Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
File: C7M4e-bSDUos4TzAkuh_d3uLmVY.mft (raw, json)
Hash identifier: bTJpXINDAdgpgw+MolwLHXB3QoAb3Mh0FS7Bu9chEsE=
Subject key identifier: 6D:D2:F1:03:3F:3C:41:DB:0C:B3:E2:85:FD:EB:50:80:09:E1:C1:22
Authority key identifier: 0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
Certificate issuer: /CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Certificate serial: 0197B5FC894C9D349DABCA7CDC6A3077C6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
Manifest number: 1089
Signing time: Sat 28 Jun 2025 10:01:55 +0000
Manifest this update: Sat 28 Jun 2025 10:01:55 +0000
Manifest next update: Sun 29 Jun 2025 10:01:55 +0000
Files and hashes: 1: C7M4e-bSDUos4TzAkuh_d3uLmVY.crl (hash: f8dn1DFcRwkp89Y3WntskhvJIJWHEEnt/oFtTtLvlRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:89:4c:9d:34:9d:ab:ca:7c:dc:6a:30:77:c6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Validity
Not Before: Jun 28 10:01:55 2025 GMT
Not After : Jun 29 10:01:55 2025 GMT
Subject: CN=6dd2f1033f3c41db0cb3e285fdeb508009e1c122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:5f:14:ed:38:0c:76:8a:fa:f0:d5:3d:67:
09:fb:48:db:88:6c:8c:d0:aa:e9:10:a2:c2:18:01:
5d:5d:7f:bf:f6:60:bd:ad:d4:f0:14:d0:2f:b0:24:
22:d2:90:55:84:a3:60:cd:7e:b1:04:ea:96:ea:f0:
67:91:87:a5:45:09:b4:9a:f4:30:63:b0:2c:25:23:
db:e7:d0:3b:ac:ea:d9:12:6a:fe:67:04:f6:d0:21:
56:dc:99:eb:03:37:15:f3:77:6f:99:5b:97:f1:9c:
22:56:76:57:35:3e:f1:aa:46:14:5d:ad:42:1d:e6:
67:33:c5:7b:75:f4:30:ce:98:05:d7:fe:0f:ed:20:
71:b9:65:96:22:5a:88:99:3d:55:3c:a1:a5:30:ee:
0b:57:29:1d:c4:3d:55:cf:1f:ea:6e:dd:66:a4:8f:
6a:f8:3a:06:3e:77:ff:f1:8b:a7:f1:e9:5e:11:ac:
12:ca:d6:0c:9f:46:41:02:51:a5:eb:2b:bf:32:fa:
ce:cd:0d:7a:d7:5a:4b:c4:5d:80:a7:0e:d6:53:be:
e3:ad:dd:c4:8a:8c:21:bd:37:fa:7a:62:2c:9f:42:
29:ed:a3:9b:49:e5:c9:08:fc:a9:d8:cc:b5:b9:df:
87:b4:ad:82:91:2f:60:47:66:b0:87:98:9d:a6:6b:
16:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D2:F1:03:3F:3C:41:DB:0C:B3:E2:85:FD:EB:50:80:09:E1:C1:22
X509v3 Authority Key Identifier:
keyid:0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:47:76:51:a2:80:83:14:90:2a:c4:47:f1:b4:82:5d:84:22:
21:48:c9:d0:5a:fe:03:89:3c:ca:3a:c4:c0:f4:b2:80:79:de:
c3:7a:71:98:95:20:22:6f:cb:3c:08:1c:db:31:69:1e:31:b1:
6e:0d:25:66:1c:ed:fc:61:ff:41:ac:22:9e:08:eb:7d:c0:23:
c4:7c:bc:b6:19:dc:10:94:51:28:d1:89:a5:14:5d:9b:7d:40:
c8:e2:b6:cb:53:28:15:63:a1:96:2a:d5:bd:74:52:4a:fc:3b:
79:30:82:0d:36:7f:b1:16:61:10:23:63:03:ff:e4:2e:80:d5:
a1:4d:42:f4:34:9f:72:34:b3:e3:8c:fd:75:43:0c:17:af:a8:
ce:0c:f9:96:23:0e:23:a7:b6:ba:b6:15:84:e1:c3:e9:40:8b:
30:a3:ef:20:d3:6a:be:79:bc:8f:bc:4f:71:59:0c:33:77:38:
fa:bd:10:1e:80:90:5e:83:ce:d9:1a:4b:a4:18:d8:77:69:27:
a9:e8:05:c0:0f:a3:52:35:0d:e2:8f:95:ac:b4:85:b1:9a:39:
d6:c3:4d:4e:94:e9:29:07:a9:53:5a:fa:9e:8f:e5:4f:77:fe:
8c:1b:30:22:fa:4f:0a:07:65:02:62:d4:b3:0f:4a:25:f2:25:
74:d2:b6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:16 2025 by rpki-client