Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
File: d_bMQsdY59p8S_q8ISEtHSghYDE.mft (raw, json)
Hash identifier: aOQYSwDTqlFeef/IH6DADD5chdyPMK+nKyaGhnSp4eg=
Subject key identifier: FA:E8:7B:71:91:7A:16:69:B3:B1:49:8D:CF:C8:F2:CB:B0:DE:55:8B
Authority key identifier: 77:F6:CC:42:C7:58:E7:DA:7C:4B:FA:BC:21:21:2D:1D:28:21:60:31
Certificate issuer: /CN=77f6cc42c758e7da7c4bfabc21212d1d28216031
Certificate serial: 019750B430B47372E63DE55F57F699865E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_bMQsdY59p8S_q8ISEtHSghYDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
Manifest number: 0549
Signing time: Sun 08 Jun 2025 18:01:15 +0000
Manifest this update: Sun 08 Jun 2025 18:01:15 +0000
Manifest next update: Mon 09 Jun 2025 18:01:15 +0000
Files and hashes: 1: d_bMQsdY59p8S_q8ISEtHSghYDE.crl (hash: /ugowyN4Gy4dMHR8zS/D4Z6u6NJRveKLi++pF4Z7YQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_bMQsdY59p8S_q8ISEtHSghYDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b4:30:b4:73:72:e6:3d:e5:5f:57:f6:99:86:5e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f6cc42c758e7da7c4bfabc21212d1d28216031
Validity
Not Before: Jun 8 18:01:15 2025 GMT
Not After : Jun 9 18:01:15 2025 GMT
Subject: CN=fae87b71917a1669b3b1498dcfc8f2cbb0de558b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:c4:87:63:bc:99:df:7b:02:0f:cf:a9:bb:
aa:6c:a5:83:dd:87:12:c1:12:b4:42:f5:1a:90:0b:
04:11:91:ce:7e:d1:13:67:88:fd:63:f9:21:47:ed:
b8:6c:3d:dd:b5:92:c1:b2:93:99:82:87:ac:10:ee:
56:d5:86:3a:f5:cd:bd:ce:02:85:63:8f:f9:33:ff:
08:fb:51:62:83:9e:ba:29:d3:65:3e:8e:52:fc:77:
70:d5:54:2f:a1:9a:da:25:b7:7c:43:5e:7b:d8:a2:
3f:d4:28:e4:9a:2d:2c:03:fb:2e:58:65:e1:e1:97:
3a:a3:de:98:84:2d:7e:4c:6e:c0:79:4d:a9:26:0b:
26:dd:8c:8f:d6:6d:a1:bf:d8:6e:1e:45:6c:f3:e4:
52:00:66:67:04:0a:4d:51:8d:dd:58:00:4a:9d:ed:
89:25:b3:87:06:c3:63:af:16:c6:93:45:bf:56:a3:
85:8f:f4:7e:11:bf:32:75:a3:3b:3d:06:c5:20:e8:
c8:db:94:24:14:b4:f3:c3:0a:db:94:5d:9d:09:d6:
d3:7c:ee:8a:4a:24:55:5d:ae:eb:fe:3b:c7:e3:62:
13:6f:68:f8:ea:4d:43:f8:88:79:18:48:1a:66:d1:
0c:dd:ef:81:5d:4d:ec:14:fb:18:00:7f:9e:da:11:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E8:7B:71:91:7A:16:69:B3:B1:49:8D:CF:C8:F2:CB:B0:DE:55:8B
X509v3 Authority Key Identifier:
keyid:77:F6:CC:42:C7:58:E7:DA:7C:4B:FA:BC:21:21:2D:1D:28:21:60:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_bMQsdY59p8S_q8ISEtHSghYDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:69:0b:c5:75:e7:a2:51:43:c8:6e:22:7d:cd:83:60:5b:40:
f2:ed:72:e8:64:91:e1:50:89:95:07:9d:c5:a8:f4:8c:48:79:
08:99:3e:bc:1a:b8:07:60:ac:cd:d2:2b:bd:af:13:21:11:82:
9f:b4:ac:f6:1d:ef:26:de:7b:2b:b3:ed:e9:48:08:cc:82:cf:
6c:a5:55:49:87:3a:27:5c:d5:78:83:82:f3:68:a5:4f:e4:f2:
26:38:da:65:e3:58:a5:a9:65:22:d7:1b:e2:ec:c7:be:2c:db:
63:8f:8c:33:4a:0d:90:ff:25:1e:4d:87:da:3c:b8:3f:ae:c0:
29:b0:21:14:d9:86:c8:79:9a:6b:d8:c6:94:c4:fb:1c:bf:c2:
16:e8:d5:c4:a1:1c:5f:ac:1d:f0:12:88:c6:68:85:95:e0:b2:
46:f1:4a:52:ea:c4:3a:8a:07:a2:38:1d:70:81:d2:55:5b:08:
1a:4d:85:d2:45:ad:71:f4:18:51:d5:19:bb:85:ea:62:b1:16:
7c:ed:b9:7d:b6:b3:47:4e:36:d8:75:f0:57:2c:ad:ed:ba:71:
86:5e:fb:13:72:e7:70:2a:66:5b:01:2e:ad:ba:bf:e2:93:8f:
5e:ee:ab:93:a7:45:00:d0:b4:a4:2d:0a:0b:8d:a9:81:5f:59:
59:e5:29:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:29:43 2025 by rpki-client