Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
File: ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft (raw, json)
Hash identifier: bjpTHTKNdZTKTMpsTY+IK0rg5Y8qEMS0quWC5GMRZDA=
Subject key identifier: 22:0E:F1:0B:49:6C:81:22:69:E5:99:BF:FE:59:FD:AE:6E:B3:D9:94
Authority key identifier: 44:EC:ED:E7:E0:FF:BD:30:8A:CB:91:12:13:68:DF:8D:6C:B2:E9:61
Certificate issuer: /CN=44ecede7e0ffbd308acb91121368df8d6cb2e961
Certificate serial: 0197B70EF03D476651CA52622A713B2593EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 15:01:38 +0000
Manifest this update: Sat 28 Jun 2025 15:01:38 +0000
Manifest next update: Sun 29 Jun 2025 15:01:38 +0000
Files and hashes: 1: ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl (hash: pA4EG9pfa+TRI7BoryxkBKz+zVirw0I3mKE8h26fqN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f0:3d:47:66:51:ca:52:62:2a:71:3b:25:93:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ecede7e0ffbd308acb91121368df8d6cb2e961
Validity
Not Before: Jun 28 15:01:38 2025 GMT
Not After : Jun 29 15:01:38 2025 GMT
Subject: CN=220ef10b496c812269e599bffe59fdae6eb3d994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:39:74:62:b6:93:dc:73:c6:4c:d0:64:64:
9b:31:d3:c3:a6:27:01:b8:69:4e:8b:73:5f:b7:e5:
23:f5:f4:d3:1f:78:bb:cd:b3:35:98:2f:ce:d7:59:
72:2d:b8:6e:10:cb:4c:c0:3f:e2:50:da:9b:52:c3:
56:45:90:b3:75:51:0d:b8:8a:ca:ba:06:ee:73:0d:
84:df:19:d8:82:1f:42:d1:6a:2c:93:87:a1:50:9d:
b9:06:b5:17:ed:45:77:8f:59:55:57:b7:b5:2a:bb:
fa:92:7b:d1:1f:07:57:57:b5:d4:0f:f2:d1:3a:c0:
e9:b5:5a:b1:d5:35:ac:96:b2:81:a1:6c:4a:c6:07:
62:87:f2:5c:ff:9f:de:19:90:38:c4:d8:5e:c0:a5:
55:de:85:42:59:9e:6c:6f:ed:ec:f1:89:4e:2c:a0:
bb:f7:51:71:4f:b7:68:1d:aa:6f:bb:e2:ce:df:43:
d1:b3:1f:d2:f0:b4:1f:b3:10:b3:7e:07:dd:3a:88:
63:1d:d6:f3:dc:8a:4f:90:36:eb:b8:64:68:7e:ae:
c6:9e:63:51:b6:c3:b1:f7:be:65:54:aa:f9:9a:4b:
52:1c:60:fa:5c:c1:0d:a8:09:c1:04:6a:16:be:1e:
07:66:0e:e9:89:9d:63:f1:56:04:61:36:e9:ed:a8:
4f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0E:F1:0B:49:6C:81:22:69:E5:99:BF:FE:59:FD:AE:6E:B3:D9:94
X509v3 Authority Key Identifier:
keyid:44:EC:ED:E7:E0:FF:BD:30:8A:CB:91:12:13:68:DF:8D:6C:B2:E9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a5:78:98:dd:6d:07:97:34:82:82:3d:04:1b:39:90:78:57:
7a:43:04:69:64:73:20:13:e4:83:e7:7e:42:91:8a:fd:21:39:
a6:6e:b4:1a:8b:3e:8b:21:e3:b5:c8:2a:26:1b:b6:ef:bf:8e:
d7:e5:54:08:a5:ee:a5:1b:06:52:cd:76:ef:18:12:90:74:14:
b3:f1:b6:85:f3:72:de:4d:ad:44:c4:b1:0d:03:e9:3d:27:e7:
f2:5f:67:be:47:b4:fc:bc:66:4b:fb:da:db:88:48:79:08:76:
3d:65:00:25:0b:26:c4:44:a9:53:79:47:32:c9:31:08:67:30:
0f:17:40:b4:25:43:79:79:d4:8b:67:7e:62:d0:6c:2d:2a:a1:
02:3c:bd:ac:91:51:e9:61:09:0d:e6:7d:fd:da:09:f3:7e:cb:
35:ac:68:0b:f2:ae:67:4a:06:7d:a2:6f:c2:a6:43:cb:2e:1f:
7a:4b:d0:a9:97:5e:3b:80:f5:dd:15:c7:d6:e5:56:53:80:73:
00:e2:82:6a:16:0c:d0:9d:36:26:10:55:44:64:52:4c:55:23:
cc:09:52:4a:53:9e:19:12:97:e4:03:63:79:6d:64:4f:12:72:
d5:dd:07:fd:9f:8b:e4:cb:a9:2e:6f:2c:89:0d:d8:b4:1e:bc:
8e:71:74:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:16 2025 by rpki-client