Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
File: c63mtioyesxAP-7D4asctt4tXgw.mft (raw, json)
Hash identifier: LPb6jj3wR7HhKmqdqpu1XxxXVy8ZrDnsk8UXjrqBft4=
Subject key identifier: 47:9B:49:C9:D8:E1:ED:4E:E9:B1:AB:B6:27:87:05:7C:13:B5:EE:AF
Authority key identifier: 73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C
Certificate issuer: /CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
Certificate serial: 0197B6A076B6BBE935AC6B2AEE5E36DB2FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
Manifest number: 0F7C
Signing time: Sat 28 Jun 2025 13:00:58 +0000
Manifest this update: Sat 28 Jun 2025 13:00:58 +0000
Manifest next update: Sun 29 Jun 2025 13:00:58 +0000
Files and hashes: 1: c63mtioyesxAP-7D4asctt4tXgw.crl (hash: DLg3jVQCTVhB0tAmgU6UV9DDZ0TISDQurUZr71jiXkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:76:b6:bb:e9:35:ac:6b:2a:ee:5e:36:db:2f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
Validity
Not Before: Jun 28 13:00:58 2025 GMT
Not After : Jun 29 13:00:58 2025 GMT
Subject: CN=479b49c9d8e1ed4ee9b1abb62787057c13b5eeaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:f1:3a:2c:3e:d1:7c:44:c8:fb:25:ca:4c:
0c:3e:dc:60:a9:c0:ea:96:fe:62:7d:77:e7:a8:b4:
32:60:93:00:5e:b6:1a:48:1f:3d:d2:23:f6:a8:93:
ad:65:ca:82:73:09:23:4e:a4:03:32:08:e8:79:3e:
af:6f:bd:c5:22:c2:a5:30:f9:29:12:6d:ae:33:84:
e6:7d:84:a0:26:24:55:95:ea:66:dd:e3:43:1c:67:
91:82:26:2b:04:cf:23:77:59:20:45:fa:ad:10:9b:
50:db:1c:f9:ef:52:91:01:7f:df:47:3d:20:2f:63:
5d:59:3b:33:77:ba:dc:dd:e8:c2:e4:b7:25:b4:5d:
ea:4b:45:ac:2c:a6:63:b2:cb:9c:be:57:62:bb:c0:
e5:e6:9e:3f:e6:ce:ac:89:fc:28:3a:a8:68:3d:db:
cb:f2:5f:2e:ef:26:04:ac:b6:79:a6:94:dc:aa:45:
4b:d1:fc:60:44:e3:60:b7:14:0d:a9:11:50:a5:5a:
79:c9:2c:5d:d8:a5:c3:68:d6:be:98:b0:fb:25:22:
1e:32:7b:cb:04:ca:db:33:0b:8f:20:01:9b:91:23:
1d:a2:09:51:ec:aa:44:ee:cf:2d:d2:c5:4a:14:5b:
f5:32:37:b1:0f:2b:48:00:8a:39:44:f4:ba:9a:44:
12:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9B:49:C9:D8:E1:ED:4E:E9:B1:AB:B6:27:87:05:7C:13:B5:EE:AF
X509v3 Authority Key Identifier:
keyid:73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ad:d6:0b:c8:0b:39:3b:84:fe:bb:37:81:61:67:35:02:88:
24:4a:d4:b3:8a:e9:ea:2d:82:13:c3:66:70:30:de:bf:00:79:
23:63:e2:58:71:ee:b8:ad:1b:cd:4d:3e:8c:35:5a:1a:f0:60:
78:e0:d8:74:3f:c5:ed:ba:22:d7:a1:75:c2:92:d8:4d:39:c6:
ed:71:7b:dd:3d:8e:ed:7a:af:b6:87:c0:fa:79:9f:85:7a:95:
0e:9a:7e:8c:d3:45:e1:75:6c:6d:20:d4:76:61:cf:cf:f9:59:
b3:74:72:ef:53:89:46:17:c5:e8:c6:3b:4e:74:a6:2a:1c:d7:
d0:58:e0:ff:54:b8:9f:94:5f:30:8f:64:6b:04:19:71:98:f8:
df:c7:22:6f:a9:2c:b7:37:3c:f4:ee:3b:e0:db:a4:e6:0d:c3:
ea:42:3f:d4:6e:86:b5:7c:4b:77:5f:27:16:54:e8:1a:80:16:
32:56:4b:a6:96:68:2e:6b:72:a2:8b:21:28:95:1d:4b:8c:4c:
51:d3:f2:5e:34:0e:03:4e:a6:83:77:e3:8b:bb:06:6b:38:76:
be:58:f0:e7:37:41:f1:94:cc:16:b1:c9:d0:ba:03:e5:3d:81:
ab:26:8d:ef:64:50:1b:47:e6:4d:03:b2:17:81:23:f6:af:f8:
67:e3:2f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:23 2025 by rpki-client