Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
File: u7kUAX20Xp91443ePwNXzitx2Cc.mft (raw, json)
Hash identifier: YZ8Tjg56fSY1ZxvnyTmM/al7726UdV/XfFc69LPXblA=
Subject key identifier: 4E:6C:2D:D2:40:E1:5A:48:2D:C7:CA:A4:AD:F9:2C:CB:94:42:DB:97
Authority key identifier: BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27
Certificate issuer: /CN=bbb914017db45e9f75e38dde3f0357ce2b71d827
Certificate serial: 0197B6A0DD865C638826C54343A01011F7D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
Manifest number: 065F
Signing time: Sat 28 Jun 2025 13:01:25 +0000
Manifest this update: Sat 28 Jun 2025 13:01:25 +0000
Manifest next update: Sun 29 Jun 2025 13:01:25 +0000
Files and hashes: 1: u7kUAX20Xp91443ePwNXzitx2Cc.crl (hash: CYugPoEAqXeTWWZOKf8FvjToH+9kfSswwF7juADXb6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:dd:86:5c:63:88:26:c5:43:43:a0:10:11:f7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbb914017db45e9f75e38dde3f0357ce2b71d827
Validity
Not Before: Jun 28 13:01:25 2025 GMT
Not After : Jun 29 13:01:25 2025 GMT
Subject: CN=4e6c2dd240e15a482dc7caa4adf92ccb9442db97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:d9:d3:9e:18:7e:37:90:b6:02:7a:cb:c2:
78:cc:fe:a2:4c:c3:9f:7c:df:14:6c:51:4e:03:15:
d6:8b:91:70:af:67:e4:db:59:f2:d7:66:e3:5e:18:
63:b5:fb:ae:c1:37:50:3d:9e:b8:98:6e:bf:5e:43:
27:47:e7:ea:1e:53:46:13:7f:ca:80:c0:19:94:5c:
42:d7:8b:63:48:f4:ae:92:dd:14:72:1b:6f:9a:11:
93:1a:a8:3f:c4:35:28:8d:69:4b:2d:46:e8:0e:68:
ec:5d:56:62:87:61:1c:a4:8b:0d:91:b5:72:62:b0:
86:3f:53:52:0e:f3:7f:a7:39:4a:62:41:b5:ea:0f:
7a:3f:91:cf:ce:39:98:df:3d:dd:58:bc:d3:d3:50:
04:bf:43:6e:2b:89:a3:44:ca:05:8a:5e:b7:36:a4:
a0:07:6d:8a:95:42:3b:56:a4:14:7e:96:48:4c:8d:
4d:97:9c:ff:24:dc:7c:9b:53:5f:14:f8:fc:f4:fa:
44:75:39:c7:e5:91:04:e6:cd:97:30:c3:22:2b:a8:
0b:2e:c5:98:f2:2c:8c:c7:4f:75:ea:e4:2d:73:ff:
47:ae:cc:b8:0e:84:27:3c:c8:1c:9d:eb:0c:3b:88:
bb:09:2a:d2:36:02:3b:7d:25:d8:8a:16:c3:b6:5d:
7d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6C:2D:D2:40:E1:5A:48:2D:C7:CA:A4:AD:F9:2C:CB:94:42:DB:97
X509v3 Authority Key Identifier:
keyid:BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:4c:49:82:b2:f8:be:48:d3:65:e3:e1:16:fd:30:bb:32:bd:
0d:bd:14:bb:dd:79:bd:4e:3b:ff:92:b2:83:47:d7:9c:ee:88:
7b:b8:0f:94:44:5f:e5:a5:b8:91:45:b5:06:ac:c3:70:5d:f8:
aa:07:71:d2:95:75:42:e0:87:fb:66:ab:ab:a5:d0:05:3c:0f:
ce:e8:16:f0:9e:07:69:b2:fe:b4:f3:38:ee:54:c6:e4:0a:4c:
65:35:4c:86:eb:fe:d8:cb:c7:40:a0:e2:d5:83:f2:3d:fb:ab:
9b:3b:bb:ff:99:a2:b5:f1:25:48:d6:94:ee:c0:46:77:cf:3c:
c7:ca:9c:2f:dd:ad:e5:ad:4d:ef:c9:12:3b:49:ea:07:c4:e2:
70:f2:42:f4:75:20:77:dd:ea:00:38:b7:ee:d9:53:07:6e:21:
bf:61:02:52:2e:80:de:0c:83:6e:92:2a:45:b3:f3:43:c0:43:
25:b2:90:e7:5c:20:c1:e6:82:94:45:eb:a1:02:1a:b6:51:9a:
76:2c:e4:d6:a0:a0:ba:0d:2b:29:b1:87:e3:31:0d:f6:e9:16:
b4:8e:c3:1f:3f:5b:3a:87:bc:59:1d:92:fa:ae:7e:cc:08:83:
7a:5d:fe:67:ba:6a:1b:98:96:dd:47:6d:28:d3:70:77:2c:57:
97:a2:9f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:42:51 2025 by rpki-client