Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
File: 81bN1aSc5sQqmjX6d7lyeBloiJY.mft (raw, json)
Hash identifier: C7GzIAev0Vk73E39a97dEvz2vbv5oqdeffFlc5rxtBc=
Subject key identifier: 40:B6:45:99:EB:17:DF:EB:40:36:EE:56:20:E3:8D:69:35:BA:2C:CC
Authority key identifier: F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
Certificate issuer: /CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Certificate serial: 0197B6A05AF5FEAA0808123D11B34AC8241A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
Manifest number: 0C58
Signing time: Sat 28 Jun 2025 13:00:51 +0000
Manifest this update: Sat 28 Jun 2025 13:00:51 +0000
Manifest next update: Sun 29 Jun 2025 13:00:51 +0000
Files and hashes: 1: 81bN1aSc5sQqmjX6d7lyeBloiJY.crl (hash: cCuri2qPNUd0Fd/hYIQayYSiPygnqirauF8zjyII+Mo=)
2: FFFquzyoI6V8zUirU5qgTnYffFE.roa (hash: UkzzNUPit9F8YYAkgHSPwBmxXN79Y3LDHaSScH7xgPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:5a:f5:fe:aa:08:08:12:3d:11:b3:4a:c8:24:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Validity
Not Before: Jun 28 13:00:51 2025 GMT
Not After : Jun 29 13:00:51 2025 GMT
Subject: CN=40b64599eb17dfeb4036ee5620e38d6935ba2ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:4c:6b:4f:93:02:ad:96:25:80:f1:f8:7b:
21:28:0a:3a:a4:4b:c6:18:2e:87:66:43:8b:c9:41:
c4:6d:a0:4f:b0:ba:5b:72:e9:6e:21:7c:2f:40:f4:
28:c7:6d:dc:50:0a:14:91:f1:3a:bf:26:c7:26:34:
e6:1e:7b:1b:cb:b4:fd:f1:b7:8d:46:d5:58:51:23:
2f:37:73:02:81:22:3d:a9:a9:b1:e6:3f:08:3d:82:
77:36:06:3c:57:3c:d3:de:a8:c2:3c:41:c7:9a:27:
87:97:78:73:fa:d6:ae:c6:62:c8:30:a1:45:11:4d:
50:26:47:84:6d:11:bc:d0:44:8e:a3:44:b6:61:e0:
63:05:b9:20:d6:0e:4f:d0:ba:6b:44:23:dd:d4:ad:
9c:ca:7d:d2:f5:09:b4:92:46:06:f2:c5:c2:a7:a5:
ca:94:e1:12:42:9c:5b:5b:31:f9:01:2e:7b:45:2f:
ae:5d:4f:8c:5d:f2:00:98:b2:4b:1c:7f:04:8b:9a:
33:c8:20:fe:a9:94:97:91:e5:83:24:ec:83:6c:96:
38:65:d3:7a:b4:6c:ea:99:b9:51:28:6a:84:3e:f7:
69:8a:56:41:2c:df:14:6b:49:e6:f6:8a:eb:38:4d:
47:e8:53:2b:ea:f1:b4:9c:60:1f:dd:1b:f2:0d:20:
22:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B6:45:99:EB:17:DF:EB:40:36:EE:56:20:E3:8D:69:35:BA:2C:CC
X509v3 Authority Key Identifier:
keyid:F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:76:dc:e7:e5:26:a6:1c:a2:a9:26:2a:c9:83:eb:f1:3e:af:
ca:01:33:34:40:63:5c:a8:ed:24:0f:13:ad:95:28:ec:ad:86:
58:1e:77:b4:59:f3:fa:3d:8b:16:11:9a:b1:67:a7:e1:eb:6c:
68:f2:93:0c:ad:6c:5b:e8:c4:16:bf:5d:ee:1f:d4:9b:66:aa:
fe:3a:5e:50:4c:9e:c3:98:48:27:9c:4c:e5:86:d4:59:48:14:
65:e9:20:d6:b6:a5:5d:46:2a:9d:80:5d:0e:f2:31:4d:7b:fb:
9c:8f:76:67:84:de:d4:27:50:60:f9:0b:c3:4c:e3:cd:90:03:
48:2d:c5:8f:e5:cf:90:8d:a5:09:cb:50:e7:8f:f1:6b:51:f1:
92:b3:6f:b0:5f:27:6e:2f:10:6e:51:fa:36:d0:52:46:4d:5d:
43:68:92:c3:51:17:f9:fe:12:2c:54:57:7a:3c:5f:90:30:ae:
41:8d:94:37:97:fd:fd:58:10:92:85:63:bb:fc:28:7d:9c:2e:
a3:16:7b:ff:b3:81:10:ca:7d:cb:96:7e:5d:51:4d:a1:47:90:
a0:bd:c6:0e:04:41:27:9d:b8:f5:f8:b0:ba:5b:0f:98:33:ca:
3c:b8:dc:d0:da:da:d7:95:c7:60:ec:4e:21:66:31:2a:6f:ef:
0d:66:02:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:25 2025 by rpki-client