Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
File: r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft (raw, json)
Hash identifier: fh/kWVRzRQhwRvFaPceB71FneV2udQ19wjFQQeJq+4w=
Subject key identifier: C1:A1:C9:2D:FD:EE:3B:91:59:C7:4E:85:0C:BD:7D:79:77:78:EA:AF
Authority key identifier: AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
Certificate issuer: /CN=af542dad0baede4a8b1150f459a03f011cdba654
Certificate serial: 0197C1924D30E59D3647D423A052A38034B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
Manifest number: 0260
Signing time: Mon 30 Jun 2025 16:01:19 +0000
Manifest this update: Mon 30 Jun 2025 16:01:19 +0000
Manifest next update: Tue 01 Jul 2025 16:01:19 +0000
Files and hashes: 1: r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl (hash: OEaWUuVIcKwJaWEql2dv3tsCZlADz4X8FVWkzXNXeHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:92:4d:30:e5:9d:36:47:d4:23:a0:52:a3:80:34:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af542dad0baede4a8b1150f459a03f011cdba654
Validity
Not Before: Jun 30 16:01:19 2025 GMT
Not After : Jul 1 16:01:19 2025 GMT
Subject: CN=c1a1c92dfdee3b9159c74e850cbd7d797778eaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:be:1b:b5:ad:93:03:3f:c9:59:d2:68:23:b8:
c3:40:16:e6:1d:ce:78:57:5f:51:1b:70:49:6c:b9:
a0:68:16:07:67:a7:22:88:ab:ec:8c:50:74:96:25:
4a:a0:f8:cc:05:1b:c6:ae:2a:27:42:9a:54:a4:22:
07:9d:6b:a3:a3:6c:f3:6f:ce:88:02:7e:45:cd:86:
40:33:70:46:08:75:c9:62:e6:61:da:04:2e:1a:b1:
ef:30:76:15:da:49:6a:3d:69:f9:c3:47:7e:52:5d:
64:59:69:6b:04:1d:7f:4f:1b:e4:cc:f9:e1:17:6d:
73:88:43:18:39:45:d1:6c:17:cd:07:d3:b8:03:bf:
04:15:9c:f6:30:0b:04:40:99:91:d8:7f:b3:fc:da:
ef:5d:50:7c:44:16:94:8f:40:d8:03:47:d5:2e:de:
7e:e6:d1:3d:0c:9e:54:2a:cd:82:6b:61:ae:f7:d1:
66:98:53:69:d5:d8:42:cc:ab:eb:49:0f:37:d8:fc:
7e:25:d1:aa:e3:2d:89:02:85:cd:c1:da:0f:9b:a7:
f7:38:3c:8c:e2:62:e9:09:f5:f0:28:f0:e1:6f:26:
e0:dc:28:c4:52:a5:29:65:6d:ae:6b:9a:79:98:71:
2d:ea:45:4a:b2:83:65:e1:fb:57:fd:a2:b6:b8:e8:
36:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A1:C9:2D:FD:EE:3B:91:59:C7:4E:85:0C:BD:7D:79:77:78:EA:AF
X509v3 Authority Key Identifier:
keyid:AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b8:b6:3e:c8:ba:d9:1b:bc:85:5b:b7:a7:db:ef:e4:b7:0f:
e8:64:ca:a4:9d:eb:af:dc:e9:f7:5b:30:a9:f2:99:f1:c7:0d:
3f:06:33:0c:51:b5:83:e1:d3:8a:eb:61:76:25:42:95:bd:c9:
19:9d:1b:06:34:e7:64:1f:a2:13:b1:c5:72:a0:e6:8c:86:3c:
9d:6e:aa:49:d9:7d:f7:7a:67:d7:f0:a9:26:b0:e4:0a:33:d8:
de:25:9e:dd:f6:21:ab:19:4e:53:1e:47:4f:81:d3:c9:da:fe:
7d:63:75:4e:61:9e:da:ab:9d:f8:26:32:d2:82:85:be:48:49:
7a:e5:ee:43:8f:74:4d:2e:8a:59:2c:bf:be:2c:14:d7:32:8b:
d0:13:13:e2:48:36:5a:54:ae:13:7a:d6:62:1f:bf:09:0c:a1:
ce:53:8a:48:48:78:02:f5:9c:69:ae:df:86:f8:c9:0d:d7:a0:
1d:bf:7d:58:c2:a6:3d:85:c3:2c:8c:f4:d4:37:48:5d:39:0e:
4e:07:ef:f1:66:77:7e:c6:1a:4e:b3:22:e2:1f:43:fa:84:ab:
db:d9:ba:b0:87:70:df:44:0d:d8:a7:da:14:b6:f6:8f:13:a8:
9d:ae:02:54:48:99:78:fb:9e:4c:33:94:2f:a5:87:51:e5:d3:
b4:5b:01:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:50:17 2025 by rpki-client