Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
File: cc2ljxUk2CM2224M8qKf-vLaifg.mft (raw, json)
Hash identifier: +G2rC9rmqzvtzl2Wwm7AMhSac2itqW7DhVMGqMrfStg=
Subject key identifier: 16:5E:81:3A:17:F3:05:18:3B:99:C2:9A:30:2A:14:BB:0B:F7:3D:4E
Authority key identifier: 71:CD:A5:8F:15:24:D8:23:36:DB:6E:0C:F2:A2:9F:FA:F2:DA:89:F8
Certificate issuer: /CN=71cda58f1524d82336db6e0cf2a29ffaf2da89f8
Certificate serial: 0197B88EF7A313DBEB50FD5B8912B814B28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
Manifest number: 0DD1
Signing time: Sat 28 Jun 2025 22:01:06 +0000
Manifest this update: Sat 28 Jun 2025 22:01:06 +0000
Manifest next update: Sun 29 Jun 2025 22:01:06 +0000
Files and hashes: 1: cc2ljxUk2CM2224M8qKf-vLaifg.crl (hash: X9drfulnRq+KCiBxyb4NustIqA6Dg1pK+VezLtgTeDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:f7:a3:13:db:eb:50:fd:5b:89:12:b8:14:b2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71cda58f1524d82336db6e0cf2a29ffaf2da89f8
Validity
Not Before: Jun 28 22:01:06 2025 GMT
Not After : Jun 29 22:01:06 2025 GMT
Subject: CN=165e813a17f305183b99c29a302a14bb0bf73d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c4:91:90:a5:b2:e1:f8:f4:9e:c6:2c:be:a4:
ba:e4:01:55:85:1d:7e:41:bc:e8:41:9c:7f:d0:eb:
98:aa:00:18:f0:40:b2:77:2d:8e:0d:bc:fb:f0:de:
85:1e:2b:03:e1:a0:dc:ee:3c:96:4d:3d:96:c2:ee:
e8:89:ba:6f:68:bb:1b:7a:50:de:2c:5f:aa:ec:e2:
61:67:98:dd:76:df:a7:27:e0:53:06:33:46:f0:97:
ce:fd:11:f5:b6:99:0c:89:2a:30:43:6d:ac:94:89:
bf:10:c4:f6:07:8d:32:cb:3c:fd:cd:60:7e:a6:9e:
80:0b:59:61:db:5d:60:4a:12:d7:43:58:c9:91:2a:
08:60:d1:d3:bc:19:01:f6:16:12:8f:69:e3:15:68:
1d:24:89:fa:6c:f4:f4:e2:c2:09:5d:96:5e:13:97:
ac:16:b9:be:e1:98:71:f2:f6:c1:c4:16:ca:0a:a6:
78:8e:ba:fd:7a:d4:93:47:0c:af:be:a0:0d:fa:c1:
9b:a0:e3:a4:27:9c:33:f9:bb:ab:40:f1:e2:00:9b:
d3:65:47:46:bd:75:f0:66:2b:45:dd:b1:f1:00:49:
40:53:37:79:51:c4:a5:da:b6:03:3a:70:2d:88:fb:
0d:b5:cf:1b:35:25:d3:98:80:86:2a:14:32:44:51:
e4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5E:81:3A:17:F3:05:18:3B:99:C2:9A:30:2A:14:BB:0B:F7:3D:4E
X509v3 Authority Key Identifier:
keyid:71:CD:A5:8F:15:24:D8:23:36:DB:6E:0C:F2:A2:9F:FA:F2:DA:89:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b7:2c:a4:dd:c9:9d:41:cc:23:17:32:61:5e:b8:bd:77:1c:
8c:b9:63:62:c5:09:cc:fe:84:81:ac:b8:bd:ed:7c:61:9f:05:
f9:c1:54:1c:42:24:8c:24:91:1e:61:86:d9:80:0c:b2:e7:66:
e7:cf:07:f7:0d:8b:d3:9c:f9:4f:7b:c9:cd:42:db:0b:9c:83:
bb:2f:52:ac:34:58:0f:ad:38:6c:f3:97:d2:1e:24:2c:28:df:
f8:1a:2a:90:a8:1c:3e:5c:49:cd:fc:bb:f5:85:81:39:de:72:
a9:90:a8:7e:01:da:c3:1a:56:23:0c:c8:8b:9f:40:96:21:f1:
f3:95:89:a5:61:81:5a:80:08:86:8d:69:86:f5:d6:16:f0:fb:
90:4c:9d:b2:86:f7:71:bd:16:a4:72:dd:8e:03:03:e6:01:10:
34:38:91:81:27:7b:e9:af:62:38:dc:a0:3e:fa:54:19:20:29:
4e:98:8a:96:da:73:39:ac:49:e3:71:97:85:7a:49:ab:20:e0:
25:5a:0c:5b:36:ff:b9:3e:6c:4c:4c:c2:77:f0:2e:ea:10:38:
e7:20:01:2b:76:08:43:12:ba:48:9b:42:74:c8:a2:70:6f:18:
4f:7b:11:e3:27:75:dd:77:63:36:fd:10:76:e9:9e:6b:bb:8e:
50:c7:df:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:39:46 2025 by rpki-client