8:8e:
ed:24:c3:76:8a:23:28:70:40:3b:83:ef:0d:53:6a:22:1b:fd:
0e:70:d6:3a:83:6d:13:bd:4e:62:7f:2e:ee:1a:a5:b7:54:f1:
38:75:f2:9b:68:10:7d:3f:ab:75:48:d1:68:f1:33:b2:8c:75:
3a:88:e4:48:c0:f3:e5:48:8d:d0:39:db:8e:74:cc:1d:72:11:
80:b7:30:46:58:7c:41:81:9a:79:4e:95:b9:98:a5:4e:16:f8:
7a:21:23:6d:71:cb:ff:85:b6:3c:5c:b0:75:d5:5c:56:e1:69:
8d:d9:fa:7d:97:13:5b:4c:8c:f1:29:12:75:b9:e3:47:6d:87:
79:83:d2:48:a3:86:52:8d:15:c4:f6:c7:1a:0b:5e:26:44:0e:
23:44:e4:3e:0b:8c:f4:0d:83:47:9f:7d:89:00:c0:35:9e:4b:
c0:c5:dc:70:b4:d0:ef:ed:5c:9b:30:c4:96:2e:7d:30:7c:2b:
a7:99:15:df:18:9f:36:33:c8:ad:71:a2:0a:fa:8a:81:89:80:
c4:e8:a7:03:03:c5:73:2a:c2:cf:61:6c:c8:6d:6c:2a:94:c6:
ab:d8:dd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:31:35 2025 by rpki-client