Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
File: d11030Q8uAUXzkFQ3OImYpQPHXw.mft (raw, json)
Hash identifier: S94nnyrVa9N0P+ZJG+YIy5+snLawNHytijE7bkoz/tY=
Subject key identifier: FF:CA:7F:07:51:B3:36:70:1C:CC:02:74:38:3A:32:29:F9:AE:CA:E2
Authority key identifier: 77:5D:74:DF:44:3C:B8:05:17:CE:41:50:DC:E2:26:62:94:0F:1D:7C
Certificate issuer: /CN=775d74df443cb80517ce4150dce22662940f1d7c
Certificate serial: 0197B8FD01D099681B2B2424AFBAC1F4CFCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
Manifest number: 09F1
Signing time: Sun 29 Jun 2025 00:01:18 +0000
Manifest this update: Sun 29 Jun 2025 00:01:18 +0000
Manifest next update: Mon 30 Jun 2025 00:01:18 +0000
Files and hashes: 1: d11030Q8uAUXzkFQ3OImYpQPHXw.crl (hash: z3DAP7vJJJ5Q0uK6rc7YdKU/mgx6eORIixaEVUTzRDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:01:d0:99:68:1b:2b:24:24:af:ba:c1:f4:cf:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775d74df443cb80517ce4150dce22662940f1d7c
Validity
Not Before: Jun 29 00:01:18 2025 GMT
Not After : Jun 30 00:01:18 2025 GMT
Subject: CN=ffca7f0751b336701ccc0274383a3229f9aecae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:73:41:a3:5e:e4:94:a2:13:8b:0f:2a:bd:
df:f7:a8:7a:05:80:e2:80:73:b1:84:d5:fb:26:da:
db:36:41:e8:83:ae:8f:73:97:41:94:e7:07:62:93:
23:1b:81:2e:00:36:9f:e8:61:b5:3b:0b:1a:78:84:
14:b5:f3:eb:f0:49:66:55:da:c2:7a:5f:8d:0e:56:
fc:41:d5:08:a2:2d:47:35:05:2c:37:64:82:85:c4:
56:8c:68:80:de:ea:31:c6:7e:5d:d4:85:38:05:d7:
54:f2:e1:de:0a:e2:d8:72:ed:38:97:83:69:d5:dd:
db:9e:c7:70:d5:4d:e7:13:60:b8:9b:27:6b:a0:0e:
0d:fe:16:d6:07:09:9a:04:ac:b6:04:e3:eb:30:8b:
56:5e:eb:a9:26:0b:ad:4b:4a:be:f3:7b:19:15:86:
7d:8f:64:f1:92:e5:65:89:af:aa:24:89:c7:c4:e6:
02:4f:6e:38:35:7b:f9:29:0a:26:07:b9:ad:d4:0b:
35:f6:5d:e1:8c:71:df:01:fa:97:c3:c3:ea:0a:ee:
d2:16:8f:19:f0:55:0f:e3:14:5c:7d:e9:a0:a3:c8:
93:80:9b:1b:08:b4:54:a8:20:cf:13:d7:40:a8:1f:
50:08:24:b1:a6:3d:08:67:ea:88:23:aa:95:07:79:
82:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CA:7F:07:51:B3:36:70:1C:CC:02:74:38:3A:32:29:F9:AE:CA:E2
X509v3 Authority Key Identifier:
keyid:77:5D:74:DF:44:3C:B8:05:17:CE:41:50:DC:E2:26:62:94:0F:1D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:87:3a:3f:3b:58:12:3c:6e:44:7e:ec:a4:b2:38:cb:ae:9e:
16:e7:9d:a2:fd:74:ce:e2:ca:55:c6:49:3f:63:01:62:fb:5a:
72:86:22:93:c8:94:3a:a9:1f:0d:88:0e:73:74:ad:9d:86:55:
ce:7a:42:da:7c:58:f8:ff:40:d5:3c:23:77:4f:2f:5d:b5:7d:
1d:07:c5:3b:16:ac:76:9b:a3:8d:fe:4e:c2:10:24:fc:61:a1:
3e:93:67:ef:1c:e9:bc:9a:43:90:fc:03:b7:e8:95:bb:40:80:
85:bc:22:6d:00:90:bf:f9:17:75:ed:c0:a2:2d:cb:87:54:39:
46:33:42:d9:61:1c:69:d5:4e:47:2c:78:f7:f1:3e:9f:16:6b:
bb:b5:6c:32:7e:2c:36:98:e4:47:15:ba:d9:68:3f:10:aa:31:
48:66:95:43:9b:b5:eb:f3:31:b2:2d:90:62:96:ea:c6:48:69:
48:2d:2b:79:49:29:6c:29:ba:50:9c:fb:3d:db:b8:e3:05:73:
62:bd:75:37:e2:c4:82:18:36:6b:97:6c:b7:0d:23:6d:1c:82:
b0:ad:a7:1c:27:dc:41:5a:b4:7b:a0:ab:1e:f8:b5:d3:91:2a:
e8:6a:65:ff:54:c9:0b:11:4f:50:6d:96:f3:1f:85:63:8e:71:
3b:9a:d4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:02:45 2025 by rpki-client