Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
File: dM1ajbKkgrSTFrdXO4pPh09uuxU.mft (raw, json)
Hash identifier: Poxz5B+P2NjV1KwKZnu0OnGuzPnt1XVkVbX8EgpUjzk=
Subject key identifier: 16:6F:33:67:1B:FA:E6:7B:DC:AF:78:7D:2D:A7:F6:D2:88:BC:A6:DD
Authority key identifier: 74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15
Certificate issuer: /CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
Certificate serial: 01974A7AE23BA135ED0035D50301651A7B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 13:00:56 +0000
Manifest this update: Sat 07 Jun 2025 13:00:56 +0000
Manifest next update: Sun 08 Jun 2025 13:00:56 +0000
Files and hashes: 1: dM1ajbKkgrSTFrdXO4pPh09uuxU.crl (hash: eR/HRxatMoCVz9vO9YQoX3amoJmnub2CtubEhOCDsao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:e2:3b:a1:35:ed:00:35:d5:03:01:65:1a:7b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
Validity
Not Before: Jun 7 13:00:56 2025 GMT
Not After : Jun 8 13:00:56 2025 GMT
Subject: CN=166f33671bfae67bdcaf787d2da7f6d288bca6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:14:be:a0:53:13:c6:c0:25:da:03:05:27:55:
a8:1d:dd:43:97:36:a0:a4:47:7e:e9:73:07:35:53:
22:59:13:71:ed:bb:6c:f3:66:9c:65:c2:45:6c:32:
9e:4e:87:d8:64:b7:bf:7f:f1:06:05:c5:0d:90:2a:
30:ae:5c:7e:26:5a:33:a3:85:2b:48:8d:5b:f3:41:
3b:74:65:4d:73:49:10:d6:bd:76:fb:d8:10:a2:0a:
6e:33:fc:9a:34:4e:58:72:66:53:08:fc:c1:73:0b:
41:ed:cd:e8:79:9e:d4:dc:15:c3:68:a6:5f:d1:7d:
41:23:45:76:da:68:8f:14:b5:10:64:c5:b9:ab:59:
09:5e:45:cf:8a:96:3e:7b:8e:f6:be:d3:35:d2:3d:
ab:2f:f5:6b:bd:8e:03:4b:3e:11:f1:b0:fa:63:5c:
73:89:0b:a2:a8:e2:ea:ff:75:04:bf:47:47:d7:64:
0f:70:84:fc:84:83:8a:4d:ab:19:f1:a8:7a:20:ee:
fc:eb:33:29:5d:d6:90:8d:b9:76:30:fa:a0:1e:11:
a9:a2:d6:34:77:33:90:e3:7b:a6:22:6d:48:d1:aa:
33:b4:40:a7:a2:a1:ed:90:d0:42:88:45:e8:40:60:
fc:5a:e0:44:82:4d:db:cf:c2:8e:8f:08:6e:61:12:
5c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6F:33:67:1B:FA:E6:7B:DC:AF:78:7D:2D:A7:F6:D2:88:BC:A6:DD
X509v3 Authority Key Identifier:
keyid:74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:60:3b:18:9c:16:84:74:41:d8:d5:ea:74:43:3d:2b:44:e1:
7a:ab:9b:f9:c9:ec:98:07:11:3a:9a:04:6f:41:8f:f1:0c:2c:
0a:34:02:98:6f:d2:35:8e:72:57:af:fc:3e:fd:8a:ac:2e:aa:
37:03:71:4e:cc:86:52:dc:38:d1:9e:50:13:f7:78:81:e9:8a:
7b:d0:fd:43:a8:fa:de:c9:ec:82:b9:af:fa:0d:f6:ff:7b:60:
3f:25:30:1b:ef:e1:40:29:ac:23:ee:8f:12:8d:3c:7e:36:8c:
37:3a:94:3b:94:7e:33:0a:45:cf:04:2e:c4:7f:fd:53:33:61:
e2:81:9e:9b:d3:51:fc:47:cc:50:a1:59:36:fc:48:4c:61:33:
a6:10:22:d1:ed:e7:eb:20:32:be:3a:31:0e:47:8a:22:9a:0a:
c6:a0:86:4d:19:40:7c:d6:d1:f7:87:dd:8f:8b:ac:8c:8a:3a:
a5:7f:7a:6a:08:01:38:16:49:15:e4:5b:07:50:6f:4b:c2:f9:
8a:94:9b:b5:96:58:49:e3:5c:90:96:ea:5b:22:9b:47:b7:bb:
1a:e5:bf:82:c5:59:ec:b8:5c:3e:1d:93:f9:6a:7d:9d:c4:49:
5e:33:a0:a9:6f:51:2f:6b:77:f2:4a:7d:e9:4d:0f:c3:3f:0b:
c6:af:ac:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:54:36 2025 by rpki-client