Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
File: mrlC3a28mskLTs---tsjEyOmcFU.mft (raw, json)
Hash identifier: XiThGPtVsH3CeKcs16300euIELws8hFyn8xQcu5fFsY=
Subject key identifier: 5E:89:B6:55:EC:1B:D0:34:4D:AF:D0:E9:75:59:0D:BA:74:3B:92:3F
Authority key identifier: 9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
Certificate issuer: /CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Certificate serial: 0197640354722B2BCA73979C686B9B455AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
Manifest number: 0C6F
Signing time: Thu 12 Jun 2025 12:00:29 +0000
Manifest this update: Thu 12 Jun 2025 12:00:29 +0000
Manifest next update: Fri 13 Jun 2025 12:00:29 +0000
Files and hashes: 1: mrlC3a28mskLTs---tsjEyOmcFU.crl (hash: IjKuYr8kJyB7CuXuErLvgECY8e9aFfD3SoKnJAVzMU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:03:54:72:2b:2b:ca:73:97:9c:68:6b:9b:45:5a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Validity
Not Before: Jun 12 12:00:29 2025 GMT
Not After : Jun 13 12:00:29 2025 GMT
Subject: CN=5e89b655ec1bd0344dafd0e975590dba743b923f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:3b:7f:39:c4:d7:b7:cd:b0:0a:11:c6:b5:
39:64:82:c7:e4:1e:49:60:1f:4f:83:1f:18:70:0c:
0f:42:cf:78:21:d9:e6:b8:60:be:15:c4:62:8a:d4:
7c:0b:ed:45:c5:ed:4c:5d:07:c1:67:19:5f:ad:b8:
a4:bd:b0:fa:a5:84:83:19:65:a2:43:38:ab:5e:6e:
e3:fd:08:8a:eb:eb:95:64:68:28:42:38:d9:37:ed:
b8:fc:d0:71:f2:8b:47:54:83:27:84:c8:b2:d4:d4:
d3:15:b5:67:ec:af:0f:1c:0a:8a:c3:54:0e:19:74:
5c:54:a2:88:cf:50:be:44:eb:77:2f:d4:07:8a:1b:
9a:e3:77:04:e8:04:71:8c:d8:7e:46:f3:e4:cf:79:
3d:42:27:22:c0:5f:4e:5d:dc:c2:00:12:3e:fd:28:
eb:b3:01:3f:a6:9a:b2:63:69:14:4f:4d:2e:b8:9d:
5e:48:27:38:6d:c1:73:33:aa:82:2a:b6:d6:53:4a:
fa:01:85:13:98:4a:b9:a6:dc:30:de:ea:60:d6:ea:
43:f4:74:07:f3:d9:15:de:28:e0:6a:e1:74:54:55:
ef:bc:9f:c3:b5:62:f6:aa:d8:31:9c:39:88:fc:b0:
d3:ed:bb:42:dc:1b:c6:f6:da:fd:8c:98:8a:4a:0d:
84:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:89:B6:55:EC:1B:D0:34:4D:AF:D0:E9:75:59:0D:BA:74:3B:92:3F
X509v3 Authority Key Identifier:
keyid:9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a0:e3:95:c8:78:0b:f6:45:00:0a:28:bd:12:cd:0f:8b:58:
0f:79:9c:05:ec:f4:6d:e4:c3:19:e9:7e:1e:2d:71:d2:97:5e:
a1:5d:de:86:1b:ea:e9:09:ac:25:bf:53:6d:11:40:51:70:ed:
c3:e6:56:5b:6c:22:03:7c:33:33:6b:72:fb:d5:cb:22:60:44:
32:ac:ec:20:23:f5:44:5d:8b:da:d3:5a:a7:92:a2:d1:bc:3f:
87:0b:3e:5c:cc:1b:6b:79:27:90:28:54:79:19:e0:62:f4:0d:
f3:37:92:8c:ac:ca:8d:57:78:5a:32:d4:7b:43:41:42:a4:48:
37:6c:2e:8e:ba:69:94:d6:d6:af:92:54:9c:6c:35:b6:cb:1c:
dd:04:e4:b6:37:bc:bb:69:3f:7c:4b:e9:fa:59:09:16:eb:53:
cc:da:59:4f:9c:c8:b4:52:23:96:d0:40:13:1a:70:40:87:e2:
e2:3e:11:6b:51:6a:fd:ed:3e:e3:72:d8:6a:27:05:2c:fd:7c:
1b:0c:be:a7:fd:e9:c1:02:40:41:7d:05:82:20:76:07:ad:d4:
9f:37:88:49:e7:75:94:9f:fe:b0:d7:13:d1:89:d1:ca:8f:f9:
7f:dc:ed:cb:07:c6:36:0c:66:b6:b9:a5:f3:81:47:16:bb:72:
21:22:54:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:46:55 2025 by rpki-client