Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
File: t1RlKp6YkUWgWfeIg9U26SxDtT8.mft (raw, json)
Hash identifier: twm+tYpGzco65HBRCUN6zM1pbv7rE6lVv/oBOtX5/58=
Subject key identifier: AB:51:B7:9E:C1:91:41:89:AE:56:53:D2:30:46:B4:BD:8C:D2:F7:4E
Authority key identifier: B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F
Certificate issuer: /CN=b754652a9e989145a059f78883d536e92c43b53f
Certificate serial: 0197499EDD0FC743B6CD83C6E21D916FDE05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
Manifest number: 0F
Signing time: Sat 07 Jun 2025 09:00:37 +0000
Manifest this update: Sat 07 Jun 2025 09:00:37 +0000
Manifest next update: Sun 08 Jun 2025 09:00:37 +0000
Files and hashes: 1: t1RlKp6YkUWgWfeIg9U26SxDtT8.crl (hash: Fpi8JMnF/xUmjts2D4gmTXKnq7LlseC3F3Q5Zv7FYd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:dd:0f:c7:43:b6:cd:83:c6:e2:1d:91:6f:de:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754652a9e989145a059f78883d536e92c43b53f
Validity
Not Before: Jun 7 09:00:37 2025 GMT
Not After : Jun 8 09:00:37 2025 GMT
Subject: CN=ab51b79ec1914189ae5653d23046b4bd8cd2f74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:da:3a:ff:32:b6:8b:ed:b4:da:b5:0e:95:d5:
99:35:ae:d4:00:ee:da:2b:c2:74:e4:4e:7c:c0:0b:
fa:d0:47:ce:db:47:c8:03:75:1f:0e:78:30:2f:9b:
10:99:cb:ae:36:48:87:b3:8b:05:09:84:6f:a2:ee:
7c:e8:aa:d2:eb:49:ba:24:47:39:7c:37:de:c7:2c:
f6:61:8f:ab:d6:3c:44:5d:12:f4:c8:9a:a6:79:88:
5b:b6:0d:85:13:e0:28:82:b5:b7:eb:03:25:5e:70:
39:35:61:fe:6e:b3:d5:7a:22:cc:52:2a:43:cc:3c:
af:c0:55:da:b8:df:48:2c:72:8a:97:c5:96:dc:8b:
84:39:c9:0d:13:d5:a7:65:42:ef:ff:ea:dd:20:ff:
8d:15:da:52:48:bb:d2:af:23:19:2b:8c:ed:12:48:
a3:ed:fc:0d:65:fe:06:03:97:6f:ac:a6:13:04:fb:
b6:3e:a7:79:ae:cd:c1:66:b8:41:9e:50:21:e8:bf:
ff:a1:2e:22:63:22:2b:dc:c3:df:58:19:b7:50:ee:
1e:3b:84:fd:ac:c8:37:be:b0:6c:e1:42:bc:b5:83:
eb:7a:3d:a5:bf:b0:99:61:8b:22:dd:77:c4:a9:83:
a9:5c:cb:6f:e9:06:98:69:59:15:8e:d5:c6:c4:cd:
ae:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:51:B7:9E:C1:91:41:89:AE:56:53:D2:30:46:B4:BD:8C:D2:F7:4E
X509v3 Authority Key Identifier:
keyid:B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:df:30:f2:db:06:4b:86:f1:f7:91:41:22:af:8d:73:2c:ec:
5c:8c:0a:58:11:b5:49:d1:7f:53:4d:f1:60:40:1c:1b:64:06:
8f:18:92:ee:c7:f9:97:4b:4d:93:77:8c:ea:88:69:44:42:2d:
5e:54:25:31:6c:40:f0:2b:85:80:6f:c4:2f:79:86:f3:5e:72:
4c:20:0a:84:c9:70:05:ee:b2:ad:b6:b8:4f:bb:ed:89:46:02:
94:cd:9d:36:92:ed:02:fa:6b:07:ff:83:2b:0c:a5:8e:73:a3:
8a:4b:97:c5:24:03:68:93:62:f1:c5:a3:d3:93:f6:73:8c:1b:
20:18:36:0f:5b:3f:d2:ba:8d:24:04:5c:8d:97:ca:bf:95:8c:
2c:6c:09:de:aa:43:d5:9f:57:93:6b:90:54:87:7f:3d:b3:d1:
b3:eb:53:14:f4:b2:77:60:97:36:93:c5:41:f0:1e:f6:35:08:
15:7d:b4:39:39:7f:ce:3c:9b:ed:cf:33:8d:59:52:de:59:ac:
5f:68:59:1b:e8:dd:57:6d:e5:f9:05:89:1a:62:ad:28:e5:e7:
15:8c:6f:33:0c:38:57:cc:f7:f1:08:5d:28:fc:b2:f1:0e:2b:
45:26:e6:0a:82:3b:06:e5:ee:ea:cc:6c:04:63:72:36:e4:2d:
9c:45:de:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:06:08 2025 by rpki-client