Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
File: mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft (raw, json)
Hash identifier: usd4MEEIF/S7Jdq0Zme5WRUc3sX6UzB/T1fy5y6fAOg=
Subject key identifier: EE:2C:E2:08:5A:47:F1:43:C1:D7:D0:49:B4:ED:C5:FE:D3:4C:6A:47
Authority key identifier: 98:7A:BA:6F:74:45:5C:4F:A3:AB:E2:3A:A8:23:06:7E:CF:C3:3C:48
Certificate issuer: /CN=987aba6f74455c4fa3abe23aa823067ecfc33c48
Certificate serial: 0197B74560C43A20985E263F517CBE758410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
Manifest number: 0166
Signing time: Sat 28 Jun 2025 16:01:06 +0000
Manifest this update: Sat 28 Jun 2025 16:01:06 +0000
Manifest next update: Sun 29 Jun 2025 16:01:06 +0000
Files and hashes: 1: mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl (hash: KaGZ9EbwV72pf9+hNMItxQzMbWmeuj+LwHv2iO4s1Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:60:c4:3a:20:98:5e:26:3f:51:7c:be:75:84:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987aba6f74455c4fa3abe23aa823067ecfc33c48
Validity
Not Before: Jun 28 16:01:06 2025 GMT
Not After : Jun 29 16:01:06 2025 GMT
Subject: CN=ee2ce2085a47f143c1d7d049b4edc5fed34c6a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:38:b1:41:39:a6:02:56:84:85:fb:5d:d4:bb:
24:51:1f:45:35:2f:4d:2b:a5:2a:17:5b:4f:c8:8f:
b2:47:bc:10:b9:0b:ca:30:76:5a:db:66:07:74:04:
d2:7c:d4:2c:e1:c1:76:f8:f2:25:20:65:ec:28:ac:
0c:bc:11:1c:04:36:44:eb:66:3a:fc:56:c8:96:a6:
25:f9:51:43:b2:aa:5c:d5:15:bc:c9:ff:8a:75:5a:
06:fe:32:28:f6:b0:10:f0:7a:ad:8b:fe:dc:25:5f:
40:ba:80:99:0c:de:cd:d1:73:6b:77:ae:67:d7:62:
e7:a9:73:9c:e1:23:cc:fb:6f:00:52:d5:66:72:fb:
5d:13:dc:f8:c7:ac:a6:e7:09:66:e8:bf:e3:1d:2a:
d4:10:d6:7f:77:d0:ef:6c:f2:e5:c4:d1:d9:c7:8b:
3c:3b:5b:86:29:ef:48:56:ff:78:87:da:dc:30:f4:
2c:22:7d:1b:f3:d8:c4:a8:36:ca:df:70:f7:3c:c3:
c3:ad:f9:0e:0c:60:0a:a3:ff:f0:5f:89:ac:77:9f:
23:cc:7f:a7:15:09:f1:0b:ac:48:07:17:b5:87:aa:
37:06:bc:38:26:91:09:f4:2a:44:6c:c7:26:ec:4c:
70:40:7e:5c:89:e1:be:90:1d:44:f4:a9:82:4f:07:
bd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2C:E2:08:5A:47:F1:43:C1:D7:D0:49:B4:ED:C5:FE:D3:4C:6A:47
X509v3 Authority Key Identifier:
keyid:98:7A:BA:6F:74:45:5C:4F:A3:AB:E2:3A:A8:23:06:7E:CF:C3:3C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cf:d0:b5:ab:1e:a9:85:fd:2c:a5:a4:6e:75:6e:66:ca:28:
4b:1b:b0:b7:64:c1:61:6c:a6:43:ba:00:35:c1:78:6e:cb:f6:
1b:ad:3c:72:fa:44:97:aa:bc:6d:93:20:ec:a5:44:db:cd:dc:
f5:a7:97:99:84:f6:0d:fe:63:3b:45:17:9f:86:88:9b:a3:76:
b8:0c:77:18:b5:ce:13:d5:45:29:f6:f1:59:a9:25:55:55:d9:
b2:b7:d2:84:e5:8e:ed:3f:6a:29:54:c0:2a:ff:c5:e1:42:fd:
8d:c3:52:87:95:a7:9a:3c:26:83:09:a9:62:86:fa:49:7c:35:
f7:cd:18:91:6c:12:2b:af:cb:1f:25:84:f7:ca:4c:6b:62:e9:
2b:34:1f:28:d2:f7:f8:a3:9a:8e:22:ff:1d:5a:2b:18:23:36:
66:87:f6:d7:20:b2:3b:d8:35:51:15:5c:46:4c:e0:dd:03:08:
7c:9a:21:e6:3b:30:4b:27:c7:88:bf:a3:bf:22:33:aa:1f:ca:
37:83:e6:7c:0d:27:b7:b0:25:e6:cd:40:45:82:b1:ca:33:57:
7d:d4:25:81:cd:79:e5:71:0f:8c:9d:f7:29:45:fb:b8:3f:f9:
7d:4e:02:56:07:4d:3b:d3:d7:1f:0f:cf:82:39:70:21:1f:8b:
0a:e7:07:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:05 2025 by rpki-client