Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
File: rSzoJufkLt3WnfrTpZqbmqTigYM.mft (raw, json)
Hash identifier: wrXtcJ+N9wpkVgnnQf7kfiHWUojQCTRI7+K6wYMLKLI=
Subject key identifier: 0C:AE:F4:A9:17:43:92:E2:C4:87:CE:C7:C6:84:FE:D2:5A:C0:3E:3C
Authority key identifier: AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83
Certificate issuer: /CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
Certificate serial: 0197C349A55E6FA33ED95A20B9CD7284A8F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
Manifest number: 14B7
Signing time: Tue 01 Jul 2025 00:01:12 +0000
Manifest this update: Tue 01 Jul 2025 00:01:12 +0000
Manifest next update: Wed 02 Jul 2025 00:01:12 +0000
Files and hashes: 1: rSzoJufkLt3WnfrTpZqbmqTigYM.crl (hash: iq/CLvs1S1+nqnoYaoaRbGOXi8O1HcwUEiYNTef6hGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:49:a5:5e:6f:a3:3e:d9:5a:20:b9:cd:72:84:a8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
Validity
Not Before: Jul 1 00:01:12 2025 GMT
Not After : Jul 2 00:01:12 2025 GMT
Subject: CN=0caef4a9174392e2c487cec7c684fed25ac03e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:fb:00:38:8d:bf:de:29:5b:f2:43:a6:06:
b9:1a:8e:ec:81:bc:d9:2e:fa:93:93:26:ed:b7:bb:
cf:2d:d2:5b:94:91:81:28:89:d2:79:b3:9f:f2:d1:
ef:4d:5e:a6:52:4a:38:44:e6:39:00:e1:8d:c7:cf:
ec:a8:20:2b:e6:96:12:7e:51:5a:56:67:57:87:89:
32:ff:5e:5e:a6:8f:65:46:b1:ea:a6:1f:6f:28:07:
cd:85:51:08:66:5c:1c:1c:06:e0:f4:ad:b0:6e:4d:
97:11:67:6a:e0:5d:8e:66:30:7d:83:ca:bf:3e:6e:
18:91:3a:f2:7b:c2:8d:c1:c2:9f:e5:06:bb:02:51:
22:c1:3f:4f:e3:d3:9c:87:2d:e5:a0:c5:ac:4a:08:
46:8a:9b:1a:ec:79:21:d3:27:dd:74:e8:4a:13:1f:
95:9d:c0:e5:2a:97:18:40:e5:7a:68:a8:33:1e:fa:
4f:39:12:f5:b5:3a:5d:0a:34:86:78:58:e9:b5:3b:
93:9e:6f:76:e2:27:83:7f:bc:13:67:58:5f:64:47:
be:34:fe:c3:d7:1d:54:74:fb:ea:2e:94:72:d5:8b:
38:32:7f:22:d2:7e:47:33:97:39:09:c7:1f:18:27:
23:c0:82:41:49:7a:80:ac:c9:bb:4a:6d:93:70:a0:
e4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AE:F4:A9:17:43:92:E2:C4:87:CE:C7:C6:84:FE:D2:5A:C0:3E:3C
X509v3 Authority Key Identifier:
keyid:AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b0:61:d5:79:4f:34:39:b2:d4:de:5b:44:4e:05:46:9a:9c:
6d:80:e4:8e:2d:f3:ce:72:ac:f1:d2:77:3f:d6:7b:9a:59:dc:
d1:1d:78:16:63:52:8d:90:fb:7d:a4:d8:f0:43:de:77:07:09:
2a:cc:84:d7:98:f5:47:7c:5e:05:8a:f5:40:92:ed:15:ec:cb:
8c:3f:a5:45:d2:65:92:f4:7c:34:e2:39:49:ed:f3:4c:33:63:
cd:c9:52:c5:a3:a8:2e:d6:55:1c:f6:fa:63:a6:8d:5e:0f:27:
30:57:12:22:89:ae:3a:73:cf:80:cd:4f:4a:15:5b:69:6a:01:
b5:ac:11:f1:06:3c:db:3b:0d:01:54:50:f9:be:f5:e4:8e:47:
4f:83:90:69:0d:f3:af:5f:d4:0f:6b:d8:67:fc:a8:cb:e9:d3:
a4:a0:91:c7:a4:af:f5:5d:0a:9b:b5:1a:b9:77:43:4f:58:39:
50:52:55:49:6b:70:65:43:8e:c4:74:dd:b5:3f:6b:dd:49:bb:
84:f6:7f:d0:91:35:2c:13:a4:e2:a8:4b:69:dc:ae:e7:15:ec:
6d:63:06:28:cc:e0:e6:fc:fa:47:5a:ce:d5:6f:0c:b5:ba:5a:
8d:e5:48:fd:4a:c0:a1:21:0d:ba:4e:fe:89:d8:f0:b4:a2:c1:
17:ca:07:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:22:43 2025 by rpki-client