Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
File: M7chLm_l_PDueNzQRA32ngCq1Nw.mft (raw, json)
Hash identifier: 3exwEbsLETcNKurFA6KNelkjHadh478ifrFOVpII2L4=
Subject key identifier: 03:DC:A1:13:B9:06:77:C6:CA:F7:92:DF:E1:53:77:38:D0:73:07:58
Authority key identifier: 33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
Certificate issuer: /CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Certificate serial: 0197B74587C46A0E97795364885A8CC38603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
Manifest number: 12FA
Signing time: Sat 28 Jun 2025 16:01:16 +0000
Manifest this update: Sat 28 Jun 2025 16:01:16 +0000
Manifest next update: Sun 29 Jun 2025 16:01:16 +0000
Files and hashes: 1: M7chLm_l_PDueNzQRA32ngCq1Nw.crl (hash: zTkH2nixrE9gpR9/Pywz3LjEr9Q8rN1hARlKrzYxTFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:87:c4:6a:0e:97:79:53:64:88:5a:8c:c3:86:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Validity
Not Before: Jun 28 16:01:16 2025 GMT
Not After : Jun 29 16:01:16 2025 GMT
Subject: CN=03dca113b90677c6caf792dfe1537738d0730758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:98:3e:92:0d:b1:23:8c:f3:49:0c:63:70:39:
ea:05:e6:95:ff:f8:bc:5f:be:f3:f9:9d:7c:2a:f6:
74:6f:21:7a:b6:c8:fc:c7:6d:02:95:af:bc:5d:85:
f1:09:c1:19:34:17:98:18:d2:a0:88:5f:44:c0:7b:
e6:f0:b3:12:ec:ef:ca:0b:d2:33:9c:a8:28:ab:cf:
48:92:a5:ec:7b:47:3e:1a:53:e2:7b:35:d1:a0:e3:
89:03:94:fb:40:f5:00:79:d6:64:9f:c1:48:41:b9:
aa:b4:a5:18:76:a9:ce:0d:80:2e:8f:6d:68:d2:fb:
03:a3:14:84:35:0a:77:f4:26:84:1e:62:0d:c0:83:
cf:fd:89:78:46:d0:b8:63:a5:5c:1d:ad:b8:a8:3c:
e2:39:52:83:eb:1c:1c:b7:f4:5f:96:cc:a2:36:ec:
82:44:92:c6:96:3b:b6:e1:f5:5d:4c:bb:5e:1a:48:
81:c7:42:8c:04:de:dc:ec:32:04:d7:ce:c5:32:d2:
e1:c5:32:d6:ea:a1:6d:d5:e9:ea:66:b2:ed:59:ed:
61:84:2e:00:04:1b:bd:75:12:00:73:3a:05:b1:12:
9c:3e:cb:c4:37:62:e0:bf:3b:40:2f:ab:59:7a:7b:
81:6c:c6:1e:d5:8d:02:71:dc:34:cf:0f:d6:16:2b:
7c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DC:A1:13:B9:06:77:C6:CA:F7:92:DF:E1:53:77:38:D0:73:07:58
X509v3 Authority Key Identifier:
keyid:33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:08:b0:2e:7d:0c:df:bc:91:c8:77:ac:ec:20:27:04:2d:d5:
2f:30:54:33:07:7e:85:56:3b:94:87:37:ac:e5:1c:b1:7a:8f:
ae:72:61:96:e7:0d:14:53:51:6c:8d:88:d7:58:da:4a:1e:2f:
ee:ae:09:71:f3:03:7a:f7:cb:92:68:83:55:1a:fc:08:d3:ee:
fa:68:2d:44:7c:bf:e7:a8:38:24:41:a1:07:0a:72:fc:88:96:
56:64:c9:fd:70:8b:5b:24:f7:3c:b4:89:6a:ba:0b:a9:a1:40:
42:8b:ff:50:b6:2a:a9:a6:d7:c7:6c:31:c5:78:ba:d1:fc:15:
c8:79:fb:25:3a:fc:37:75:eb:a9:80:a5:5e:4f:ff:ad:ab:22:
f0:76:a8:db:ca:1f:6c:e2:e8:72:c9:5e:0a:fd:23:62:4b:3c:
f5:e3:85:68:08:c2:99:f0:79:66:4a:a2:ac:68:9d:00:6d:ec:
53:ed:ad:14:35:92:a0:e0:b3:0e:58:4b:60:03:5e:00:39:97:
9d:53:d7:77:e0:e3:03:16:78:f2:d3:b5:b7:01:62:6f:39:b0:
3a:f9:30:29:06:e9:28:e7:be:f6:0b:56:a1:ca:6b:cd:82:fb:
21:53:dd:fe:45:75:25:47:fb:19:f4:b6:83:57:4a:f9:d3:a8:
4d:3d:8f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:49 2025 by rpki-client