Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
File: eP0LaXd70F3N_JiULu3vuwaBKC8.mft (raw, json)
Hash identifier: 9KJ3edEv8rUkM9tx/oeuEUxTaM2h12/pQl7ZNTd15eY=
Subject key identifier: 3C:60:30:26:49:CF:55:14:E2:97:82:25:68:D6:7B:ED:21:41:A3:33
Authority key identifier: 78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F
Certificate issuer: /CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
Certificate serial: 0197B7EAC3429A98494FE191EF373C8ADB28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
Manifest number: 0D43
Signing time: Sat 28 Jun 2025 19:01:44 +0000
Manifest this update: Sat 28 Jun 2025 19:01:44 +0000
Manifest next update: Sun 29 Jun 2025 19:01:44 +0000
Files and hashes: 1: eP0LaXd70F3N_JiULu3vuwaBKC8.crl (hash: Yk+9bbFYw7UOzV8EXBKBuDr+CfcLMq+LAVElrAg6RNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:c3:42:9a:98:49:4f:e1:91:ef:37:3c:8a:db:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
Validity
Not Before: Jun 28 19:01:44 2025 GMT
Not After : Jun 29 19:01:44 2025 GMT
Subject: CN=3c60302649cf5514e297822568d67bed2141a333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:fc:6e:fb:bc:37:11:e5:fb:0c:66:43:0b:
83:c1:a4:bd:b1:d8:e4:c1:3a:d2:77:1a:5a:b2:5f:
b8:86:53:72:81:f5:da:6a:ec:a2:a9:5e:4d:a6:5c:
40:f3:9e:95:e3:88:fc:b9:1e:c1:5b:e7:c9:3b:69:
ae:cb:f7:68:96:45:c8:3f:55:fe:75:8b:c7:16:82:
e5:e3:b5:0d:3f:72:2e:47:c2:f4:9a:41:67:e1:b5:
dd:dd:ae:7e:55:60:e0:87:63:50:dd:3d:f5:13:42:
63:23:e0:75:86:09:6c:af:9d:4c:76:95:ec:0b:fd:
cb:a4:b4:e5:2b:73:8a:93:5c:78:35:85:c3:05:45:
06:6c:5c:e7:12:21:f5:65:fb:9f:96:33:c2:56:ee:
bb:74:82:dd:c6:66:0a:4b:8f:99:c0:79:ca:a2:78:
e9:7a:c8:00:90:1d:5b:31:bb:e4:bf:49:06:a4:ad:
76:aa:f7:53:5c:4e:4a:89:23:a8:de:3e:67:51:9b:
69:9c:56:00:19:98:c0:fb:e1:b5:5e:bd:76:61:c1:
8e:b8:16:5d:13:a2:bd:12:7a:1e:79:f7:b4:eb:70:
a4:a5:d3:34:66:14:18:27:d6:ed:17:f7:c8:68:9e:
19:83:f9:0e:e2:99:48:72:78:02:1e:7d:d2:d6:7a:
b2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:60:30:26:49:CF:55:14:E2:97:82:25:68:D6:7B:ED:21:41:A3:33
X509v3 Authority Key Identifier:
keyid:78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ba:f4:c5:cd:c6:7c:e0:15:75:d3:00:8c:67:57:62:dd:31:
82:fc:5a:f7:a0:53:23:cd:89:73:9d:bd:a1:cd:5f:9b:80:6e:
de:1e:1e:93:ea:d5:ed:2f:94:65:0d:55:1a:26:9b:31:18:4e:
69:02:fa:4c:a0:b4:17:f5:38:8b:9c:0e:85:f8:0e:e6:df:72:
14:bf:35:89:ea:50:31:f5:43:41:d1:37:e3:0e:26:b5:af:49:
a5:a0:57:7d:f2:3d:d0:f5:04:07:ec:df:14:64:6d:4b:9c:0a:
14:52:d6:13:5a:53:dd:94:9a:5e:0d:fd:de:55:31:40:58:dc:
29:d6:0a:d8:c2:00:ed:c9:f7:e1:cb:d0:5b:d4:fe:08:dc:45:
f8:e0:01:d4:6b:2d:a4:ea:07:18:7d:83:15:fe:d4:12:a7:64:
5e:a7:d0:b4:4e:cf:7e:65:16:04:8b:26:b0:b7:f2:a6:fd:24:
33:f1:29:7d:18:df:8d:55:7b:d2:ec:d6:62:0a:db:56:74:a7:
98:39:d2:09:a9:c1:02:68:47:8e:3a:d5:79:d0:2c:02:b1:47:
7a:b5:58:ff:03:47:53:d5:2a:52:48:1e:2f:4e:5b:7c:e4:a5:
81:24:cd:d2:b5:bb:92:72:f9:76:a6:6b:92:46:60:f3:98:f1:
48:a5:4c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:09 2025 by rpki-client