Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
File: 0ur89N6SC5zmRdbmlt8IqosFUZs.mft (raw, json)
Hash identifier: hxQwvqss++ZlvOkPsrp5/+rCP/j+Sw4EtbrQtydb02k=
Subject key identifier: BB:58:18:84:75:CE:E2:75:C8:A3:EA:79:0A:47:EA:B0:EB:E1:77:AF
Authority key identifier: D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
Certificate issuer: /CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Certificate serial: 0197B58DC1099D943A04B953C1308BE63C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
Manifest number: 12B6
Signing time: Sat 28 Jun 2025 08:00:55 +0000
Manifest this update: Sat 28 Jun 2025 08:00:55 +0000
Manifest next update: Sun 29 Jun 2025 08:00:55 +0000
Files and hashes: 1: 0ur89N6SC5zmRdbmlt8IqosFUZs.crl (hash: +wGLj25D2j14XpL7Y9SYgR9llGrE1XpigCp4vPrdEtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:8d:c1:09:9d:94:3a:04:b9:53:c1:30:8b:e6:3c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Validity
Not Before: Jun 28 08:00:55 2025 GMT
Not After : Jun 29 08:00:55 2025 GMT
Subject: CN=bb58188475cee275c8a3ea790a47eab0ebe177af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:6c:67:c0:93:fa:9f:9c:16:3a:21:a8:2a:
e2:20:9a:b4:7e:d9:d1:57:33:e8:8b:27:a3:a8:09:
b4:6e:c2:dc:cd:82:07:f1:d6:3f:3b:cb:54:08:73:
ee:5d:53:1f:03:b9:ff:df:7a:81:c3:96:6a:29:6a:
1b:d9:2b:0a:3a:5d:91:3e:48:49:f1:e4:87:b5:88:
bd:fb:f4:1a:f5:fb:05:e9:34:43:71:ed:b6:19:41:
fd:12:1c:b0:cc:d4:5f:cd:b0:c1:f4:8a:2d:b8:05:
3b:e5:58:3b:00:fe:23:ab:71:51:64:3d:07:5a:fa:
b5:b2:39:34:1d:b3:c2:e3:16:5d:96:51:04:7c:45:
c9:1e:36:10:6b:fd:12:11:06:6f:ce:43:ae:e1:bb:
b1:81:ee:85:20:e4:2c:01:2e:da:2d:9c:8a:8a:67:
0c:22:b3:42:75:d2:ab:05:85:e6:f5:4d:13:72:23:
ec:c2:44:b2:1f:64:d8:4e:c8:af:8a:90:a0:db:e0:
3f:db:85:eb:84:e6:4f:d8:0b:cc:76:31:6c:77:03:
15:39:bf:01:46:5c:ac:47:74:9b:f6:39:a6:2d:e1:
09:07:56:4a:da:d1:7f:87:bd:ae:80:b3:4a:0b:3e:
6d:63:00:9b:a1:46:3d:86:a3:3c:e8:e1:87:04:32:
dd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:58:18:84:75:CE:E2:75:C8:A3:EA:79:0A:47:EA:B0:EB:E1:77:AF
X509v3 Authority Key Identifier:
keyid:D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8e:f7:c5:74:7a:9c:80:e1:c4:2c:c0:59:03:d1:a5:e8:d1:
c5:2e:ca:e1:fd:3e:2a:bc:16:5e:36:88:65:13:d2:10:b5:a9:
c7:52:ef:da:73:be:ab:ce:48:9d:d8:ba:aa:05:48:33:a4:e9:
d7:09:42:bb:6b:3d:2e:6c:39:b8:52:4d:99:6f:3d:a7:ad:32:
21:39:52:79:da:75:8c:a9:bf:5c:53:6f:11:b3:f7:30:cc:a7:
54:31:32:f4:e6:c9:75:73:b9:cd:f6:55:b0:72:e5:aa:b4:67:
c4:98:b2:25:90:b5:4a:be:8f:0e:db:dc:0e:7b:50:85:0e:7b:
11:6f:32:09:b2:4a:46:ad:cf:96:d8:a1:cd:ea:1d:ac:89:68:
17:56:3a:b3:d4:97:4b:7e:9f:8a:2a:61:28:cf:49:31:44:1a:
2b:de:ea:a7:be:7d:b1:54:b4:da:c0:c7:cd:19:6a:d6:ab:87:
42:84:94:89:e5:a5:7c:b1:4a:d7:fb:05:e9:d4:b0:79:28:d6:
5f:e8:55:e8:75:d6:b4:63:7f:fc:2c:b7:7f:39:41:28:39:8a:
bc:10:2d:d5:2a:c7:b7:31:ca:89:45:6c:2b:fb:31:d1:7b:85:
12:b3:ae:8e:60:14:9d:86:05:fd:14:a1:78:a1:07:5d:47:9b:
d1:be:9f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:53 2025 by rpki-client