Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
File: tRu6i9P6566CScnEYWi6kAI9sZQ.mft (raw, json)
Hash identifier: Fug0XeytGCgzm6UZ0/+sC41wiXLt8w0R1rTZ5nVaAr8=
Subject key identifier: 68:17:78:8B:41:1E:F6:9E:0A:65:70:35:20:23:0D:86:91:AB:49:F9
Authority key identifier: B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
Certificate issuer: /CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Certificate serial: 019752A1E68CEBB671EFB18E772A9101F0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
Manifest number: 157C
Signing time: Mon 09 Jun 2025 03:00:31 +0000
Manifest this update: Mon 09 Jun 2025 03:00:31 +0000
Manifest next update: Tue 10 Jun 2025 03:00:31 +0000
Files and hashes: 1: tRu6i9P6566CScnEYWi6kAI9sZQ.crl (hash: i3fElPEn39rGMzuS0hVTHMGhuwTnrFCPMmlI2JTCF+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a1:e6:8c:eb:b6:71:ef:b1:8e:77:2a:91:01:f0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Validity
Not Before: Jun 9 03:00:31 2025 GMT
Not After : Jun 10 03:00:31 2025 GMT
Subject: CN=6817788b411ef69e0a65703520230d8691ab49f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:67:17:b8:50:6b:1a:fd:8c:ce:bf:54:3c:
59:04:6f:9a:63:57:26:0a:c1:fa:82:4e:8d:94:fd:
34:ee:1f:54:9b:cc:e5:d4:02:d1:02:e6:ca:0b:b1:
76:4c:c3:62:7f:41:e3:1f:5e:0d:7c:ef:52:e6:cd:
09:9b:d6:a6:98:19:c9:f2:17:5b:3a:b3:cf:81:35:
f4:fc:26:9a:6d:1e:5c:b3:9e:24:8b:c4:95:bf:b8:
7c:4e:9c:41:bb:7b:e7:a7:f8:ea:58:1b:da:fd:54:
a7:7e:13:00:e7:dd:6c:f6:28:32:83:48:c4:e4:93:
68:bb:1b:2b:f4:61:7d:b2:6b:9e:b2:75:2a:ff:e5:
ef:ee:8c:e9:ec:c3:90:cb:e5:3b:2a:96:af:e3:da:
03:2f:ae:0a:ef:f3:1e:99:be:e1:c3:c6:0e:72:b2:
bd:6a:a5:6b:0d:b2:7e:8d:b2:19:4a:9f:6b:6e:dd:
ce:29:2f:75:fb:15:d7:1e:a6:65:9b:6e:e0:3e:09:
f2:61:59:be:2a:88:bc:22:5d:65:34:ce:40:65:e9:
9e:c3:14:0c:a4:bd:24:1c:7f:c3:42:25:f4:de:72:
a3:13:1c:1a:8f:49:01:f1:dc:55:c7:21:13:6d:3d:
a0:73:08:ae:39:45:6e:28:46:87:7b:34:6e:85:a9:
e2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:17:78:8B:41:1E:F6:9E:0A:65:70:35:20:23:0D:86:91:AB:49:F9
X509v3 Authority Key Identifier:
keyid:B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:47:23:55:f3:8e:00:f3:2b:e9:f9:bf:71:61:08:18:97:8d:
47:a5:92:26:9b:e7:8a:67:44:0d:b9:04:76:07:1b:d0:3a:64:
21:6f:e4:0f:08:9a:d5:8c:77:30:86:48:71:ba:6b:2e:fa:07:
1e:92:35:f8:2e:c9:27:95:16:42:a3:08:da:71:16:c2:37:ee:
3e:b3:64:4e:65:bb:91:f5:d5:d6:4a:28:21:c4:4e:63:32:77:
be:7d:4d:3c:29:17:2d:fb:cb:8f:65:ac:45:58:c4:fa:98:43:
fb:d7:3a:57:c9:0d:b9:d8:84:c1:50:7c:fd:f7:ed:f7:48:7e:
76:66:23:ce:49:d5:20:ff:ff:0e:b6:c4:21:0c:d9:76:b8:bd:
07:f5:ef:13:58:06:d5:80:f5:6b:3e:55:eb:6b:14:53:88:8c:
9c:00:30:d1:85:a8:58:0a:9c:8f:74:ac:1d:87:e0:2b:75:53:
d0:1e:8a:be:60:f6:fe:e2:11:8b:e4:1a:61:6b:f1:d2:48:80:
f8:15:ae:48:ea:d3:d6:bb:d7:1b:e6:b7:db:63:99:44:fb:60:
31:60:4d:0b:cb:70:27:70:54:e7:1d:e7:4c:de:cf:82:ec:d0:
9e:f4:24:76:ea:d2:54:25:d5:74:db:15:74:4a:b8:47:fa:e8:
67:3d:c4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:42:30 2025 by rpki-client