Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
File: cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft (raw, json)
Hash identifier: ivQL0ZJiUOy+U+9TX7Wr0zSjXLWvJLDXPv0+C1EPNyU=
Subject key identifier: 5F:CD:70:BF:2B:34:50:38:3D:19:21:37:D1:A1:3A:72:B5:C3:54:AB
Authority key identifier: 72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6
Certificate issuer: /CN=726f9448a910d2574157a30403f46c1172aeedb6
Certificate serial: 0197BFA3C3AEC4FCB2EA288B0E15A163B31E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
Manifest number: 15B6
Signing time: Mon 30 Jun 2025 07:01:10 +0000
Manifest this update: Mon 30 Jun 2025 07:01:10 +0000
Manifest next update: Tue 01 Jul 2025 07:01:10 +0000
Files and hashes: 1: cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl (hash: NoKZNwRPQyLssKL9h50+ud3LA2jrzJYTiflCuixafPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:a3:c3:ae:c4:fc:b2:ea:28:8b:0e:15:a1:63:b3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726f9448a910d2574157a30403f46c1172aeedb6
Validity
Not Before: Jun 30 07:01:10 2025 GMT
Not After : Jul 1 07:01:10 2025 GMT
Subject: CN=5fcd70bf2b3450383d192137d1a13a72b5c354ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:f4:68:d8:8f:2d:f3:3c:e2:56:2a:e0:0f:
b6:59:6a:34:9b:84:ca:3c:dd:0c:67:18:7c:19:ee:
11:f2:47:c7:95:25:30:3c:cd:da:9c:72:6d:a1:ba:
f2:a8:47:84:1d:b1:95:cd:d6:62:ad:90:36:7e:67:
a0:79:43:e8:5f:9d:e6:ae:79:de:3f:04:ea:e6:c9:
b9:87:40:84:9c:c4:66:b8:05:99:f6:b6:a0:3e:bb:
3f:56:30:4e:fb:90:3c:e3:1a:af:91:7c:76:d0:a6:
72:35:22:b0:59:e4:01:af:3a:a4:b7:db:2c:ad:d6:
f1:f2:01:2b:b5:09:8b:4b:af:f5:7b:ba:04:8a:75:
b8:84:7b:55:0a:22:5d:10:84:e2:1e:f0:e0:b2:7a:
4a:ce:4c:32:b0:5e:43:43:de:e8:e9:e7:28:41:97:
10:4b:43:8b:e8:fa:2e:3c:21:2f:eb:1a:7c:81:eb:
e4:dc:d3:30:d9:e3:3e:7b:43:45:97:d9:34:4b:2e:
b5:b0:a0:69:5d:8e:53:e0:02:88:ef:c1:ef:03:79:
ee:77:1d:ce:55:77:e0:d2:8a:76:61:95:4c:1e:7e:
72:58:98:d9:97:dd:4d:47:e7:ea:b3:bd:26:b6:ba:
ed:b6:1b:50:a0:d4:18:86:4e:05:91:4b:21:83:41:
29:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CD:70:BF:2B:34:50:38:3D:19:21:37:D1:A1:3A:72:B5:C3:54:AB
X509v3 Authority Key Identifier:
keyid:72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:51:4d:4d:67:2e:d4:c7:cc:ef:00:82:06:d0:37:5b:ab:5a:
08:97:26:28:83:6f:c5:a8:fa:b7:43:04:ad:5e:63:ad:bb:79:
b0:ab:d7:ec:8e:b0:7f:ff:28:75:dc:f5:94:cf:46:1f:74:d1:
59:2f:03:fc:bc:ec:5a:7c:12:6a:e5:93:2c:da:c6:5b:c3:93:
38:ba:85:ea:51:c0:c8:99:51:48:08:0c:0a:7b:62:f8:38:bc:
52:d6:38:96:1e:69:cb:76:6b:95:2a:e9:e9:b2:36:51:e2:63:
22:dd:11:d1:01:33:91:cd:52:32:ec:01:8e:70:44:54:a2:f7:
8e:6d:db:8b:79:2e:09:2f:b3:9c:ba:4c:b0:d5:76:a5:b7:b3:
5d:97:9c:17:aa:3b:6e:db:0e:95:7e:e8:e4:8f:fb:bf:51:a3:
4f:94:39:40:52:ea:1a:14:a1:67:75:b5:68:12:f8:8d:d5:f9:
2f:5e:ea:e4:6a:b7:ee:f2:2d:0a:ab:57:ed:9c:90:be:e2:98:
ad:b6:09:ac:b4:12:18:20:ec:9c:88:6e:3b:c2:8f:37:ae:a9:
47:02:77:72:16:9c:a8:75:94:f0:a0:e1:08:8c:2e:2d:97:ea:
e0:c8:63:ac:7c:a6:a5:8a:37:db:90:db:c7:2d:c7:c0:98:ee:
ff:59:bf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:20:48 2025 by rpki-client