Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
File: EFkFws-IrzKqrL3Wcc08w6z_ktE.mft (raw, json)
Hash identifier: /OFOe949SugogsuCi6OVo356/WyDBMOJFq5rdb6yRvU=
Subject key identifier: B3:69:BE:8C:6D:B4:BA:2D:A6:5B:55:55:04:5F:AD:A6:AA:33:8B:FB
Authority key identifier: 10:59:05:C2:CF:88:AF:32:AA:AC:BD:D6:71:CD:3C:C3:AC:FF:92:D1
Certificate issuer: /CN=105905c2cf88af32aaacbdd671cd3cc3acff92d1
Certificate serial: 0197B77BF3A337E2D3918E96918D04427CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
Manifest number: 0522
Signing time: Sat 28 Jun 2025 17:00:43 +0000
Manifest this update: Sat 28 Jun 2025 17:00:43 +0000
Manifest next update: Sun 29 Jun 2025 17:00:43 +0000
Files and hashes: 1: EFkFws-IrzKqrL3Wcc08w6z_ktE.crl (hash: jffb8+YJ8OZAwnD0PSfW/BbW3+kAqRRTOgCtJ0MUTHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:f3:a3:37:e2:d3:91:8e:96:91:8d:04:42:7c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=105905c2cf88af32aaacbdd671cd3cc3acff92d1
Validity
Not Before: Jun 28 17:00:43 2025 GMT
Not After : Jun 29 17:00:43 2025 GMT
Subject: CN=b369be8c6db4ba2da65b5555045fada6aa338bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:69:54:27:3b:67:9b:6b:9b:f5:a5:ed:e6:7b:
42:cc:29:e1:4a:91:21:4c:33:38:99:1f:1d:d4:41:
f8:ae:32:61:c5:1c:6d:b0:1b:20:cf:de:70:68:93:
18:10:47:c1:fb:23:17:bc:90:6a:eb:78:4d:78:b1:
9b:17:27:ed:ed:53:92:7c:27:42:97:a2:ab:a6:e2:
c8:68:2f:a5:52:d3:9d:0f:4f:11:1c:61:9a:15:45:
b1:05:91:24:54:ac:22:19:36:e6:15:d2:e2:24:51:
bc:af:81:14:f5:ea:b6:30:62:63:0a:30:98:b2:56:
9f:1c:4b:d8:58:df:b7:74:37:ae:03:11:9c:80:a9:
60:31:d6:dd:96:73:b3:9a:74:10:71:8c:92:0a:e9:
12:92:c5:83:32:96:dc:b1:1a:f1:c1:1a:87:cf:8d:
08:2e:16:ac:76:c4:c5:b1:57:75:1d:f2:d7:24:61:
37:3f:e1:0d:52:04:3a:6e:27:52:0e:a1:a6:22:64:
83:3f:d1:e4:e1:aa:31:9b:fb:78:ec:b4:ad:2b:d0:
6a:f1:71:3d:d6:bb:b2:c6:67:83:76:80:aa:67:08:
cd:11:1b:de:2e:de:7b:2f:a5:a3:99:ba:de:6e:d7:
92:d6:c8:c3:12:1a:76:14:c3:fa:d4:65:db:cb:04:
37:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:69:BE:8C:6D:B4:BA:2D:A6:5B:55:55:04:5F:AD:A6:AA:33:8B:FB
X509v3 Authority Key Identifier:
keyid:10:59:05:C2:CF:88:AF:32:AA:AC:BD:D6:71:CD:3C:C3:AC:FF:92:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:73:79:23:fe:73:a8:80:33:5c:85:34:aa:d2:eb:d6:e7:bb:
e4:c4:fd:3f:05:70:19:6e:36:85:e7:78:b2:f3:fe:37:6a:66:
99:cd:74:ab:44:55:fe:35:09:00:d4:3f:e0:0b:6a:a1:29:08:
2c:b0:06:fa:34:8d:28:85:9e:b1:d6:c7:75:4a:5e:20:0e:d3:
5b:6c:5e:88:b7:79:cf:2d:56:37:e4:8d:99:ba:d6:87:a3:1a:
a1:e0:32:39:cf:d8:c1:76:9e:6d:67:1a:d7:d2:2d:41:7a:12:
b1:75:3a:bf:2e:0e:0d:88:9e:cf:b6:63:0f:0a:17:79:d2:24:
5c:14:2f:6c:84:c1:d7:86:a6:2d:7b:6f:3f:69:eb:b2:61:df:
48:f4:76:ca:e4:68:40:9f:55:94:c7:d3:cb:08:c7:ae:4a:7e:
de:3b:8a:9c:6a:06:7d:f1:87:18:b9:8b:2e:79:c4:ea:a1:73:
00:89:62:33:1d:47:c8:95:3b:aa:0b:9d:e3:68:9f:1f:2c:07:
57:98:a5:ed:a0:d4:bc:1a:b5:d4:20:0b:0c:93:85:11:64:eb:
06:e2:40:cc:37:f1:95:13:9b:8e:11:95:ae:05:b0:70:68:5c:
44:ed:78:e8:fb:5e:63:d5:0b:a7:64:1c:3b:41:e2:63:da:19:
4c:7a:f9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:51 2025 by rpki-client