Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
File: eRmmrv08qPUPyPNKs9FHklbbnXg.mft (raw, json)
Hash identifier: nOueDvbwHAcyBhdB2NN6C7NhO+mpewZUpgfjT6l94E4=
Subject key identifier: 93:FF:D8:97:24:42:22:DD:94:CC:2B:AD:0D:5E:64:81:21:E5:31:C6
Authority key identifier: 79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
Certificate issuer: /CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Certificate serial: 0197B88EB33B47ECC2B43DD64FD145F04249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
Manifest number: 1544
Signing time: Sat 28 Jun 2025 22:00:49 +0000
Manifest this update: Sat 28 Jun 2025 22:00:49 +0000
Manifest next update: Sun 29 Jun 2025 22:00:49 +0000
Files and hashes: 1: eRmmrv08qPUPyPNKs9FHklbbnXg.crl (hash: vQm3LCXNtQIdQbN8aS5kQFbrRyjk4f32dbMpLyzEzRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:b3:3b:47:ec:c2:b4:3d:d6:4f:d1:45:f0:42:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Validity
Not Before: Jun 28 22:00:49 2025 GMT
Not After : Jun 29 22:00:49 2025 GMT
Subject: CN=93ffd897244222dd94cc2bad0d5e648121e531c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:0e:e3:74:51:ba:ba:c9:b1:0d:ad:cb:2d:
e0:fc:0a:8f:b7:67:db:7a:b4:99:c9:a5:e7:bc:71:
59:a2:55:0e:91:c4:99:c6:6b:e6:5f:d2:c3:3f:8e:
72:3c:92:31:5b:a5:68:7c:6f:e2:fb:4a:05:94:b6:
5c:62:15:15:85:ea:79:64:a0:91:69:da:fe:62:5c:
93:28:9a:bf:41:10:50:ab:4c:84:c4:28:59:36:bb:
27:d3:13:3b:2c:02:9f:60:bc:2a:8d:73:b9:d4:10:
75:43:5b:30:77:4c:cc:ed:14:25:b4:3e:e1:3b:86:
02:ce:98:30:33:5e:95:5f:eb:71:00:ff:39:92:da:
22:1f:14:82:dc:bf:02:fb:7d:49:b8:f7:88:0f:cc:
60:45:82:d6:e5:de:28:51:8c:fc:6b:37:1a:a2:5d:
80:ac:af:74:e6:e2:cb:b0:0f:29:7f:22:bc:6a:e5:
e0:d9:91:10:70:5e:aa:41:38:8b:81:6e:c5:6c:11:
72:ce:14:a3:90:d8:24:87:bb:34:31:b0:1e:53:bf:
63:ec:a6:b6:7e:cb:d8:cc:84:06:d9:63:66:76:bb:
02:b1:e7:6d:dc:8b:93:a7:5d:f1:c1:e2:ae:9f:19:
a0:8c:70:6c:2c:f6:e6:e7:80:80:37:ae:7b:db:43:
61:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FF:D8:97:24:42:22:DD:94:CC:2B:AD:0D:5E:64:81:21:E5:31:C6
X509v3 Authority Key Identifier:
keyid:79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:67:37:60:40:17:17:47:d6:06:f4:38:4e:6f:c8:cb:55:33:
68:89:73:2c:93:98:93:ff:fa:3c:02:3c:30:9e:eb:4b:71:79:
de:94:a0:91:f3:c1:a9:f9:2c:95:a4:85:8b:84:11:5b:ef:58:
5a:40:1f:18:9f:6f:44:8f:a3:3e:e5:89:ff:56:a8:87:8b:84:
3e:52:b7:60:fa:29:b3:32:7d:1b:c8:ec:92:0d:d5:60:e3:c9:
85:d8:41:40:e6:52:27:6d:48:24:ab:f2:6e:f2:91:d0:3a:b9:
e0:a1:64:71:29:80:f1:b6:a3:cf:a7:70:db:5e:9c:37:67:a1:
da:19:4b:0c:43:08:ec:8a:70:ec:b8:8a:b8:43:5b:f1:63:f4:
cf:38:d3:fa:6a:04:93:ab:4b:95:6a:76:86:e2:08:6f:1e:19:
c0:ba:f5:c8:ee:40:2d:0e:6a:7e:2f:f5:57:6e:b2:f3:4e:f4:
d6:8b:2f:62:94:aa:e1:ef:79:2b:d2:e6:32:ad:d5:6c:62:7c:
bf:37:da:8f:62:c8:dc:7c:7f:25:75:4e:bc:9b:fe:8a:7b:57:
ab:7d:be:d6:20:d6:6f:64:ab:0a:57:3c:e1:ab:8e:83:c5:56:
50:a4:24:4a:08:8b:5d:cf:5b:18:27:1c:57:f5:50:e1:bf:19:
28:1f:c7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:29 2025 by rpki-client