Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
File: clLH1e2MWivCrQMGXUHD5LOsFXU.mft (raw, json)
Hash identifier: 0KLSpCxxqDRHDh78sjUpqrfnfP+0eJVmZL0LS7xGD5Q=
Subject key identifier: C1:C7:E6:F4:E6:1F:C2:17:AA:3E:97:D5:9E:F4:46:6A:7D:3F:2F:70
Authority key identifier: 72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
Certificate issuer: /CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Certificate serial: 0197C3134BD6B7DE898BED49BBE9A3637D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
Manifest number: 12BB
Signing time: Mon 30 Jun 2025 23:01:51 +0000
Manifest this update: Mon 30 Jun 2025 23:01:51 +0000
Manifest next update: Tue 01 Jul 2025 23:01:51 +0000
Files and hashes: 1: clLH1e2MWivCrQMGXUHD5LOsFXU.crl (hash: 6zjV4cr3fh8f6RiFAGq1nEYoswNCDSlvTcoVyXVNtsI=)
2: pEayhHqE2LsS2JqNOu8wTigFXWQ.roa (hash: xO5IfYrXWQX7NXGLAWvUM5o4fMaOdr7urJcP0f6HOKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:13:4b:d6:b7:de:89:8b:ed:49:bb:e9:a3:63:7d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Validity
Not Before: Jun 30 23:01:51 2025 GMT
Not After : Jul 1 23:01:51 2025 GMT
Subject: CN=c1c7e6f4e61fc217aa3e97d59ef4466a7d3f2f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:92:60:76:be:36:76:9f:4c:89:22:5a:7e:
b2:2f:f2:ee:80:0b:23:78:29:7e:47:3a:61:5a:5f:
2c:06:af:5b:d3:12:8c:4a:5c:48:f8:80:2e:3c:15:
19:65:4c:0d:9d:47:61:cc:eb:70:fe:92:a2:3d:07:
f7:1a:34:2c:92:b8:1b:f1:9b:7f:a4:e3:fa:9f:55:
8a:3e:52:fe:4e:58:84:44:bb:95:09:b5:44:d9:d5:
a1:ff:74:df:a7:25:27:ec:73:35:38:dd:b6:bc:c3:
41:08:48:dc:38:42:c0:2f:ba:5f:c3:fd:92:0d:26:
9d:e0:75:f2:4e:1c:d8:29:6e:bb:df:42:47:a5:d5:
0f:a8:a4:cb:79:00:72:c0:17:62:bb:6f:bd:cd:e6:
2b:24:d3:e5:bd:82:20:a6:7f:95:fb:e7:55:9e:45:
57:c7:a7:85:6f:21:fd:41:ea:75:72:99:22:b8:3a:
b8:bf:06:3a:27:c7:76:af:b7:4e:2c:5f:bc:43:2e:
a6:6c:16:53:85:95:5b:62:97:e9:9d:2d:43:a1:30:
c5:fe:99:ef:cb:8d:97:a1:91:76:43:b1:eb:dd:e6:
f5:37:24:e4:e3:2a:32:59:f8:01:74:c9:2d:cc:43:
a9:82:af:68:d6:fa:73:82:de:69:73:bb:2a:12:a1:
92:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C7:E6:F4:E6:1F:C2:17:AA:3E:97:D5:9E:F4:46:6A:7D:3F:2F:70
X509v3 Authority Key Identifier:
keyid:72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:5d:98:7e:5c:c6:e0:34:fa:06:e8:c9:e9:d5:38:9e:2c:ad:
ee:dc:9e:48:0b:69:c5:8b:de:05:51:c2:c5:8a:0c:7e:a9:89:
79:92:e2:c9:42:40:e0:1d:ca:9d:15:32:73:26:83:91:ec:fb:
b8:57:e2:eb:d9:b3:09:fa:cf:14:3b:6e:fd:61:58:37:ca:88:
fb:dd:76:9b:b0:91:22:da:38:66:95:56:a8:9d:28:79:35:cc:
7a:1a:06:42:ff:47:55:e7:6d:95:4e:7b:e1:75:a4:e4:53:ec:
60:ce:c5:a4:ad:e3:39:8b:74:16:ba:0c:a1:c5:b9:2e:b1:fa:
2e:1a:6c:63:04:35:51:56:d8:f9:cf:0a:d0:f4:54:91:e7:9e:
3b:e5:a1:32:5b:aa:c9:26:b6:d3:17:fd:94:c3:e9:ef:dc:c7:
fe:f6:b9:a0:eb:79:c4:82:c1:e5:78:d9:1f:2a:08:5d:e2:99:
03:6c:75:be:7f:0e:bb:f7:56:56:f0:df:20:fa:18:ef:89:78:
6e:89:d4:07:e2:d1:01:5d:01:8f:5a:3c:73:f1:8f:cf:7a:11:
29:c6:1e:2c:79:27:e6:dc:2f:ca:7e:bb:47:2d:96:6e:65:2c:
00:8f:fa:cb:2f:0f:39:99:ef:42:3d:8d:50:6c:12:d9:8e:79:
e4:d3:80:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:19:39 2025 by rpki-client