Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
File: S6TRDarjyS2n0u6XO3SMsflJIuk.mft (raw, json)
Hash identifier: w/V/KbDKFFb2qUvUvzV1aQozDVaWJ7v2ObXepCBIbsI=
Subject key identifier: B0:25:C7:8C:EF:22:DD:E9:EB:57:F9:EB:D8:22:63:5D:5C:14:1D:BB
Authority key identifier: 4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9
Certificate issuer: /CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
Certificate serial: 0197B88EB67100F67881DE34A8DB8BCFD3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
Manifest number: 095A
Signing time: Sat 28 Jun 2025 22:00:49 +0000
Manifest this update: Sat 28 Jun 2025 22:00:49 +0000
Manifest next update: Sun 29 Jun 2025 22:00:49 +0000
Files and hashes: 1: S6TRDarjyS2n0u6XO3SMsflJIuk.crl (hash: KHVd51KCO4kFScUczA86JZV/NkJxRjLJ0P+YCRmASss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:b6:71:00:f6:78:81:de:34:a8:db:8b:cf:d3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
Validity
Not Before: Jun 28 22:00:49 2025 GMT
Not After : Jun 29 22:00:49 2025 GMT
Subject: CN=b025c78cef22dde9eb57f9ebd822635d5c141dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:75:85:83:b3:53:5b:2a:2b:c8:3f:91:9b:
5a:ec:08:e3:94:e6:67:42:ca:e8:28:02:eb:89:c7:
f3:20:d0:9b:a0:42:88:c7:07:9b:27:0f:06:21:06:
b7:cf:29:46:94:52:01:75:38:bb:12:bf:92:f3:21:
51:84:f1:6a:8e:ea:36:e6:f6:08:91:6c:99:66:2a:
8c:73:d1:f6:8a:17:be:ce:c8:14:72:27:99:53:b9:
3e:93:ce:f6:bc:a5:aa:52:7f:d9:ac:43:31:ae:a7:
0f:09:fe:42:04:b6:c0:86:37:f6:5c:92:bd:a7:9d:
bc:e8:84:b0:8e:a1:ab:af:10:86:b8:1c:c6:ab:8e:
a8:70:e5:b3:89:23:80:4a:51:1e:cc:b5:dd:b6:d4:
d1:9e:7b:e6:00:14:c9:24:3d:5a:d8:b7:5e:43:8b:
5c:a7:dd:70:13:58:6e:a5:38:a0:c3:0d:c0:f9:4e:
be:90:41:c9:4b:37:d3:a9:96:f5:a6:b3:a6:a1:7d:
3e:a5:f0:85:60:a0:85:79:08:d4:16:ca:5f:4f:2c:
e7:b9:f4:d4:97:bb:27:36:68:f4:be:a0:6a:b6:79:
16:d0:31:5c:8b:a7:88:a5:17:9e:e2:37:1b:db:45:
f5:e1:4b:ac:98:0c:62:02:71:1e:8c:74:27:3d:df:
bf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:25:C7:8C:EF:22:DD:E9:EB:57:F9:EB:D8:22:63:5D:5C:14:1D:BB
X509v3 Authority Key Identifier:
keyid:4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:66:da:82:1b:5e:c5:00:01:a2:4f:96:76:ee:58:75:91:3d:
fe:d2:b6:1c:64:f6:a9:9b:e1:07:cd:ef:55:25:8d:e0:a9:7e:
c8:61:4f:2a:ed:18:82:2c:4a:67:54:81:fb:4b:ea:83:0e:80:
e3:6c:b1:33:e7:65:69:70:b4:e5:62:43:17:15:58:c9:d3:62:
f7:af:57:30:3c:7c:cb:d6:d2:af:0d:44:24:29:56:e6:06:66:
76:d2:8a:73:14:70:ae:55:eb:e7:0f:cb:b6:f5:8b:18:24:79:
6d:79:da:bf:d9:9e:3f:ad:4b:cd:19:13:0b:78:3d:68:d0:9a:
a8:62:7f:5a:fa:bb:b8:1b:a9:d4:95:97:59:fa:36:92:e3:9a:
6e:6a:8e:b5:c1:fb:1c:e8:d1:19:99:5d:5c:d8:a4:05:30:cb:
2e:33:70:84:27:9c:96:68:90:a9:d1:91:fa:a9:02:db:8b:1b:
8d:e9:35:42:ec:d2:2e:1f:27:26:cb:92:9b:45:76:1a:d3:a7:
f5:d2:e2:ca:d6:00:21:8c:bb:ad:28:ad:73:da:cc:05:4a:2c:
62:7d:7d:d9:aa:ba:8a:56:1f:65:d9:04:b6:0e:d8:9b:d3:64:
03:7b:c1:c6:4f:40:d6:cc:72:74:e0:62:12:87:a1:fe:50:b7:
f2:15:a9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:34 2025 by rpki-client