Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
File: C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft (raw, json)
Hash identifier: zBCDzfbr6QWTid69lvK+EijczyZL1hcGG8fxMIsT7QU=
Subject key identifier: B2:D0:6F:25:D2:1A:48:F3:90:0A:0C:9A:19:05:48:5B:23:BF:70:A1
Authority key identifier: 0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
Certificate issuer: /CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Certificate serial: 0197B6A05BCE837A4F27D71361A5758B531D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
Manifest number: 1542
Signing time: Sat 28 Jun 2025 13:00:51 +0000
Manifest this update: Sat 28 Jun 2025 13:00:51 +0000
Manifest next update: Sun 29 Jun 2025 13:00:51 +0000
Files and hashes: 1: C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl (hash: HiaFD6Gi7Ld9eW6PkW7jCjNp+XRp2DOIkTljm+S4svs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:5b:ce:83:7a:4f:27:d7:13:61:a5:75:8b:53:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Validity
Not Before: Jun 28 13:00:51 2025 GMT
Not After : Jun 29 13:00:51 2025 GMT
Subject: CN=b2d06f25d21a48f3900a0c9a1905485b23bf70a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:b3:6d:e2:57:a2:c8:7e:74:69:7d:e3:5e:
1b:ea:3e:5d:00:27:94:64:d5:a0:cb:c7:6a:45:8b:
82:27:e4:b8:da:8c:78:e9:4d:cb:b8:fe:02:38:c7:
8e:83:64:36:61:69:13:69:91:85:46:f6:21:86:59:
be:25:e9:ed:c3:65:ec:29:fc:34:23:36:e6:59:a2:
2d:a5:80:ec:54:5e:b7:57:91:d9:96:5b:35:10:10:
21:82:6f:bb:46:44:36:62:6b:e3:36:c8:e8:4a:78:
1b:67:9b:05:8d:97:fe:ea:e7:23:05:e8:13:51:aa:
1d:bf:ff:c1:67:68:97:07:8f:96:fb:1f:45:5f:9c:
90:81:c8:65:8a:e0:34:55:7d:f4:e1:bb:da:b4:ff:
8d:89:3c:0c:6d:70:0c:d2:c8:46:ff:66:34:7b:12:
9b:88:42:30:6c:7a:e6:a4:ce:3b:af:71:30:b2:dd:
1d:fe:a2:4f:88:8e:25:04:13:5a:bc:7e:a9:2c:13:
0d:a8:dc:20:25:40:32:db:0f:cd:d7:f1:7f:eb:6f:
c6:bc:90:92:fe:9f:22:07:a5:b4:e1:77:11:8e:85:
7d:1b:05:53:37:ff:7c:88:18:fc:19:9c:b7:6b:a7:
31:0e:91:f1:fb:43:01:3f:e7:0f:64:30:00:cd:41:
1b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D0:6F:25:D2:1A:48:F3:90:0A:0C:9A:19:05:48:5B:23:BF:70:A1
X509v3 Authority Key Identifier:
keyid:0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9d:9c:0c:b1:ad:34:1c:8f:26:44:54:4b:1f:60:36:84:55:
1d:9a:a8:39:9a:04:3f:97:db:29:c6:84:9b:82:87:cd:87:57:
3d:36:e6:1a:76:88:e8:17:10:2e:b1:11:b0:06:3e:6c:b1:e5:
4c:31:9a:cf:42:19:93:e2:61:41:42:58:aa:cd:7d:38:86:71:
62:51:b0:ca:89:77:9c:7e:11:bc:3f:d1:56:64:b5:5b:12:9a:
88:08:58:59:d6:26:7c:47:aa:22:7f:2b:21:51:33:df:7b:56:
5d:8d:c2:0d:11:82:4f:94:71:d9:98:ca:4f:17:6a:a2:28:09:
90:05:72:8e:68:e4:fc:f1:23:ad:07:6e:5d:6e:d7:f0:e5:c3:
c3:8c:e1:d9:57:39:a3:97:7e:ff:97:94:4d:50:39:31:c9:e6:
c8:b3:ed:f4:57:4d:4d:84:5c:45:dc:ef:f3:06:d8:d5:c6:79:
cc:9c:d2:5a:b4:28:77:e1:a6:36:0f:0a:e7:91:c9:2c:c0:af:
80:f9:04:bf:6c:6b:95:d4:c9:fa:0d:94:55:24:1c:bf:2e:3f:
1c:40:34:38:f5:61:03:c7:f3:fc:09:a9:3a:e7:62:0f:c4:e2:
1f:9d:bb:31:7d:9b:04:97:6a:e6:e3:90:f2:d6:3b:b9:66:fd:
33:28:3f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:07 2025 by rpki-client