Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
File: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft (raw, json)
Hash identifier: tTdcZpjcavjPXtTmdhqbGP0I3oqId+xz5/D/oDKJ558=
Subject key identifier: B6:52:BA:85:1B:13:F8:55:75:4B:19:4F:DC:E1:C4:6A:6A:0D:EB:DD
Authority key identifier: D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17
Certificate issuer: /CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
Certificate serial: 019754227E3C847769C3F09C5C544002C368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
Manifest number: 0A66
Signing time: Mon 09 Jun 2025 10:00:36 +0000
Manifest this update: Mon 09 Jun 2025 10:00:36 +0000
Manifest next update: Tue 10 Jun 2025 10:00:36 +0000
Files and hashes: 1: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl (hash: bG1Vlk/EVZBt0qAvjU98OemaqkuKpu7XbeX9EC9550I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:7e:3c:84:77:69:c3:f0:9c:5c:54:40:02:c3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
Validity
Not Before: Jun 9 10:00:36 2025 GMT
Not After : Jun 10 10:00:36 2025 GMT
Subject: CN=b652ba851b13f855754b194fdce1c46a6a0debdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:f4:e1:ae:b6:a7:b0:f7:74:9f:25:c9:4f:
89:1e:ef:e1:9a:fe:3a:88:4f:e3:49:15:43:8f:2a:
cf:4a:10:a1:1c:b9:57:c2:8b:72:f9:ea:3c:3e:06:
70:87:d4:ac:b3:c9:df:8c:d1:06:47:d9:87:5b:7e:
67:46:a3:67:80:d0:03:c1:74:cd:bc:6c:36:48:a9:
78:a9:aa:3e:85:bd:58:bb:80:78:5b:46:f9:63:8a:
3a:f3:6b:06:19:a6:90:43:5b:fa:01:ca:e3:32:a5:
6e:bb:e6:bd:3c:f2:95:92:e0:7c:9e:a6:6c:2d:4a:
e5:a8:92:12:02:d5:ba:35:b9:36:4f:24:c2:6e:ec:
4b:b0:cb:a1:36:9a:02:e2:b0:23:c4:82:07:e3:58:
8c:0b:a0:fb:70:aa:9b:e0:5c:dc:bd:40:8e:1d:d8:
7c:f0:99:6c:db:71:7a:44:d2:d1:03:5f:07:83:01:
9b:43:9a:96:7c:2e:d3:22:aa:de:8c:c0:98:2f:0b:
a7:69:78:10:6f:98:d3:75:8a:67:bd:cd:c3:5d:89:
64:de:8c:30:b4:c1:6d:30:ea:63:85:b4:4e:cf:7b:
67:e9:59:9a:ad:3e:7c:95:28:fd:e9:54:83:f6:5b:
94:ef:e1:9f:f4:25:0b:83:b8:af:d2:e9:ee:e9:82:
1e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:52:BA:85:1B:13:F8:55:75:4B:19:4F:DC:E1:C4:6A:6A:0D:EB:DD
X509v3 Authority Key Identifier:
keyid:D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:02:ef:5f:86:b8:07:88:09:1e:6b:3c:88:12:21:2b:e7:12:
99:7b:b8:9f:f5:b1:c0:ce:75:a2:20:68:d9:1c:ae:75:d0:f1:
98:05:9f:59:d0:f7:aa:9a:60:9b:7c:f1:0a:21:27:07:e3:fd:
f4:23:d2:d1:27:6f:39:cd:58:ed:ce:d0:3e:60:1d:b6:2f:94:
1f:33:fa:56:24:1c:1d:6c:72:37:0d:3e:87:6b:d4:b1:75:1e:
9b:c1:c1:7e:ec:dd:fc:7f:29:0c:a6:86:81:5b:41:67:f0:08:
b2:1e:cf:66:74:d4:41:14:cc:10:91:3d:b0:d9:79:07:d4:b6:
63:5b:b9:1f:7b:c3:4c:53:98:54:f3:b8:1c:55:ac:23:e4:e2:
4d:4c:91:b0:be:bf:41:07:d5:22:7c:68:39:14:ba:73:4b:1e:
91:69:8d:74:6e:79:f4:47:53:a2:1e:f8:00:3a:83:52:1d:b2:
bc:c0:c7:b1:d1:0c:f9:70:9a:6b:0e:ac:10:d9:65:4f:e3:ea:
28:97:65:fb:fd:de:85:6e:fc:ae:01:4e:b8:fa:41:14:ae:8e:
46:ae:b8:ac:59:e6:15:5a:f1:ec:63:9c:c0:fe:c9:ca:a8:0b:
d5:cb:e3:55:39:5a:6a:db:e7:52:62:22:c4:dc:45:f0:e0:4c:
c7:3b:68:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:28:06 2025 by rpki-client