Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
File: Rji3uq3cnWWuMsgX_meX7zeZaaM.mft (raw, json)
Hash identifier: JiJLQ1McwopT2HQKn6FN+ifE9UPChUgbU2UANlPW3mA=
Subject key identifier: 05:26:E1:CA:D9:F4:6F:36:E2:C5:51:48:D4:26:D9:81:CB:49:1E:05
Authority key identifier: 46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
Certificate issuer: /CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Certificate serial: 0197B7EAB20D99A7B416F370CB28694F8B65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
Manifest number: 1488
Signing time: Sat 28 Jun 2025 19:01:40 +0000
Manifest this update: Sat 28 Jun 2025 19:01:40 +0000
Manifest next update: Sun 29 Jun 2025 19:01:40 +0000
Files and hashes: 1: Rji3uq3cnWWuMsgX_meX7zeZaaM.crl (hash: R5YC5F/2yXTYBu5Y7tYEm21SP1cSJUX3krMTYSgXtms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:b2:0d:99:a7:b4:16:f3:70:cb:28:69:4f:8b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Validity
Not Before: Jun 28 19:01:40 2025 GMT
Not After : Jun 29 19:01:40 2025 GMT
Subject: CN=0526e1cad9f46f36e2c55148d426d981cb491e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:ed:91:4b:86:91:c9:7e:c1:2a:1c:b2:b7:
28:49:4f:5e:04:51:c0:9c:10:56:3d:7e:a0:03:6a:
e8:a6:e7:46:34:1e:0a:6c:2f:a0:4b:ea:6f:18:09:
a0:11:0c:8b:6c:e1:31:9c:63:a6:17:c5:c8:88:d9:
45:14:ce:a9:d1:b9:ce:93:da:56:11:e0:46:ca:3f:
8e:9e:6e:9a:38:2f:7f:5a:43:3f:1c:c3:2b:4c:f4:
a2:ae:dc:4b:87:c4:4e:10:fa:22:b1:43:ab:24:a2:
21:a2:bd:67:b9:f7:8d:51:20:aa:b5:dc:85:a6:84:
58:e1:b4:82:55:7e:54:a3:ee:2e:8f:cc:df:f7:d8:
7a:a8:3c:b8:48:91:59:19:6a:a2:9d:f4:4f:31:f7:
6f:ee:d0:03:74:79:ba:c7:dc:13:8b:3c:8b:a3:30:
7f:c1:f9:ab:3f:95:5e:05:b8:48:ef:37:98:25:95:
61:bc:b2:fd:5e:5c:ab:9a:17:20:e5:21:29:6b:71:
84:d7:00:95:0c:81:6f:53:10:16:de:f5:b4:5c:c2:
8a:f3:76:1f:c6:ae:7b:3b:18:8d:e0:9a:6c:d5:5e:
54:cb:e0:bf:a3:32:d3:93:24:d0:49:ee:7a:03:e5:
73:54:ec:64:e3:39:36:23:95:3d:8a:97:84:4d:d6:
93:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:26:E1:CA:D9:F4:6F:36:E2:C5:51:48:D4:26:D9:81:CB:49:1E:05
X509v3 Authority Key Identifier:
keyid:46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:82:bf:25:63:cc:85:57:2c:99:a5:a1:7d:20:ea:c0:f0:60:
cf:d2:94:ef:94:44:a7:32:cb:d6:eb:7e:8d:c1:f0:49:27:16:
83:cc:0c:34:50:45:48:14:86:b4:0a:de:59:f0:39:1e:17:26:
e4:93:c8:1a:83:85:03:6c:85:77:27:82:a3:c0:c2:cf:2e:2a:
84:2c:ba:7e:d2:5b:06:df:4e:69:c7:67:a4:1e:9b:6e:a7:df:
8f:22:4e:e2:2d:18:68:2a:1e:ac:67:c5:1d:48:69:b4:41:c9:
9e:55:b0:32:2a:a9:90:70:59:2e:17:d7:f7:b7:9f:0a:50:67:
cc:8a:01:69:25:d4:79:3f:83:fc:9a:89:cd:ce:e2:79:d0:87:
a0:90:50:05:ef:3d:35:78:b1:99:1e:8e:83:7f:09:6b:a1:7d:
c5:c4:8f:17:0c:92:1a:d0:7b:a0:56:5e:2c:61:49:c1:9a:f9:
4a:1a:45:3c:f2:7f:ac:3a:f1:c6:a2:7e:73:35:2f:a0:2e:1b:
60:66:36:3a:b4:93:f6:5b:66:45:9f:16:fc:5b:7f:d2:37:c9:
17:e8:c5:3d:2f:65:bc:c0:4e:2b:db:ac:3c:d1:0d:48:ca:fd:
c6:b0:cc:35:17:9e:03:76:61:6e:34:de:2e:6d:34:45:2d:16:
ab:a3:51:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:42 2025 by rpki-client