Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
File: dC44IKB42kewo3Ti06ZtYmPB4j8.mft (raw, json)
Hash identifier: eFlNZnDkVsEXa7KGK2Wze6iXq/WIIs/ZX9l21jjNo4Y=
Subject key identifier: 89:22:96:BA:58:B3:C0:C9:80:46:01:83:CE:41:79:3D:68:81:00:18
Authority key identifier: 74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
Certificate issuer: /CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Certificate serial: 0197B6A1EEE92BB2AAF9D3F48D1BD0D8A62A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
Manifest number: 0E85
Signing time: Sat 28 Jun 2025 13:02:35 +0000
Manifest this update: Sat 28 Jun 2025 13:02:35 +0000
Manifest next update: Sun 29 Jun 2025 13:02:35 +0000
Files and hashes: 1: dC44IKB42kewo3Ti06ZtYmPB4j8.crl (hash: 0FMloue+bUfbT+MHS8uPgWRbdHUBupvmwx3V6qML2ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ee:e9:2b:b2:aa:f9:d3:f4:8d:1b:d0:d8:a6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Validity
Not Before: Jun 28 13:02:35 2025 GMT
Not After : Jun 29 13:02:35 2025 GMT
Subject: CN=892296ba58b3c0c980460183ce41793d68810018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:ab:41:9c:61:19:e1:eb:cd:2c:d1:2a:ee:
23:d9:50:78:40:92:23:ff:24:92:1c:45:54:99:2b:
fa:f8:78:73:da:a8:5e:1c:a7:6a:08:95:af:b5:2c:
36:61:8c:d2:7b:4e:46:b0:ff:b6:7a:9c:a8:e0:20:
11:92:71:a6:11:a2:c0:2e:af:5a:9c:1f:00:11:3a:
71:5c:5a:4a:30:c2:ad:ad:6a:99:87:2b:7b:34:ea:
f3:6e:15:eb:a0:d9:49:3d:67:72:40:b1:2d:ec:ec:
48:b7:7d:7b:55:ad:18:05:a5:94:08:1e:c8:05:88:
46:49:f9:83:50:c3:48:20:b6:81:cf:99:b9:7d:c1:
3f:e3:0e:44:9f:07:8b:82:5a:09:11:a8:29:6a:3c:
8b:68:d1:cc:ec:07:b1:45:ae:5b:a6:a1:1a:ef:de:
39:2f:91:71:11:71:d4:a7:0a:ca:ac:c8:fe:fa:07:
72:a2:43:65:8c:1c:15:52:c0:c4:0a:51:9b:29:03:
73:e6:20:5d:01:35:b8:57:c5:62:84:95:8a:14:90:
d9:da:39:f2:a8:34:a7:ef:ef:52:eb:09:dd:f9:13:
1d:2c:59:0a:71:67:c5:ef:81:40:d4:ec:62:d6:99:
41:47:46:5d:69:81:f1:c8:9c:ab:3e:35:b3:c5:d0:
5c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:22:96:BA:58:B3:C0:C9:80:46:01:83:CE:41:79:3D:68:81:00:18
X509v3 Authority Key Identifier:
keyid:74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d5:3c:76:77:c9:1a:ef:8a:4d:aa:85:2d:9e:e8:ee:d3:9b:
75:bb:a5:6e:8e:a1:a5:74:d5:aa:0b:95:e5:40:73:25:c9:14:
ac:83:67:67:91:2e:99:be:d0:c6:b8:84:92:74:d4:e1:fc:48:
0c:c4:07:2f:67:fe:f2:b4:d5:98:7e:7d:3c:17:87:d8:ab:58:
09:a1:f2:8e:af:55:e8:a2:23:a0:08:a2:fd:3d:c9:a3:41:91:
04:89:9e:b2:92:2b:9a:07:4c:f3:54:21:e8:ca:75:bb:5c:9e:
ea:c7:66:0d:39:62:98:49:32:87:86:5f:9a:73:af:d2:9c:83:
7c:46:da:b4:35:ca:01:1e:4d:46:26:ed:48:2a:5b:0b:5d:fe:
99:00:d0:1e:d7:9b:1f:12:1f:80:96:c5:b2:f0:c7:a5:f6:33:
cc:9c:4d:96:6a:26:3d:84:18:e1:1e:69:ce:4b:91:84:c4:e1:
33:91:b1:ae:4b:d7:1f:34:11:69:2c:f5:59:6f:03:60:8d:dc:
9b:44:c0:34:2b:7f:5d:04:40:5f:c7:0c:51:ee:31:33:18:a1:
eb:b2:86:8c:85:2f:77:80:b5:bb:08:4a:62:1e:63:bd:28:41:
23:c7:9d:52:ed:8f:84:14:b1:18:eb:7f:df:b1:4c:b7:55:5d:
e6:32:c7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:48 2025 by rpki-client