Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
File: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft (raw, json)
Hash identifier: v+4y/qv9/kZwJOkXP+b7x62VFVnLW8Bgus6AGi/RcWo=
Subject key identifier: C4:44:C3:6F:83:63:66:8C:49:97:12:08:42:3F:17:86:52:C5:0B:07
Authority key identifier: D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D
Certificate issuer: /CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
Certificate serial: 0197B70EE02A46AF44413E3F6AE52F742DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
Manifest number: 02CD
Signing time: Sat 28 Jun 2025 15:01:34 +0000
Manifest this update: Sat 28 Jun 2025 15:01:34 +0000
Manifest next update: Sun 29 Jun 2025 15:01:34 +0000
Files and hashes: 1: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl (hash: 3bmhzF79vnOJlwJ06lKzyLfcMYb2Max9ykaFKNoy/i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e0:2a:46:af:44:41:3e:3f:6a:e5:2f:74:2d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
Validity
Not Before: Jun 28 15:01:34 2025 GMT
Not After : Jun 29 15:01:34 2025 GMT
Subject: CN=c444c36f8363668c49971208423f178652c50b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:57:7c:ea:bb:80:70:90:61:ad:74:e0:48:
f1:bf:a1:ec:a3:0b:86:1e:75:d7:61:f4:87:91:5f:
67:ab:d6:4a:07:36:4e:d8:84:17:9e:dc:33:ae:c9:
ee:d0:ab:3c:5c:a4:72:f9:ff:41:0a:07:77:97:6d:
4a:2e:59:95:dc:4d:0b:53:91:02:8d:b7:99:83:5d:
1a:c5:ce:8c:56:19:92:4a:4f:d2:50:f0:c5:f8:fc:
91:5f:6f:7d:ab:3e:7b:0b:9f:8c:78:08:55:61:1c:
b5:1c:cc:be:51:14:be:c5:ec:00:c7:56:e7:62:8c:
77:7d:6e:01:04:36:46:7a:b3:d2:25:a5:c9:32:17:
0e:e4:d2:b7:43:f6:2f:35:9c:d2:9a:62:8a:18:2a:
88:b0:24:8c:d6:55:3c:1f:02:1a:ef:26:cf:1f:96:
91:e6:10:30:34:24:78:0c:6f:20:77:df:7a:f6:f6:
61:4a:f8:cd:fe:b3:dc:e1:81:d7:9d:31:3f:98:5a:
76:26:35:e7:fb:87:18:54:11:fa:d4:fc:69:52:35:
c2:33:29:1f:5a:d0:8a:61:f6:0e:1f:e5:3e:b2:0c:
b7:f2:39:58:e2:b6:44:46:09:99:48:65:7e:10:a1:
76:1a:47:08:3b:50:49:d0:75:d8:72:f0:20:16:34:
22:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:44:C3:6F:83:63:66:8C:49:97:12:08:42:3F:17:86:52:C5:0B:07
X509v3 Authority Key Identifier:
keyid:D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e0:98:7d:2c:ca:44:11:e9:5b:b9:11:d4:15:d4:db:e1:fd:
aa:b0:a3:f8:59:4c:72:d3:ba:3c:a5:5e:26:bc:01:68:41:48:
5e:21:19:20:fd:d3:3f:36:2c:26:83:49:da:8a:7e:b2:17:62:
e5:99:6b:80:f2:79:80:0c:44:8d:47:66:fc:3f:95:c4:7d:c9:
36:7f:28:8e:38:be:ac:a7:b9:a0:7e:a3:47:18:90:7b:8f:61:
a6:eb:c0:75:fe:08:22:fb:e9:8a:8d:6c:3d:3e:c6:8c:45:11:
ba:06:70:79:b0:83:a4:09:16:19:86:01:5a:bb:fe:05:b1:89:
3e:90:59:17:33:98:33:7d:ac:cb:a5:66:f3:f7:1a:8a:c7:dc:
f3:3e:b0:57:05:bb:9c:32:68:9c:41:56:b5:aa:94:b5:e0:68:
b9:ae:b5:c5:16:fc:d4:86:a7:be:03:dd:48:89:a6:8b:45:e1:
fc:8c:69:96:fc:1b:dc:c4:d5:56:91:55:47:91:2c:84:d9:a9:
16:90:70:95:f4:d5:f0:ee:26:80:21:bc:c4:d5:94:ec:25:ca:
4c:47:92:fc:43:d8:3c:1e:af:7c:97:bf:96:b5:03:bf:2e:e3:
cc:9d:6d:9d:1b:c8:29:c1:75:26:9d:ff:f1:43:59:de:69:6c:
d7:d4:70:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:59 2025 by rpki-client