Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
File: 12UrrkezA7urED_3ukWgqQYMPcw.mft (raw, json)
Hash identifier: MYn8wNWyiamJr9KAx6Dq+fqSQwlqz98rXfnJMuPe9bc=
Subject key identifier: A3:B4:A6:58:49:DE:92:37:29:77:3D:EE:A2:9A:6D:23:C5:40:25:63
Authority key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
Certificate issuer: /CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Certificate serial: 01974D7BBFD462B9A347CF2EDFAF26B707C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
Manifest number: 150F
Signing time: Sun 08 Jun 2025 03:00:44 +0000
Manifest this update: Sun 08 Jun 2025 03:00:44 +0000
Manifest next update: Mon 09 Jun 2025 03:00:44 +0000
Files and hashes: 1: 12UrrkezA7urED_3ukWgqQYMPcw.crl (hash: 5S5aZUW8CVM3As679OEO1dUmApCh8NPAVyBls6j+GgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:bf:d4:62:b9:a3:47:cf:2e:df:af:26:b7:07:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Validity
Not Before: Jun 8 03:00:44 2025 GMT
Not After : Jun 9 03:00:44 2025 GMT
Subject: CN=a3b4a65849de923729773deea29a6d23c5402563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:61:cc:de:9a:7a:45:76:51:20:ef:6d:61:
58:e2:52:5c:e6:c5:05:9d:07:b3:c9:61:2e:8e:01:
05:84:a3:ce:20:0b:b0:b5:78:de:15:bb:c9:01:32:
ed:9f:39:f9:cd:0f:e0:60:8d:5f:f9:67:60:fb:4a:
3c:2c:e4:88:4e:18:11:06:e6:35:95:2d:fe:ca:d3:
a0:41:8d:23:4f:7c:2b:07:b3:31:f1:1c:e0:7d:e7:
a0:98:c5:a7:e2:e7:3f:48:1e:3c:88:96:3e:bd:42:
be:26:12:c4:93:de:7d:53:ae:6b:4f:03:cc:d0:69:
94:3c:8f:ce:57:b6:e2:d2:b0:ea:fa:40:17:e7:7d:
05:ec:4f:9a:55:4f:c7:0b:34:62:e9:5a:57:41:b0:
ec:eb:05:f5:75:05:43:05:f9:fe:98:35:45:d7:22:
36:e8:5e:82:a3:16:c3:d5:fd:7f:5e:aa:ba:59:86:
b0:7c:96:e3:51:a8:48:ac:3d:6d:99:9a:d4:7b:41:
f5:9b:d6:be:9d:f0:e6:0f:d4:2a:51:e4:e3:1f:08:
1a:78:90:e3:46:23:3c:45:e4:39:53:f0:2d:fe:67:
a7:b6:64:82:64:58:08:ca:45:30:8f:3a:7e:74:ee:
70:ee:83:9c:96:1e:e9:85:57:68:70:b4:81:50:01:
d9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B4:A6:58:49:DE:92:37:29:77:3D:EE:A2:9A:6D:23:C5:40:25:63
X509v3 Authority Key Identifier:
keyid:D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:07:7c:1a:8b:15:a7:ec:fe:9f:fe:8a:3e:97:69:10:dc:ba:
df:ee:41:53:63:63:40:51:ca:e8:7a:56:be:a1:fd:37:ea:bb:
11:cb:ed:17:d0:57:de:02:50:f1:d2:77:19:37:c1:a5:c0:3f:
20:56:dd:58:67:8d:2d:bf:a0:62:98:82:f5:70:cc:e8:8a:8f:
e2:68:42:54:40:1c:c2:35:24:70:11:14:16:97:ec:92:a4:4d:
d8:13:47:fd:2e:83:71:c9:4b:d9:e2:26:ce:d8:9f:a2:6a:85:
4c:ef:0c:c1:9d:eb:9a:4a:ab:e5:ea:16:cb:ff:00:bc:f9:e4:
34:ad:83:86:53:c6:4d:e7:f2:17:a4:9c:b2:81:4f:0f:6d:3f:
a1:09:d1:14:f9:90:12:fc:b6:9f:f9:1b:07:5e:cc:46:0f:6d:
6b:23:81:74:2d:de:10:6b:9c:ee:17:dc:2f:37:86:19:ab:0c:
af:b4:30:87:5f:17:53:cb:8a:d7:6e:df:60:56:95:c4:3c:28:
d2:36:03:2f:e1:05:61:65:07:03:95:1e:dd:cf:02:8c:ed:71:
5a:8d:98:b6:f5:d7:8e:f2:70:79:d1:5d:77:85:d3:88:6c:93:
6b:6b:56:27:87:c7:cb:75:a5:09:42:ee:a7:04:39:07:19:d5:
44:24:db:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:08:29 2025 by rpki-client