Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
File: ecIGSHmLtlNrI6TrxYgEVBX5boA.mft (raw, json)
Hash identifier: scRCOAIeY4secrXxIzMdPxa9WN+Orft30e1B2xcfdvM=
Subject key identifier: 68:CC:A7:03:60:1E:91:6A:3E:4D:93:D4:04:8F:42:B0:53:79:44:21
Authority key identifier: 79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80
Certificate issuer: /CN=79c20648798bb6536b23a4ebc588045415f96e80
Certificate serial: 0197B8FD61427D5F348149C4254CACDF7C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
Manifest number: 056F
Signing time: Sun 29 Jun 2025 00:01:42 +0000
Manifest this update: Sun 29 Jun 2025 00:01:42 +0000
Manifest next update: Mon 30 Jun 2025 00:01:42 +0000
Files and hashes: 1: ecIGSHmLtlNrI6TrxYgEVBX5boA.crl (hash: SAkY5GIcRA2SacSN8oQ2kOf5fv1m7JKZGv/ZLLI6NHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:61:42:7d:5f:34:81:49:c4:25:4c:ac:df:7c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c20648798bb6536b23a4ebc588045415f96e80
Validity
Not Before: Jun 29 00:01:42 2025 GMT
Not After : Jun 30 00:01:42 2025 GMT
Subject: CN=68cca703601e916a3e4d93d4048f42b053794421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:2a:05:f6:3a:04:9e:bd:75:0e:93:4c:8e:
17:56:a3:31:82:60:c5:66:66:85:ae:4a:5a:fc:b5:
83:cc:6e:99:9b:5a:fd:b9:ab:7a:9e:e7:b1:92:52:
19:2c:7e:a6:21:da:15:22:4f:ee:84:4a:36:73:87:
9c:34:08:8e:e8:a3:1c:d3:28:b4:43:bc:86:fd:c2:
1a:b2:57:2e:53:08:20:f3:52:4b:12:33:f8:a3:dc:
e4:42:5e:01:f0:78:25:92:a1:dd:19:06:86:c0:e5:
95:ee:0e:e1:2f:b1:d6:3f:cc:6d:23:08:a0:b8:4b:
5e:2f:db:75:b3:b7:96:47:24:67:af:18:a9:6a:8a:
3d:f5:95:aa:54:f5:ab:30:6d:e0:3e:5c:0c:26:98:
19:24:df:24:eb:84:89:a4:55:9d:46:62:73:cc:8d:
1d:09:42:86:20:c7:64:5f:58:c4:c5:cf:97:d9:7f:
cf:e7:66:bd:63:28:f7:a9:f2:4e:22:94:7b:03:d9:
73:bb:7b:c2:1d:ba:e5:05:93:b1:bc:32:77:44:1e:
c9:a5:97:e4:0f:b0:a1:b7:27:57:06:fa:fc:be:01:
b0:06:98:67:5d:a8:b2:15:a3:ad:ee:c7:39:25:67:
78:0b:a2:5d:82:05:ed:bf:5d:95:7e:5e:75:0f:4d:
eb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CC:A7:03:60:1E:91:6A:3E:4D:93:D4:04:8F:42:B0:53:79:44:21
X509v3 Authority Key Identifier:
keyid:79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c3:46:bd:9e:7b:c0:3e:f2:72:95:77:51:37:28:06:36:b8:
57:67:36:f4:f9:f8:e2:76:28:47:40:a8:76:5e:f9:93:a4:71:
75:bf:af:71:02:32:71:2e:70:a6:c6:4b:95:ca:54:be:60:d2:
6a:be:ed:33:d6:1a:07:96:c0:02:6a:c3:b5:b5:3a:8e:8c:cc:
0b:3f:28:62:f1:2b:84:79:29:b2:1a:ae:a4:22:75:4c:46:4b:
84:ec:9e:48:c5:eb:4a:90:3a:da:d1:43:87:ac:4f:5f:c6:a0:
82:ef:98:2f:a8:82:5b:4b:b5:44:fc:55:3b:2d:3e:f1:de:ba:
4a:04:c7:5c:ed:f9:4e:be:18:8a:fd:55:4a:87:81:56:67:75:
78:5a:86:35:22:8c:08:66:b5:31:30:c6:36:97:8b:8a:f7:63:
52:50:d8:74:a5:4a:6c:af:5b:78:60:d7:d2:bf:58:6d:01:8c:
97:fc:d2:90:b2:e4:e5:83:ef:1d:38:fe:50:39:7e:b8:1b:f9:
b1:1f:f2:0f:f8:56:eb:c6:ed:50:63:dd:34:41:61:40:35:2b:
c0:ac:50:c3:08:e3:1a:9b:ac:95:5d:58:96:5c:56:6a:66:34:
e9:6a:a8:54:1a:7b:08:7f:ce:8a:a9:bd:f5:69:9c:18:c2:20:
dc:1d:0b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:15:31 2025 by rpki-client