Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.mft
File: U1zc9HjqgOsXXEwwd-efy3DF0jA.mft (raw, json)
Hash identifier: qPpJF6xer2CCfM4NOdJwwx/8gjFkDrFx6yXbFDFOlAU=
Subject key identifier: 69:05:EC:27:44:40:6F:93:6E:29:4B:EA:DE:C0:CD:11:E5:E4:9D:81
Authority key identifier: 53:5C:DC:F4:78:EA:80:EB:17:5C:4C:30:77:E7:9F:CB:70:C5:D2:30
Certificate issuer: /CN=535cdcf478ea80eb175c4c3077e79fcb70c5d230
Certificate serial: 0197523422F8A6777B9E7E6A11D743CE2C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1zc9HjqgOsXXEwwd-efy3DF0jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.mft
Manifest number: 09D8
Signing time: Mon 09 Jun 2025 01:00:37 +0000
Manifest this update: Mon 09 Jun 2025 01:00:37 +0000
Manifest next update: Tue 10 Jun 2025 01:00:37 +0000
Files and hashes: 1: U1zc9HjqgOsXXEwwd-efy3DF0jA.crl (hash: HAlQxp8TA54Iwb0jVzg5YRyaAZr4Ia+PWpZYIPHormo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1zc9HjqgOsXXEwwd-efy3DF0jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:22:f8:a6:77:7b:9e:7e:6a:11:d7:43:ce:2c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535cdcf478ea80eb175c4c3077e79fcb70c5d230
Validity
Not Before: Jun 9 01:00:37 2025 GMT
Not After : Jun 10 01:00:37 2025 GMT
Subject: CN=6905ec2744406f936e294beadec0cd11e5e49d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:81:76:31:28:66:6b:d8:2c:a2:5d:3f:3c:
fb:38:0c:64:d1:f2:56:90:3a:94:c4:ff:68:95:1e:
21:73:67:cd:24:59:c2:e2:1e:ef:0a:23:17:01:36:
ab:29:51:a8:b2:a2:bb:2d:01:f1:f2:21:5c:29:d2:
ba:7b:5c:e7:94:af:53:e4:c6:42:e4:7e:19:00:08:
6d:ae:37:df:a6:a4:d5:17:7e:a8:f8:b3:88:ab:19:
df:2e:91:04:51:db:cb:4b:3d:38:21:f9:1c:a3:58:
bd:dd:7e:82:3b:5c:26:cd:8c:00:96:c5:66:a0:05:
c8:9d:0a:ce:48:eb:a6:98:8c:7f:53:08:36:d6:7f:
9b:7e:b4:d7:f6:12:90:a4:59:e0:1d:63:42:35:5e:
2a:ca:2d:be:f3:5f:a9:0e:0d:d1:0f:b6:95:5c:32:
44:7d:af:34:63:e9:61:7d:b8:34:2a:70:f6:d7:22:
0d:44:07:c8:5b:38:ad:e6:3c:3b:ec:0f:c6:3b:1f:
b8:1d:dc:0e:2e:67:4d:99:e4:99:cb:25:fc:9b:17:
6b:f0:e6:bc:9c:e6:ae:e8:2f:5d:18:59:df:2a:28:
3d:42:60:ae:ba:99:64:c3:02:df:d0:a4:18:a8:06:
c5:f3:39:16:6b:b4:c8:15:9d:7e:85:b6:1a:7f:48:
3e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:05:EC:27:44:40:6F:93:6E:29:4B:EA:DE:C0:CD:11:E5:E4:9D:81
X509v3 Authority Key Identifier:
keyid:53:5C:DC:F4:78:EA:80:EB:17:5C:4C:30:77:E7:9F:CB:70:C5:D2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1zc9HjqgOsXXEwwd-efy3DF0jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8b:a1:af:2f:35:07:f0:8c:d9:82:a0:25:7b:d7:ee:12:41:
45:91:79:d9:e2:13:ae:c7:0e:42:ad:59:ad:e0:7a:c8:8d:e7:
17:7f:c7:2b:94:dd:6a:85:55:ab:10:cb:cd:b9:47:8c:28:6f:
e1:0e:2c:98:a3:9b:f0:fd:ef:03:34:c7:fd:64:df:46:84:cd:
23:77:c7:9f:a2:6d:75:a1:48:10:0b:5a:b4:bb:41:a4:21:24:
3f:a6:a7:51:0a:ac:7b:2b:6d:dd:bf:9f:2b:f5:ec:82:41:e0:
9e:15:48:6e:4b:be:b6:9e:8d:14:14:03:b9:7e:0a:d8:c5:b2:
b1:b2:6e:fa:65:c7:a2:d1:f2:fe:4d:a5:c0:78:84:6b:40:fb:
49:cd:85:94:01:5c:a1:40:8c:1c:3a:0e:87:e3:0f:43:22:6a:
3b:a7:fa:bf:09:de:9e:62:99:da:40:c9:60:7a:c8:51:d5:55:
df:04:21:4e:25:41:ed:52:c7:16:58:07:dc:27:2e:01:d9:3a:
bf:6e:58:2a:d5:75:7f:94:e3:6b:51:8c:26:71:62:44:75:16:
8d:d7:68:fa:67:ad:fc:8b:5c:1e:54:ad:81:2e:65:01:61:3d:
74:d7:4c:c4:49:3f:36:99:4f:4c:b8:d5:1a:86:dd:2d:7c:04:
fa:d4:5f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:01:53 2025 by rpki-client