Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
File: pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft (raw, json)
Hash identifier: 4HRXmTsDHOKwaBFaexuYRk6iaQe36FVRKIQHhQDKlHg=
Subject key identifier: 66:D2:F0:7E:86:E4:28:B5:77:52:57:EB:57:60:CD:66:35:4F:0C:91
Authority key identifier: A4:3E:2B:9F:BC:8B:47:72:CF:80:00:74:8C:47:DD:43:7B:3C:59:8F
Certificate issuer: /CN=a43e2b9fbc8b4772cf8000748c47dd437b3c598f
Certificate serial: 0197B933F4B3C1907BEB52E76D91B336ACC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
Manifest number: 020E
Signing time: Sun 29 Jun 2025 01:01:19 +0000
Manifest this update: Sun 29 Jun 2025 01:01:19 +0000
Manifest next update: Mon 30 Jun 2025 01:01:19 +0000
Files and hashes: 1: pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl (hash: EvyJuOeGf0NsVhSXv+l+WI6Z6krdWZMofF8ek+s14cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:f4:b3:c1:90:7b:eb:52:e7:6d:91:b3:36:ac:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43e2b9fbc8b4772cf8000748c47dd437b3c598f
Validity
Not Before: Jun 29 01:01:19 2025 GMT
Not After : Jun 30 01:01:19 2025 GMT
Subject: CN=66d2f07e86e428b5775257eb5760cd66354f0c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:27:65:f8:ac:c0:8d:58:a3:17:8c:0e:31:cd:
90:4c:87:87:ec:5e:0d:bf:a7:93:cc:7d:09:6f:f6:
ca:96:00:fa:3c:9b:61:4f:ea:16:cc:1f:da:2d:cf:
15:7d:04:7b:e8:bd:da:4c:f0:2c:d3:dc:07:cb:fd:
64:0f:3e:57:51:fa:71:fe:c9:42:70:3a:d9:41:bc:
34:5f:c1:49:ab:79:d2:0d:51:3b:33:f2:ab:f6:80:
a4:91:90:57:e2:f3:ec:d6:a0:35:c1:12:f2:9c:ac:
23:c5:56:d6:da:d4:2c:67:47:c3:ce:f6:1b:55:c4:
60:e6:6f:56:e1:ac:e6:0e:75:95:ce:a4:c1:91:1c:
24:70:ac:49:66:35:2c:af:7a:8e:c4:56:49:08:5b:
94:e4:13:be:5c:07:71:fc:ef:06:10:e0:2d:ff:ae:
21:69:06:e8:60:95:fa:53:ed:fe:10:46:c1:95:a8:
82:81:ed:37:c2:f4:45:9e:5b:d5:62:e8:a6:39:4f:
a1:90:fe:ca:93:74:b2:c9:90:2b:23:93:a7:6a:cb:
c6:48:bb:21:7b:f5:e2:c8:fd:a3:29:f0:0b:37:f0:
cc:6b:5f:78:ac:58:e7:c6:13:49:57:db:55:69:73:
78:06:81:26:d5:53:f5:a6:3e:e1:5b:28:f2:ab:5d:
09:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D2:F0:7E:86:E4:28:B5:77:52:57:EB:57:60:CD:66:35:4F:0C:91
X509v3 Authority Key Identifier:
keyid:A4:3E:2B:9F:BC:8B:47:72:CF:80:00:74:8C:47:DD:43:7B:3C:59:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1b:87:0d:bd:36:23:9a:e0:1b:b3:ac:3f:27:30:0f:c5:92:
ec:58:f9:c5:4a:da:7b:88:04:4c:ce:65:cd:03:f9:34:e2:d3:
f7:30:00:30:e4:d7:41:0b:81:2b:39:71:be:fe:8c:9a:c8:9e:
c0:e6:85:4a:7f:87:af:e3:70:b4:39:18:c7:86:04:a7:28:71:
a6:ef:6f:30:32:2a:fd:29:bb:ca:20:fe:c9:5d:11:07:93:ac:
75:f2:bd:c7:ba:7a:d4:4b:be:03:2c:a4:17:c5:e6:5d:de:4f:
b4:27:d5:d3:be:7b:e1:69:e7:5a:cf:34:a8:2c:fd:f6:f7:a0:
52:60:56:70:89:2f:10:67:61:8a:46:d2:e7:22:94:42:aa:0b:
34:b8:88:d6:fa:7f:39:55:9c:69:ff:b6:dc:87:e6:16:f6:51:
89:6a:03:f2:7c:a5:1a:4f:2b:b4:94:91:02:6f:58:2f:06:84:
41:af:d5:b3:cd:0d:10:de:aa:46:35:d1:27:24:5f:d0:f7:f2:
c6:27:d8:95:c2:89:a4:5d:31:bd:7f:70:69:c7:8d:ec:2e:51:
c9:55:9c:d6:e2:e1:d3:88:fb:bd:6b:5e:91:00:8c:82:61:8f:
d0:a7:b3:db:bf:ee:8c:ce:07:17:b0:8a:bb:18:55:d5:6d:cb:
45:b4:06:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:24 2025 by rpki-client