Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
File: eAl9X3eghkNQCkNtDpjwM9D1SPk.mft (raw, json)
Hash identifier: X15fm5WVh9aZKA7xuJyXQ6ATOeX5pHwoUEXNIXtyI9k=
Subject key identifier: 69:C3:1F:75:8D:86:FB:EE:D7:87:A3:C2:E0:CD:7F:D3:0D:C4:33:BC
Authority key identifier: 78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
Certificate issuer: /CN=78097d5f77a08643500a436d0e98f033d0f548f9
Certificate serial: 0197B7EA218E564C6370925C647044C748B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 19:01:03 +0000
Manifest this update: Sat 28 Jun 2025 19:01:03 +0000
Manifest next update: Sun 29 Jun 2025 19:01:03 +0000
Files and hashes: 1: eAl9X3eghkNQCkNtDpjwM9D1SPk.crl (hash: Dv9soR1NvBZFxN2VU3gulVhjz4nJgyYsUmuivshMYFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:21:8e:56:4c:63:70:92:5c:64:70:44:c7:48:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78097d5f77a08643500a436d0e98f033d0f548f9
Validity
Not Before: Jun 28 19:01:03 2025 GMT
Not After : Jun 29 19:01:03 2025 GMT
Subject: CN=69c31f758d86fbeed787a3c2e0cd7fd30dc433bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:12:a4:1b:52:6d:d7:d7:0f:70:5d:98:1a:
fa:93:89:99:94:c5:c7:61:4f:ec:08:20:5a:0e:76:
ec:bd:f6:e6:9a:25:e5:12:33:c4:7f:75:31:c1:cf:
dd:6a:34:af:b1:e6:8b:dd:14:a2:77:06:5c:8b:d9:
e6:b5:8c:86:25:1a:ff:5c:56:8f:62:58:9c:94:f4:
45:2a:00:db:be:04:b9:44:ff:75:c5:0a:88:09:9a:
a3:f7:e8:08:59:af:6e:a5:ed:a5:61:ca:a1:02:d5:
4f:c5:3e:96:b7:e7:d5:95:39:ed:26:f9:66:d3:76:
17:77:05:6d:62:23:a4:17:5e:5f:0f:fa:37:8a:fd:
bf:d1:a3:f0:bb:06:3e:ba:39:f5:30:46:e4:fd:20:
5f:dc:36:8d:ad:9f:16:0b:ed:fe:7d:e7:97:20:5c:
68:f3:53:c4:de:42:1e:17:34:f6:85:a8:ec:9e:f8:
e6:25:65:56:df:fe:27:f5:ff:f1:17:35:9e:aa:e7:
b6:56:96:af:81:76:f0:cd:a9:84:58:32:06:c4:40:
b6:15:06:85:f2:2d:4c:25:60:3f:f1:42:93:03:05:
4c:a0:43:19:4c:6c:87:d6:a7:41:09:07:07:32:22:
41:7e:1a:cf:f3:c9:0b:fa:45:34:b1:dd:c1:15:c8:
6e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C3:1F:75:8D:86:FB:EE:D7:87:A3:C2:E0:CD:7F:D3:0D:C4:33:BC
X509v3 Authority Key Identifier:
keyid:78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0f:33:10:18:c9:37:00:7b:f7:4f:88:ec:71:df:f2:3a:a2:
e2:e1:af:a4:20:e3:06:25:63:26:b9:75:7b:6f:a0:97:88:bb:
48:67:2c:22:f8:b4:88:79:ae:ab:ea:3a:3f:7a:37:26:6c:36:
10:cc:b6:13:b8:4f:28:e8:43:2b:54:b5:7b:6d:33:e7:97:1a:
0d:d4:08:cd:a6:80:05:5a:54:93:6e:b4:bc:27:b3:5d:16:85:
6e:2f:c0:c0:d5:4b:c4:04:3d:95:79:ea:b5:85:4e:18:c1:86:
44:24:44:79:3b:be:d1:1d:4a:69:01:97:70:1d:f0:62:a8:05:
cb:20:25:1e:38:dc:e5:4e:87:dd:c1:2d:03:c5:1f:f3:a2:19:
cc:54:d1:52:01:98:7b:63:fd:78:7d:5b:20:b8:41:2e:c5:6d:
38:6e:74:48:7f:7f:a8:39:f7:1f:5e:1d:78:36:30:19:1d:c2:
0a:37:33:91:2e:ec:21:f1:4d:5c:b0:81:a3:64:f5:e6:69:c9:
df:7c:d2:8e:52:42:08:98:96:8b:af:d4:cf:ac:68:fd:1a:a4:
e9:95:a3:ec:72:c1:32:40:c9:7e:2d:75:2e:7e:f7:7f:1b:cb:
ab:64:f8:81:dd:74:f9:1f:07:83:a8:16:5b:af:d0:a1:68:42:
a8:ca:71:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:28:26 2025 by rpki-client