
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
File: 15WKlFA6cEIXSd7wXv5joxfRisI.mft (raw, json)
Hash identifier: 9cjx9RXll20q808ppqT0yekXRVorNCO7A4Bwm5HbbDo=
Subject key identifier: 38:72:E2:17:FF:23:65:1D:EE:42:DC:79:98:54:B5:DC:5B:CF:53:3D
Authority key identifier: D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
Certificate issuer: /CN=d7958a94503a70421749def05efe63a317d18ac2
Certificate serial: 0196B0D7811FEBE067FB6BAE25ABD938C16E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
Manifest number: 063C
Signing time: Thu 08 May 2025 17:00:35 +0000
Manifest this update: Thu 08 May 2025 17:00:35 +0000
Manifest next update: Fri 09 May 2025 17:00:35 +0000
Files and hashes: 1: 15WKlFA6cEIXSd7wXv5joxfRisI.crl (hash: gTCDPpZauwHvjS3AuMcUrYxjWCtSfDCJ1dYwxgIe9c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:81:1f:eb:e0:67:fb:6b:ae:25:ab:d9:38:c1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7958a94503a70421749def05efe63a317d18ac2
Validity
Not Before: May 8 17:00:35 2025 GMT
Not After : May 9 17:00:35 2025 GMT
Subject: CN=3872e217ff23651dee42dc799854b5dc5bcf533d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bd:a1:7d:6f:59:c0:87:eb:e5:a7:e6:3e:ce:
24:f0:80:18:a9:e1:24:25:66:8d:67:29:dd:ac:04:
d3:7c:72:73:4c:66:5f:4e:55:c6:16:f3:6e:19:d7:
99:08:32:1d:e0:e1:05:10:a0:fc:f6:dc:67:a6:e2:
a5:df:c7:4e:c1:a2:88:f4:de:81:40:6e:c7:52:8c:
c6:68:a1:ae:82:b7:07:3c:fa:24:66:26:6a:8e:74:
1c:50:0b:ce:5f:c8:18:75:ef:cc:17:f9:9b:64:70:
ba:b5:8f:86:91:f3:d3:3f:dc:35:e3:dd:27:b3:67:
24:0d:65:e8:fd:65:51:6f:17:65:1c:6d:cb:7d:62:
90:68:da:16:b0:f0:ac:b2:34:37:26:f9:52:1b:86:
fc:3a:cb:00:bc:e9:8b:de:ff:07:3d:d4:83:5c:19:
f4:b4:e4:c1:72:2d:a5:96:11:95:4e:5c:3c:df:aa:
19:7f:f0:43:b6:31:a7:ef:cd:60:81:0b:89:41:66:
64:2f:6a:16:d3:5e:dd:d4:aa:94:65:10:08:1e:f1:
41:d7:13:49:aa:d4:0e:15:f1:93:5c:92:44:e3:7d:
0c:5f:41:df:a7:77:a6:8e:04:d0:ce:6b:d3:28:51:
ef:8d:7a:b7:94:8b:10:02:60:d9:04:df:5a:c1:b4:
95:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:72:E2:17:FF:23:65:1D:EE:42:DC:79:98:54:B5:DC:5B:CF:53:3D
X509v3 Authority Key Identifier:
keyid:D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f2:5f:54:70:a3:60:5b:53:02:66:b5:c3:af:be:7d:8b:ab:
49:1b:92:ba:cc:69:7f:f8:89:93:fa:2f:8e:96:82:c0:15:dc:
1b:f8:29:09:88:b0:89:82:9d:1b:23:c2:3b:e2:96:e2:24:eb:
26:96:b5:b9:ad:a8:97:73:10:62:40:e6:40:72:a8:2e:e3:bf:
51:fd:1a:71:b0:6e:07:9f:d3:03:a1:a8:ad:4e:91:9f:66:46:
f9:f9:bf:fc:ae:bd:ff:3c:6f:30:f8:4a:94:62:89:77:11:5d:
27:fd:1a:6c:e1:40:64:34:21:ad:7a:6f:0e:f2:ab:07:97:ec:
6d:a4:9f:ec:e1:81:3e:a0:83:85:ff:3e:e5:3c:eb:f5:a3:11:
fe:d7:eb:2b:a4:1e:8c:43:6f:0d:82:00:1e:de:df:43:be:6c:
8a:e1:29:f4:e9:54:f5:65:fc:fa:e2:53:bf:32:39:8f:36:30:
e2:a5:db:05:d9:a1:eb:0c:ef:86:14:f4:4d:45:ed:5e:7c:ea:
7d:de:5b:41:69:f3:fa:93:13:69:8d:1c:fb:8f:04:7b:78:d3:
63:8f:02:85:44:cb:9d:a0:46:47:62:52:05:0c:be:6d:27:38:
b2:41:7e:f4:c0:e5:a5:60:d0:a2:2a:04:87:af:2a:e7:43:95:
60:aa:b7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:38:24 2025 by rpki-client