Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
File: _sl9DBu8zD2GcSKhFxD1X3AjAI4.mft (raw, json)
Hash identifier: qh+fjkrCoS6vuiKwLNe6r8PbFa2wvmRMJeKqHkRw6bo=
Subject key identifier: 19:EF:D6:08:60:31:7F:C8:B2:FB:91:77:48:E1:51:A5:91:45:D8:34
Authority key identifier: FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
Certificate issuer: /CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Certificate serial: 0197B7455BB0A1A7D6252C31113427887D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
Manifest number: 04AD
Signing time: Sat 28 Jun 2025 16:01:05 +0000
Manifest this update: Sat 28 Jun 2025 16:01:05 +0000
Manifest next update: Sun 29 Jun 2025 16:01:05 +0000
Files and hashes: 1: _sl9DBu8zD2GcSKhFxD1X3AjAI4.crl (hash: ttZL4toxCCDVHdL8senKr7PExxiRKbR6kJ0MYnLRNQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:5b:b0:a1:a7:d6:25:2c:31:11:34:27:88:7d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Validity
Not Before: Jun 28 16:01:05 2025 GMT
Not After : Jun 29 16:01:05 2025 GMT
Subject: CN=19efd60860317fc8b2fb917748e151a59145d834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:04:f2:c6:09:83:d7:2e:bc:6e:3a:4d:30:
9d:41:7b:84:3f:b3:18:15:a5:35:ec:c3:60:5b:a1:
b6:c2:25:b2:cc:d0:fb:6c:fa:7b:de:fd:90:c5:11:
e9:d1:6b:d6:cd:11:40:15:b8:df:fa:dc:04:d3:ba:
5a:d3:fa:52:cc:bc:23:3f:f3:44:06:3d:ed:21:a5:
22:3b:94:7a:28:66:2e:27:e2:33:7d:35:a1:d0:45:
84:cc:a3:d7:9a:f3:e2:6d:b3:d7:b0:75:47:83:4f:
5c:49:2a:82:c1:47:ca:25:e0:bf:8e:b3:79:ce:8c:
dd:a5:8a:d9:df:3b:9f:15:e7:f8:69:e7:95:4c:1e:
6c:9f:69:0b:27:6e:74:32:23:d9:f7:de:8a:d9:66:
6e:b0:27:0c:b8:32:5d:ab:7f:72:4f:61:64:66:68:
80:1c:7f:e5:c4:f7:bb:e0:f4:b4:2f:06:ec:b6:cd:
58:e9:d9:30:71:ea:32:30:37:fc:4e:3c:d6:4b:a6:
fe:6e:ec:04:61:6d:1a:43:94:ce:c9:af:39:d1:f5:
55:14:84:37:2c:ef:4a:0c:0a:90:46:94:9b:a7:01:
d0:d5:31:ea:01:1f:81:4e:17:22:e3:ea:20:16:fb:
11:7d:d3:2f:01:5b:55:d0:e1:7b:88:f0:c7:8e:7d:
0e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EF:D6:08:60:31:7F:C8:B2:FB:91:77:48:E1:51:A5:91:45:D8:34
X509v3 Authority Key Identifier:
keyid:FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:64:0d:31:5e:67:0f:bd:9d:90:9a:cd:2d:6f:57:7a:40:1d:
e8:32:a7:2e:93:9d:ea:df:07:ef:6e:ee:b9:c7:1c:b3:1c:80:
8c:b0:d4:4e:38:51:51:e7:df:4c:12:86:95:a2:74:5e:fb:87:
b2:8c:6d:f4:16:2f:07:b7:43:96:40:e5:f5:1b:ec:d0:58:4d:
f4:34:0e:ad:1c:e9:82:80:15:39:a7:c1:f7:5f:e4:66:20:95:
0e:76:62:1e:dc:ae:df:2d:be:b5:0b:31:0b:0c:b3:49:65:45:
b1:82:83:73:41:02:cf:3d:fe:a6:c8:98:74:1e:ab:80:65:b0:
5e:8f:81:93:09:9b:5b:a6:f7:99:cf:f2:0d:75:ab:26:82:1e:
df:70:bf:1b:67:46:d0:6b:3f:e8:84:33:2a:6a:27:05:30:2d:
33:50:99:9a:22:d3:04:41:23:d9:a5:81:86:40:4e:19:e9:60:
7d:ce:26:c4:3c:5e:2c:f1:c7:87:72:4f:a1:4c:3a:ef:4b:6f:
74:db:39:ff:50:90:e5:b3:c1:3f:1f:b4:03:89:5f:e3:37:30:
6a:95:d9:0b:62:2e:5d:8f:de:29:15:32:39:11:96:6c:68:cb:
eb:c6:87:29:44:6d:9c:fe:bd:27:04:23:b4:51:05:b7:1f:dd:
be:67:77:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:37 2025 by rpki-client