Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
File: U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft (raw, json)
Hash identifier: aBfgzGyOBz0LFCj7qdKgyqIIeD+NrCe0S0Hv7PU2lO8=
Subject key identifier: DC:DF:04:37:D8:76:CA:84:F7:E6:35:79:8E:F6:EE:07:F6:DC:ED:8C
Authority key identifier: 53:65:83:DE:83:6F:CC:28:E7:0B:F6:6E:AD:B8:D3:8F:3F:64:F4:E1
Certificate issuer: /CN=536583de836fcc28e70bf66eadb8d38f3f64f4e1
Certificate serial: 019762F121E8BE821DAF6F3EE6618E1EF4D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
Manifest number: 1587
Signing time: Thu 12 Jun 2025 07:00:59 +0000
Manifest this update: Thu 12 Jun 2025 07:00:59 +0000
Manifest next update: Fri 13 Jun 2025 07:00:59 +0000
Files and hashes: 1: U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl (hash: YRdvgkw80B17sCpSyXc6swPH6SnKIEz4Y4v5lmC5YAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:f1:21:e8:be:82:1d:af:6f:3e:e6:61:8e:1e:f4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536583de836fcc28e70bf66eadb8d38f3f64f4e1
Validity
Not Before: Jun 12 07:00:59 2025 GMT
Not After : Jun 13 07:00:59 2025 GMT
Subject: CN=dcdf0437d876ca84f7e635798ef6ee07f6dced8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:d1:60:09:c1:23:a1:c3:06:91:aa:81:f4:
32:b4:b3:01:d6:4e:c7:58:3d:96:4d:ff:f3:96:61:
25:da:46:b5:02:4a:b1:32:47:59:fc:c9:98:08:55:
f4:4a:37:aa:12:29:1e:3f:12:bf:aa:95:47:44:cc:
d5:6f:51:da:63:9e:fd:91:e5:9b:fe:c9:9c:6a:6f:
6d:a7:ad:e2:34:c0:00:01:14:ab:ca:9a:e9:cd:2c:
ff:0f:50:db:09:9b:7b:58:19:0e:b3:8a:de:eb:f4:
a8:2b:bd:3e:c8:b4:df:b9:e2:6f:ac:1f:7e:73:1e:
72:7d:a6:e4:92:b5:1e:0a:8f:af:be:35:bd:19:17:
d6:f6:7f:03:a4:2f:73:b7:e6:11:0f:f9:e7:b3:73:
52:33:d3:62:b5:1a:c3:e5:2e:f7:0e:62:82:f1:b0:
16:f9:af:c3:d3:82:a1:f9:fe:17:38:f5:22:1d:23:
cb:c5:e9:f9:af:68:7e:07:32:fe:69:94:0a:a2:38:
a2:b7:dc:fe:13:f1:43:dc:ba:b7:a1:fe:e2:d8:47:
37:b0:64:2c:21:bd:8d:41:4c:00:d8:69:03:1a:57:
d5:51:05:e7:12:23:2f:34:a1:a5:2d:38:58:31:e5:
e9:bc:f7:c0:91:84:0f:94:d3:ac:8b:4b:3e:33:f0:
fb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DF:04:37:D8:76:CA:84:F7:E6:35:79:8E:F6:EE:07:F6:DC:ED:8C
X509v3 Authority Key Identifier:
keyid:53:65:83:DE:83:6F:CC:28:E7:0B:F6:6E:AD:B8:D3:8F:3F:64:F4:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:08:b3:ee:c7:b1:6f:0d:fe:91:bd:2b:5d:ff:30:7d:41:dd:
47:8c:4f:b4:d0:e0:ac:0a:00:ae:db:87:19:97:98:ba:94:f3:
f3:b2:73:fc:9d:c4:74:00:92:67:70:24:27:24:c9:bb:5f:b9:
8e:d3:93:5e:e5:32:25:95:65:99:86:5f:ae:28:ac:09:21:5d:
6d:23:3a:81:e7:9b:4c:2b:7d:23:59:76:14:a3:5d:4f:9b:51:
e1:29:6d:04:b8:bd:e0:03:a3:9c:d6:6c:6b:35:4f:52:b6:c9:
43:ef:68:55:9f:28:e6:b1:75:6f:d6:8a:a6:85:82:76:81:2e:
94:e7:0d:c4:9b:cc:5d:a1:ea:af:6c:25:03:3f:37:16:5b:ec:
89:74:b4:7e:07:f5:01:49:61:89:76:82:dc:40:0e:07:0e:46:
82:28:62:5e:c2:d3:28:2b:c1:81:77:5d:28:80:fb:c5:94:46:
65:ed:35:ee:33:b0:8e:31:4b:fb:1b:25:95:c8:6c:3b:a1:62:
40:d9:11:ae:42:7f:f1:dd:c0:e7:f3:db:0f:e2:73:22:7c:d9:
00:8a:41:53:0f:69:ae:d4:d7:cc:10:fd:22:4b:e1:4b:ef:b1:
8b:9c:e1:e1:5a:e2:52:c4:8b:61:12:34:94:2b:16:57:e2:5c:
36:68:e1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:44:25 2025 by rpki-client