Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
File: rD5tWdR-c37cMaZfMQUUzUuV04c.mft (raw, json)
Hash identifier: oTNJLkhJhuujJWMkK1yyeA83xAaNOEZp4wvFvcGkgPE=
Subject key identifier: 56:7F:21:D2:E6:8D:18:50:99:C3:80:4E:9A:C1:D1:4F:54:AB:6D:51
Authority key identifier: AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87
Certificate issuer: /CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
Certificate serial: 0197B70F48A185565625339058DB91C3B11C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 15:02:01 +0000
Manifest this update: Sat 28 Jun 2025 15:02:01 +0000
Manifest next update: Sun 29 Jun 2025 15:02:01 +0000
Files and hashes: 1: rD5tWdR-c37cMaZfMQUUzUuV04c.crl (hash: 1WoAHYrjOsYawQwcN35qk1IefAkPzB1H4+dHuJdp5Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:48:a1:85:56:56:25:33:90:58:db:91:c3:b1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
Validity
Not Before: Jun 28 15:02:01 2025 GMT
Not After : Jun 29 15:02:01 2025 GMT
Subject: CN=567f21d2e68d185099c3804e9ac1d14f54ab6d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:a7:16:5a:72:89:02:46:22:33:4d:e4:3f:
b3:77:58:20:69:b5:bc:6b:5d:c8:20:11:64:06:4f:
bd:f8:4f:3c:2c:47:51:66:73:01:7d:4b:52:71:61:
8c:7f:eb:6f:b1:f4:a3:6c:f2:cb:27:15:75:90:2f:
aa:83:53:99:39:e2:9b:a0:fa:78:f9:55:87:b3:c0:
e0:d1:88:1d:10:1f:70:c6:76:56:85:6e:de:8e:65:
a9:2f:41:20:62:d0:f8:cd:f3:b4:01:4c:9d:55:a6:
c3:ef:3e:df:f1:92:79:0a:e6:df:74:fc:fc:d1:75:
5a:94:ab:49:ce:31:75:4f:3e:d3:f4:12:09:09:38:
e6:28:25:4e:45:9d:09:7f:3e:f0:d0:18:cf:da:fc:
cb:8d:29:1b:ef:7f:a8:a4:45:28:2c:3b:fd:6f:47:
e3:0e:56:3a:26:cc:73:1d:d8:9e:d6:d4:64:a7:5d:
60:58:5a:17:73:ba:c2:1e:c7:7b:09:9d:f3:fd:b0:
e3:62:41:24:cb:9c:52:80:67:60:73:f2:de:63:c9:
29:b8:73:2c:2b:61:88:1e:c3:20:94:5a:5a:20:c8:
db:8d:b8:6d:4f:cd:0b:c6:7d:b4:9b:4b:d1:4d:9a:
b8:d7:3f:4d:ed:db:a4:6b:9e:2d:84:bb:40:3e:9b:
de:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7F:21:D2:E6:8D:18:50:99:C3:80:4E:9A:C1:D1:4F:54:AB:6D:51
X509v3 Authority Key Identifier:
keyid:AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ef:fe:b5:12:25:77:bd:29:c5:c1:da:a9:2e:40:b4:29:a0:
43:47:11:3b:a1:c6:52:05:6a:40:cb:4e:cd:d4:49:24:d1:af:
30:08:f2:0b:56:31:41:0a:a4:c7:79:ce:3d:e9:99:bf:fe:45:
89:40:a8:7c:c8:ba:fe:81:24:d5:c2:e3:7f:ba:73:b8:c2:fe:
73:67:37:38:30:a6:d1:5a:14:f5:f3:b3:16:8f:a2:12:26:3e:
88:5d:b2:c2:b7:f3:f9:95:b2:02:27:92:d5:8e:90:01:f2:e6:
74:0f:1b:05:88:35:88:cd:02:0a:19:a9:8d:ef:c3:ec:b3:6d:
7a:97:f0:e9:e3:33:eb:c0:da:41:7a:a5:b4:63:13:08:d2:6d:
62:ac:0f:ac:9d:6e:f8:dc:1e:a5:1a:8e:56:4f:74:fb:60:22:
23:d1:05:86:3f:50:95:a5:56:ee:75:cb:2a:eb:9e:58:55:e9:
a3:7c:80:85:9b:8c:20:51:4a:67:6d:50:34:bb:24:49:e6:bb:
58:1e:6c:f9:fd:fa:64:aa:c4:ec:05:31:eb:63:ab:d1:7c:ae:
22:2c:34:df:68:3c:08:d2:a8:eb:84:62:0f:0c:6f:92:a8:c8:
a0:87:ef:9a:da:b0:16:67:f0:d5:be:9c:e0:69:42:e7:1a:33:
29:aa:9a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:43 2025 by rpki-client