Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
File: cdV4WLGdypZzvB9nIZ71Ab873Oo.mft (raw, json)
Hash identifier: 8Wz7hGYY7kXWMa+KkEq22TU+vjrKtDKbs6UtIbZABYs=
Subject key identifier: 89:70:58:CC:5B:7D:31:A1:A2:61:F3:66:4C:3D:22:A8:9A:3C:9B:1A
Authority key identifier: 71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
Certificate issuer: /CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Certificate serial: 0197C048F252ABD3EDEC2549B0C2B482D412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
Manifest number: 0498
Signing time: Mon 30 Jun 2025 10:01:35 +0000
Manifest this update: Mon 30 Jun 2025 10:01:35 +0000
Manifest next update: Tue 01 Jul 2025 10:01:35 +0000
Files and hashes: 1: cdV4WLGdypZzvB9nIZ71Ab873Oo.crl (hash: MW51q1eiYMkJD3gqlDcesUd1Al0cs/7OwWujI1kwK2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:48:f2:52:ab:d3:ed:ec:25:49:b0:c2:b4:82:d4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Validity
Not Before: Jun 30 10:01:35 2025 GMT
Not After : Jul 1 10:01:35 2025 GMT
Subject: CN=897058cc5b7d31a1a261f3664c3d22a89a3c9b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:f7:cb:a8:d4:e8:a8:e4:7e:90:fb:52:11:
c8:f9:8d:a8:1f:dc:91:89:18:cc:51:55:d1:9a:6a:
1c:53:4c:cd:3b:78:93:65:5d:9a:b1:42:3a:51:97:
35:08:87:0a:a1:90:c1:e8:67:11:94:b1:68:65:df:
80:13:e2:da:b8:9f:fc:37:44:f7:9a:d2:a3:8b:4c:
51:5d:ee:d4:5c:3e:9e:1a:7b:a5:bd:9e:06:2c:4d:
2c:c1:c7:58:6c:50:1c:31:69:6b:70:91:da:69:5a:
6f:7f:aa:5b:ac:7b:f5:3c:1d:64:89:93:4b:33:df:
cc:9f:25:74:fe:f6:f3:19:31:69:f5:5c:1f:33:2b:
9b:ff:b9:54:63:94:04:1f:34:f7:f9:81:41:55:25:
94:5a:1e:1f:e6:41:12:95:bd:0d:7a:a8:94:c1:17:
58:ca:01:bc:63:74:fd:b6:cf:4b:c0:af:f3:9b:18:
6a:1d:57:97:07:6f:19:97:a5:9e:60:a5:9d:35:e8:
64:39:8c:b7:5d:39:c0:5b:e7:58:de:fd:1b:f5:2f:
d0:7e:6a:61:74:0a:8d:e8:3c:c1:7f:e7:91:9f:53:
28:61:32:61:eb:fa:b9:26:4f:48:c2:18:a2:cb:5b:
26:db:2b:b6:7e:4b:a3:23:02:e0:e9:b7:06:63:24:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:70:58:CC:5B:7D:31:A1:A2:61:F3:66:4C:3D:22:A8:9A:3C:9B:1A
X509v3 Authority Key Identifier:
keyid:71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e0:61:f5:29:10:c1:f4:41:f8:51:a6:dc:b0:0c:75:30:3c:
1d:44:ea:31:66:90:bb:5c:f9:c2:dc:98:18:1d:3e:09:a3:71:
3e:83:a7:13:99:c6:5c:d2:a5:b7:8a:f1:32:e4:e2:be:79:94:
1d:4a:2a:e5:97:ec:c9:2f:eb:a6:7e:d3:b0:67:98:a4:90:ad:
0d:bc:ad:5b:75:d9:0c:2f:59:f0:30:96:6f:d6:22:67:9b:e3:
df:46:80:4c:9f:dc:79:80:f7:68:dc:bb:38:32:91:39:2c:fb:
c5:d1:28:05:f9:df:0c:6c:c2:54:8b:10:9d:52:b4:e7:07:2a:
72:5a:11:ac:62:c5:8e:09:e6:2c:e1:7b:0d:df:ef:ed:03:18:
eb:b8:50:81:44:42:6e:88:e2:37:ec:71:cd:73:4f:0c:92:04:
73:78:39:60:d3:25:3b:5f:e5:7f:a7:a9:54:3c:ac:c4:2a:61:
3b:ac:32:8d:07:65:cf:9e:b1:24:5d:56:34:2b:63:88:ba:ac:
20:9f:b0:39:08:2b:3c:76:79:eb:3b:d1:13:ee:5d:06:68:49:
91:00:c8:15:dd:05:9c:b4:2d:a5:f7:12:64:7c:1f:94:64:e8:
da:83:06:2f:ec:c1:dc:12:3b:ea:85:3d:6d:3f:fe:23:7d:95:
dd:1c:79:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:22:49 2025 by rpki-client