Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
File: mrlC3a28mskLTs---tsjEyOmcFU.mft (raw, json)
Hash identifier: Uj/yfYTds9cRx+r6OGlgxoIAGaba2/vCTEH58e8PHZc=
Subject key identifier: 1B:BA:BC:D3:3D:F7:94:70:DF:25:A4:5B:7D:9D:51:D6:A6:6C:9A:9E
Authority key identifier: 9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
Certificate issuer: /CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Certificate serial: 0197586D0503D0466A55D497FD115B365B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
Manifest number: 0C69
Signing time: Tue 10 Jun 2025 06:00:29 +0000
Manifest this update: Tue 10 Jun 2025 06:00:29 +0000
Manifest next update: Wed 11 Jun 2025 06:00:29 +0000
Files and hashes: 1: mrlC3a28mskLTs---tsjEyOmcFU.crl (hash: AqxXaPCFDKeIFCjXzCeZP8WyGd5nhFqrDDgGs2Vj/4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:05:03:d0:46:6a:55:d4:97:fd:11:5b:36:5b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Validity
Not Before: Jun 10 06:00:29 2025 GMT
Not After : Jun 11 06:00:29 2025 GMT
Subject: CN=1bbabcd33df79470df25a45b7d9d51d6a66c9a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:ed:59:e1:60:e0:3e:ca:ab:62:71:4b:19:
38:1c:46:3b:ee:b0:89:31:0c:de:38:12:ec:67:d1:
d6:91:e9:82:24:7e:f6:96:74:b5:f8:52:bb:64:d0:
cb:26:f8:eb:a0:ea:b1:f4:b1:3a:92:f3:e4:80:a6:
7f:24:c3:5e:3f:0a:83:a1:24:68:0d:b4:11:c4:19:
fe:60:18:90:51:65:80:2d:fa:c8:57:4a:5f:85:a1:
de:7e:fd:c5:88:b0:1b:72:e2:59:39:4f:d8:98:76:
33:9e:df:5b:d5:95:7a:5d:c2:77:1f:b2:8d:a5:90:
e0:ac:65:da:45:6e:59:5e:f6:d5:04:2d:52:49:08:
7e:43:5d:41:27:cb:a4:d8:ae:97:e8:f7:e6:40:6f:
17:fd:42:ef:f1:46:83:db:e8:14:f4:f0:ba:9a:af:
66:25:66:b4:6a:c9:83:3e:f4:e6:66:9a:b5:f4:12:
51:5c:0d:f5:4d:73:0d:cc:04:e6:1e:37:a3:07:9d:
f0:f8:88:77:33:3d:d4:dc:fd:fa:3e:d9:c0:72:aa:
a2:a3:aa:85:87:31:3f:01:06:12:4a:88:d4:6c:5d:
7c:bc:dd:b6:78:8f:e4:ee:0e:5b:40:f7:21:4c:b6:
df:1e:d9:74:5f:16:19:84:56:2f:09:36:19:c8:13:
67:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BA:BC:D3:3D:F7:94:70:DF:25:A4:5B:7D:9D:51:D6:A6:6C:9A:9E
X509v3 Authority Key Identifier:
keyid:9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:4e:93:81:da:51:89:08:f9:b4:08:9d:6b:25:d2:74:25:6e:
fa:ab:07:af:dd:b1:6e:44:60:79:58:42:15:a8:8f:c6:c7:60:
66:f4:b9:fb:cf:5f:c6:26:3c:59:b2:4b:67:31:8f:00:9f:2e:
ae:11:a8:e4:5e:0e:33:a1:bc:e3:67:19:8f:65:bc:4d:fe:1e:
6e:ed:f5:21:ec:77:9a:f7:ce:12:9d:33:d0:bb:2a:23:50:9e:
50:98:7a:0e:2c:54:3b:c7:e9:c9:5f:e2:28:41:fc:3c:77:52:
86:0c:9f:ce:04:3c:01:85:8a:b2:36:d8:c1:48:cb:a0:bd:94:
12:f6:35:62:e5:ca:f6:68:31:13:0d:3c:71:2e:ad:3d:fe:51:
d3:c9:bf:50:fe:ba:62:7b:ad:08:ff:da:ab:c8:ef:01:16:11:
61:83:a1:92:c2:bb:e1:3c:2a:5c:ad:55:7d:cd:03:3d:03:8d:
0d:23:ab:99:ec:62:4f:ce:5a:89:dd:77:6e:07:0e:31:af:2a:
43:39:bb:4b:16:33:b7:6a:42:9b:15:9a:3f:ae:26:dc:09:ad:
59:c7:4c:16:9b:41:42:aa:55:51:a8:0d:60:b0:b5:c9:65:8e:
c3:20:3f:70:9f:ec:6b:fb:fb:86:8e:78:20:11:51:d8:34:6a:
0e:b5:60:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:25:17 2025 by rpki-client