Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
File: U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft (raw, json)
Hash identifier: CEDG4D6Woo47YT8bAKMbG6KVd2kJ+0H+mSL8Fnud5RU=
Subject key identifier: 6F:33:F1:C8:6F:4B:12:B5:EC:39:EE:5C:66:92:FE:2F:78:A5:CB:F6
Authority key identifier: 53:65:83:DE:83:6F:CC:28:E7:0B:F6:6E:AD:B8:D3:8F:3F:64:F4:E1
Certificate issuer: /CN=536583de836fcc28e70bf66eadb8d38f3f64f4e1
Certificate serial: 0197575AC6A343FBE6383CB80FC46B4CA6E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
Manifest number: 1581
Signing time: Tue 10 Jun 2025 01:00:56 +0000
Manifest this update: Tue 10 Jun 2025 01:00:56 +0000
Manifest next update: Wed 11 Jun 2025 01:00:56 +0000
Files and hashes: 1: U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl (hash: /6ROVIK1d0lEX3psFZ14GsxS2vLDYjpU98q8rxTLdg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:5a:c6:a3:43:fb:e6:38:3c:b8:0f:c4:6b:4c:a6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536583de836fcc28e70bf66eadb8d38f3f64f4e1
Validity
Not Before: Jun 10 01:00:56 2025 GMT
Not After : Jun 11 01:00:56 2025 GMT
Subject: CN=6f33f1c86f4b12b5ec39ee5c6692fe2f78a5cbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fb:c5:51:4b:2b:45:a5:ae:b4:f5:70:6e:42:
fc:0b:a7:90:82:28:4b:f0:b5:40:1c:84:09:30:fd:
70:43:f2:70:b4:d0:5a:4f:53:56:5c:2b:e2:8b:54:
da:6f:9d:7a:68:53:27:ea:76:fb:a3:00:25:b5:20:
7c:7c:a9:f6:bf:bb:b1:e0:11:1d:44:bb:8e:44:cb:
96:18:63:d3:21:a9:e1:22:27:07:b1:5a:1a:a0:d2:
a8:aa:b1:11:84:b6:81:eb:41:74:7c:0b:bc:46:0c:
bb:d5:8a:56:f5:b7:15:cb:a7:68:6e:3c:59:61:39:
a2:d5:67:56:90:04:75:d6:32:e9:8e:4a:3b:54:c6:
a9:5c:c2:bd:ae:18:d6:d7:7a:4e:b1:80:d3:92:4d:
44:94:5e:c7:a9:19:ed:b8:4e:19:46:7b:6f:60:29:
5d:10:7f:28:9e:7b:09:25:94:35:08:68:36:3f:7b:
a7:e2:c2:b2:a7:4b:ae:59:4e:9d:7a:9d:2d:8a:f0:
4c:92:90:68:e7:ed:af:c7:76:f1:bb:a1:d9:6b:b4:
fb:d0:de:e9:4e:2e:0b:49:92:64:92:23:23:33:63:
20:f0:ef:2c:64:e8:2f:c4:4e:10:da:10:08:02:fd:
82:1d:f2:d6:5e:50:74:60:ed:33:8f:20:0b:9d:0e:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:33:F1:C8:6F:4B:12:B5:EC:39:EE:5C:66:92:FE:2F:78:A5:CB:F6
X509v3 Authority Key Identifier:
keyid:53:65:83:DE:83:6F:CC:28:E7:0B:F6:6E:AD:B8:D3:8F:3F:64:F4:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6b:18:38:3e:9f:6a:16:81:cc:c1:82:bc:96:ef:f0:d1:45:
8c:ab:12:01:88:40:6c:62:10:ce:10:e5:57:e9:cc:94:5c:e7:
48:c1:f8:de:7c:0b:5c:54:a9:bd:ec:a5:0b:f4:1d:e4:ef:49:
a6:d8:e7:a4:3f:a7:bb:67:e5:51:6e:a4:40:db:9e:97:2e:62:
e9:6e:01:8a:a9:d6:ac:ea:dd:ca:84:44:d5:c7:51:dc:4e:00:
f6:3c:76:29:12:dd:00:85:4f:c0:f9:a8:cb:68:64:e1:5e:d3:
03:5f:4c:d0:5e:37:49:ec:ff:01:a3:6f:bb:00:08:08:03:2e:
37:c6:36:c0:83:22:6b:8e:1f:01:a6:1c:08:7e:89:2f:e1:20:
59:c1:2a:84:0d:46:f4:9e:7f:ad:49:a5:60:e4:e1:41:f8:75:
3d:91:18:43:db:9a:94:75:75:06:1d:9f:48:ac:ea:5f:e2:40:
7f:62:9f:4c:78:59:e1:d3:9e:43:d5:f1:05:51:1c:09:56:ec:
7c:e7:0c:8e:94:89:e3:4e:25:f5:83:ec:53:0c:5d:33:92:3c:
7f:4d:5f:83:a7:a3:a7:fe:c8:2c:b7:6e:2d:93:24:1f:2e:6a:
06:f0:e5:28:50:d5:ab:d8:52:05:e4:bd:27:d2:8b:8b:27:a9:
83:fa:25:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:03:54 2025 by rpki-client