Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
File: 65fOljUzDxRxFMZG72qTR9aJFjs.mft (raw, json)
Hash identifier: tEpCPPAAlZJPPgNk7GUonfraCJSjr074otCji4+Y+yw=
Subject key identifier: 92:0D:55:5C:D1:D5:2A:3F:B6:27:E3:AB:CE:E1:B3:E5:30:79:C0:C5
Authority key identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
Certificate issuer: /CN=eb97ce9635330f147114c646ef6a9347d689163b
Certificate serial: 0197B77C6D14803138D1980D1EE97B362DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
Manifest number: 1544
Signing time: Sat 28 Jun 2025 17:01:14 +0000
Manifest this update: Sat 28 Jun 2025 17:01:14 +0000
Manifest next update: Sun 29 Jun 2025 17:01:14 +0000
Files and hashes: 1: 65fOljUzDxRxFMZG72qTR9aJFjs.crl (hash: MiUryt3tKWjqDG2Ij1ZlUP8P3jvDCPNVrYPyHSinbEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:6d:14:80:31:38:d1:98:0d:1e:e9:7b:36:2d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb97ce9635330f147114c646ef6a9347d689163b
Validity
Not Before: Jun 28 17:01:14 2025 GMT
Not After : Jun 29 17:01:14 2025 GMT
Subject: CN=920d555cd1d52a3fb627e3abcee1b3e53079c0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3a:d3:98:70:dc:95:84:2a:89:b6:13:be:1d:
f8:b3:79:38:9f:e4:82:3e:d1:de:28:6d:99:18:f6:
e5:c0:d6:1a:fd:61:17:5a:f2:1c:e0:12:78:94:86:
a5:c3:86:99:c1:a6:d2:09:99:41:d5:1b:b1:4a:2c:
e5:39:bf:82:67:d0:cd:e2:08:c9:9b:8e:2b:8f:33:
75:6d:65:13:24:fa:db:50:61:78:1e:1b:5a:83:9e:
b7:7f:09:de:3e:20:93:b5:25:5f:96:ab:bc:95:cd:
14:bd:bf:a7:5a:f2:6d:30:be:da:16:43:03:1c:cd:
39:c7:f9:01:7c:53:da:61:8e:88:aa:c3:3e:81:86:
6c:13:9b:e8:10:a3:55:29:a4:a2:2b:de:47:bc:f0:
20:a1:31:77:d0:ec:b8:d7:e2:0a:61:e7:f6:cb:e3:
43:f2:26:d8:52:6a:5f:87:e2:62:b9:8d:4d:3c:10:
49:7b:a2:da:d4:97:7c:20:41:8c:a3:ae:22:f6:d9:
00:53:3f:0e:89:0c:2f:7f:79:f7:64:83:21:08:5e:
57:72:6a:52:05:aa:82:10:ad:9e:0c:4b:e4:00:31:
17:67:59:7e:2e:f6:a1:25:c9:d6:14:38:9e:46:e5:
55:fb:f2:ad:e1:94:00:f0:1b:06:7a:8f:3e:e0:7b:
a1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0D:55:5C:D1:D5:2A:3F:B6:27:E3:AB:CE:E1:B3:E5:30:79:C0:C5
X509v3 Authority Key Identifier:
keyid:EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b8:bb:d4:51:3a:83:da:e8:e2:a7:e6:e4:70:8f:b0:b0:07:
33:5c:da:5b:03:6e:93:e7:60:fb:ed:bf:3b:59:c2:c7:66:63:
c7:dd:d3:ca:c3:5e:75:f3:69:5b:10:db:0e:7e:ce:4e:43:fb:
de:60:82:66:ac:09:2c:45:80:4e:3d:23:95:de:ad:b3:84:56:
5b:12:4e:68:fc:9a:9b:15:04:a5:a7:c2:04:6b:1f:95:ca:40:
fd:c0:8c:8d:d3:5c:32:74:c7:c9:b9:25:24:1d:d8:48:60:cb:
91:9b:26:83:36:de:c3:55:1e:50:77:0b:15:ff:59:a4:03:98:
ed:94:79:df:9c:65:88:e8:40:a4:80:e5:bb:4d:58:b4:34:94:
41:fe:74:9c:d5:2f:37:d9:9e:58:20:4b:f6:17:25:c6:1f:e2:
73:2f:69:62:3e:52:a5:02:29:ae:67:f6:8a:fa:2e:70:8d:ac:
43:24:97:a1:8f:7a:02:7c:c2:a7:77:5a:cb:50:f1:e6:e6:92:
6e:06:86:34:c7:d6:a2:31:21:65:d8:b1:07:46:0c:ca:15:5f:
28:89:94:83:d2:fe:fa:dc:b3:10:9f:3f:ea:c6:37:b8:51:70:
02:7f:b9:90:a8:7a:48:4c:75:96:9a:d5:8e:3d:e6:69:77:a0:
90:45:cf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:52 2025 by rpki-client