Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft
File: mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft (raw, json)
Hash identifier: Vz5gllDtUhPypaqJ8iIndZLbT27D+et7Z6s8J/+9NHI=
Subject key identifier: E1:29:3E:00:7B:62:C0:B2:8D:CB:12:BD:DE:DF:05:D4:4D:57:EE:1F
Authority key identifier: 99:C1:3C:B5:8D:2F:D3:1E:12:C5:E1:46:CC:6B:4F:2C:74:78:16:F4
Certificate issuer: /CN=99c13cb58d2fd31e12c5e146cc6b4f2c747816f4
Certificate serial: 0197BA7E0BAF9A6E25D4BB5FFA978CBECC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft
Manifest number: 08E2
Signing time: Sun 29 Jun 2025 07:01:51 +0000
Manifest this update: Sun 29 Jun 2025 07:01:51 +0000
Manifest next update: Mon 30 Jun 2025 07:01:51 +0000
Files and hashes: 1: mcE8tY0v0x4SxeFGzGtPLHR4FvQ.crl (hash: oAWx5JgJly2e/5nwxhNnbzf49EiF3ejmP+c+ASI5bwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:0b:af:9a:6e:25:d4:bb:5f:fa:97:8c:be:cc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99c13cb58d2fd31e12c5e146cc6b4f2c747816f4
Validity
Not Before: Jun 29 07:01:51 2025 GMT
Not After : Jun 30 07:01:51 2025 GMT
Subject: CN=e1293e007b62c0b28dcb12bddedf05d44d57ee1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b8:60:2f:77:ca:53:37:87:67:c7:37:af:c6:
19:21:6d:46:97:70:46:0b:dd:64:71:77:76:e4:9b:
97:86:e2:d9:97:f1:e6:b7:93:e2:4c:49:b6:90:39:
65:0e:93:cf:b5:47:27:d3:01:06:2e:95:a6:64:cb:
44:55:46:da:86:34:30:8a:42:32:d3:6a:46:ba:3c:
b4:36:21:3f:9b:7a:6f:fc:1a:6b:33:02:44:d1:04:
1c:93:43:1c:3c:09:4c:94:11:f2:13:0d:e5:48:6a:
be:32:ee:eb:07:24:46:bf:94:4c:36:de:0a:c2:8c:
b3:78:1e:55:9f:e5:f8:5f:1b:a2:c9:5e:5b:e4:a4:
a9:58:0a:2f:77:34:6c:d0:18:b0:05:5f:d3:10:96:
5c:50:2e:da:2e:4e:9f:ff:8e:b3:b6:f8:80:bb:3d:
97:e5:53:f7:7a:84:96:60:45:fd:26:2d:01:39:1a:
55:8c:69:54:6d:2b:25:4c:c6:e4:5f:b2:29:b6:53:
da:81:7a:b6:34:bf:1b:37:3b:c3:f1:40:07:e7:33:
43:e0:42:2e:27:f8:81:c3:01:b1:ce:c4:fd:a6:43:
1a:5d:04:72:da:b0:75:b6:30:30:0a:6e:21:67:8c:
eb:e0:f3:16:b9:76:d4:1f:8b:da:16:c1:db:0d:36:
e2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:29:3E:00:7B:62:C0:B2:8D:CB:12:BD:DE:DF:05:D4:4D:57:EE:1F
X509v3 Authority Key Identifier:
keyid:99:C1:3C:B5:8D:2F:D3:1E:12:C5:E1:46:CC:6B:4F:2C:74:78:16:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e9:41:ce:1d:b2:b5:68:e9:8e:16:bb:1a:64:25:35:14:3e:
dd:d0:2f:b8:7d:98:a9:1b:48:b1:05:9b:16:07:31:30:58:37:
de:43:34:51:e7:f2:ca:d8:3e:bd:d1:f5:19:ef:78:6c:7b:79:
c2:0a:00:74:4f:44:2f:d5:0c:0e:1a:9c:0d:87:b7:76:4a:a9:
7b:7d:57:6a:87:0c:4d:9f:af:07:c2:a2:f2:86:53:80:ce:07:
e6:ca:0a:c6:3d:80:2c:96:f2:0d:40:1a:0e:6a:c2:b2:b3:b5:
c9:7a:f5:4a:28:17:ee:2e:64:1c:a0:87:3d:fb:11:80:37:a9:
8f:6a:bb:78:ca:d5:2b:23:f5:12:1a:21:dd:16:9c:75:32:58:
06:ee:4e:b3:5b:61:73:83:55:5a:12:3c:d0:ed:4f:47:2b:29:
01:d1:35:de:89:9d:8e:ab:03:0f:76:99:6e:57:c6:7c:75:64:
70:2c:46:b8:40:1d:8a:e7:f7:b2:f0:fa:8c:91:80:06:72:2a:
53:de:b5:60:62:ea:c7:a6:21:30:61:6f:8c:10:21:4d:36:e1:
43:5d:0d:3e:8d:fb:ad:d2:1d:f0:42:41:7c:9c:37:0e:1a:e7:
db:a5:05:ff:8c:37:5a:9b:d9:01:69:cd:92:ba:c2:c6:31:17:
b0:df:b7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:19:15 2025 by rpki-client