Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
File: cMySQTZlvWsN3lGpprVl5ywyHlI.mft (raw, json)
Hash identifier: WF/JbiDctMt/7IVPdD1D+hhdpd0lzzT3cNLV6Hc4re0=
Subject key identifier: EB:A8:5C:77:10:4B:7D:F7:43:32:39:CB:79:55:ED:80:16:D7:06:AB
Authority key identifier: 70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
Certificate issuer: /CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Certificate serial: 0197D1AB3224AB2159ED5BD471124A8A3737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
Manifest number: 069F
Signing time: Thu 03 Jul 2025 19:02:26 +0000
Manifest this update: Thu 03 Jul 2025 19:02:26 +0000
Manifest next update: Fri 04 Jul 2025 19:02:26 +0000
Files and hashes: 1: cMySQTZlvWsN3lGpprVl5ywyHlI.crl (hash: vU/1c1Uqo+zSTGFe4GKgBTFCpJOdkdv4B3XcMJob9HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:ab:32:24:ab:21:59:ed:5b:d4:71:12:4a:8a:37:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Validity
Not Before: Jul 3 19:02:26 2025 GMT
Not After : Jul 4 19:02:26 2025 GMT
Subject: CN=eba85c77104b7df7433239cb7955ed8016d706ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ed:e8:ff:ae:a3:34:87:66:43:64:35:e8:c4:
5a:a9:e6:35:32:1a:ef:77:7f:23:0f:20:96:5f:b5:
4c:12:b4:91:97:bb:0d:c6:40:45:22:85:42:26:00:
3f:89:48:ad:3c:39:da:ba:20:90:d1:93:87:4b:29:
70:d1:46:98:c7:76:9f:ec:84:2e:e6:2e:ce:9c:da:
0d:0f:41:a5:0e:18:9a:a0:6e:a9:0e:04:dd:63:4c:
17:89:68:bb:0b:ef:7b:5e:34:52:52:fa:f8:95:e3:
3d:42:b3:37:81:e1:fc:5e:e8:4f:80:ae:f9:98:d3:
da:c7:40:75:17:e8:8a:40:11:7f:b5:16:88:88:35:
bc:12:ce:19:32:04:e9:95:ea:af:16:0b:c5:10:f2:
4f:8f:03:ae:d3:aa:6d:64:1f:5d:e7:46:63:85:b5:
6a:35:4e:91:05:1c:d0:90:cb:f4:11:a5:ee:19:7e:
fd:49:76:c1:af:62:75:7f:87:0d:19:de:af:68:a6:
d8:8b:67:bd:a8:72:ca:78:6e:e3:49:f2:f3:d3:f0:
0f:5c:7b:21:14:a7:1d:37:78:3f:d8:a8:b5:fb:4c:
4a:38:34:bf:55:89:dc:7f:85:d1:34:cf:fa:c2:08:
f9:98:e1:4f:df:b7:67:3a:74:32:b2:1e:ac:a3:03:
c3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A8:5C:77:10:4B:7D:F7:43:32:39:CB:79:55:ED:80:16:D7:06:AB
X509v3 Authority Key Identifier:
keyid:70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d2:16:ba:e9:84:1d:34:c8:a3:58:9e:94:79:a8:54:bf:f0:
ac:ff:ac:c0:57:9e:17:22:36:18:ff:9d:29:18:ed:d6:60:4c:
16:ad:18:a0:99:6c:5c:54:15:42:9c:51:57:6f:bf:0e:5b:83:
94:63:0a:89:00:4e:7d:a0:59:c5:a2:89:67:9b:f3:f0:89:00:
6b:3f:e1:5c:98:b7:c7:e9:a0:d3:b1:26:41:6a:0d:79:3a:09:
59:fa:4d:0f:ea:a9:c4:d6:b7:0f:be:1c:29:6d:37:27:9c:e8:
62:fc:d3:0b:b7:f9:8c:23:28:36:b1:97:3e:d2:0b:d4:ee:33:
19:bd:ca:0d:97:31:36:db:da:07:4d:b9:35:7d:6b:e1:72:d3:
7c:cc:1e:81:32:be:dc:3a:7c:b4:85:57:3a:bc:0e:e5:40:df:
d6:04:8d:05:d7:e1:45:e7:0c:8c:dd:12:08:c8:7e:3b:08:09:
64:d0:12:e0:79:cf:cd:b1:95:aa:93:30:80:1a:cf:fe:49:3d:
75:4d:3c:01:87:16:75:f9:aa:be:1e:12:18:49:52:a2:a1:72:
da:02:ca:1d:0c:e0:f9:82:e0:ab:19:95:09:86:24:2e:60:a6:
85:ed:e7:c5:0d:91:41:e1:35:c7:f0:7b:39:2f:f3:fc:e6:5c:
ab:89:0b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:54:16 2025 by rpki-client