Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
File: idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft (raw, json)
Hash identifier: 8J7/BqydN4F2EYTxvMSe5wOoMNFDQS+TPLEAtI0ICUw=
Subject key identifier: B7:E9:C9:6F:BA:7D:4E:65:DB:3A:5A:7D:DE:9A:FC:55:7D:53:7E:6F
Authority key identifier: 89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
Certificate issuer: /CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Certificate serial: 0197CBE043925C59CAD85CFEB5A001E4EE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
Manifest number: 0EDF
Signing time: Wed 02 Jul 2025 16:02:41 +0000
Manifest this update: Wed 02 Jul 2025 16:02:41 +0000
Manifest next update: Thu 03 Jul 2025 16:02:41 +0000
Files and hashes: 1: idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl (hash: dqGHW0W3BhZ4MTP8F0+tx9mzBuE8z6DSkpxFvhIlwG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:e0:43:92:5c:59:ca:d8:5c:fe:b5:a0:01:e4:ee:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Validity
Not Before: Jul 2 16:02:41 2025 GMT
Not After : Jul 3 16:02:41 2025 GMT
Subject: CN=b7e9c96fba7d4e65db3a5a7dde9afc557d537e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:15:80:cc:2f:9b:e8:6d:2c:47:72:7d:e5:cf:
8a:f0:4d:41:0b:ea:5c:c7:0e:39:4c:89:5c:53:b3:
ce:19:3b:19:d7:33:85:03:a5:63:1a:17:60:b6:8c:
4e:4f:15:5b:51:2a:d5:07:2b:03:33:58:ec:46:50:
d0:a0:a3:a4:19:fb:6e:08:38:03:24:c6:07:d8:4d:
57:d7:d9:fe:a3:ea:d3:73:7c:94:e6:03:a4:37:25:
dc:ee:68:cf:20:d2:e5:25:ef:9f:7c:0b:7e:eb:28:
7f:b4:d3:74:6b:21:cf:fa:db:55:ff:0d:17:dc:8d:
6f:4b:cd:5c:9f:15:fc:fc:b1:6c:81:50:16:be:65:
eb:83:4b:05:9a:f0:a4:16:f0:e6:7f:95:41:d5:b8:
72:9f:4d:94:a3:39:90:ca:a3:22:d1:6e:e9:b4:a7:
08:4d:d9:29:66:93:15:d1:6b:8f:9c:32:a4:19:6d:
3a:bc:3d:b6:78:91:72:a3:3b:cf:24:3e:b2:41:5b:
c2:6d:de:6b:fd:97:56:ac:27:99:a8:9d:6d:e8:70:
68:89:05:ca:4a:e2:19:f4:f8:63:23:22:c0:05:3c:
d8:dd:6c:df:3c:02:56:a9:b2:fb:52:f1:f1:d6:c3:
8b:dc:75:98:c0:e6:a0:ca:d0:d1:cf:ae:cb:9c:f0:
fb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E9:C9:6F:BA:7D:4E:65:DB:3A:5A:7D:DE:9A:FC:55:7D:53:7E:6F
X509v3 Authority Key Identifier:
keyid:89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:37:d5:89:4d:d2:3b:1d:3f:d3:15:30:2d:2f:a9:f0:a5:f0:
d9:3a:9c:f3:32:be:f4:fb:05:14:a3:99:b9:f3:59:26:cf:e6:
f1:50:4d:94:02:13:10:3c:30:2c:57:25:a8:9a:c0:61:b5:c9:
28:42:be:0e:a8:9a:57:25:a7:b9:bf:44:16:13:f4:1b:6d:1b:
82:8d:bf:90:d8:0f:52:7f:b8:e3:5b:5c:45:a7:17:25:10:7c:
a6:dc:6c:45:17:83:12:f4:bc:40:c5:b6:a2:0e:43:58:ec:34:
98:82:c7:23:30:5d:72:27:d9:22:3d:93:a5:ec:aa:35:fa:69:
42:1f:9f:23:f9:86:86:54:8c:18:86:26:cd:5c:fa:a1:a7:61:
60:73:0f:d9:6c:f2:45:27:83:e8:a4:14:62:4f:2c:e3:a2:dd:
f7:0f:c0:f3:4d:0b:d6:8d:3d:72:ba:2b:5b:40:f1:01:c6:a3:
45:2b:96:4a:d1:c7:37:cd:77:c1:8a:45:89:64:5b:87:09:79:
6d:4e:66:84:ac:15:f1:fa:70:d6:3b:03:c2:ef:a3:28:70:b5:
8c:39:3a:96:00:f9:39:ff:f0:e4:92:31:ed:68:6a:5d:12:f7:
60:aa:2b:2c:52:a5:33:69:19:d8:06:b6:18:f2:8f:f6:94:f9:
6e:9c:c4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:12:37 2025 by rpki-client