Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
File: tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft (raw, json)
Hash identifier: Ltyw4VZCHBdNI4dazr2SPkCfdPI4qSa42ZA76MPzil4=
Subject key identifier: EC:B6:22:B1:8F:33:55:B3:3C:4D:37:5A:8F:2A:96:E0:20:AA:7B:32
Authority key identifier: B5:0E:DF:C9:6D:2B:61:78:86:89:53:31:42:96:9E:65:56:65:12:AA
Certificate issuer: /CN=b50edfc96d2b61788689533142969e65566512aa
Certificate serial: 0197B934118C1002EDF0D2DA95FB8E94D6BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
Manifest number: 1534
Signing time: Sun 29 Jun 2025 01:01:26 +0000
Manifest this update: Sun 29 Jun 2025 01:01:26 +0000
Manifest next update: Mon 30 Jun 2025 01:01:26 +0000
Files and hashes: 1: tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl (hash: 890BKa57wyrwlgS/Yl7frafcZRG5ZSIbaccPpao47rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:11:8c:10:02:ed:f0:d2:da:95:fb:8e:94:d6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50edfc96d2b61788689533142969e65566512aa
Validity
Not Before: Jun 29 01:01:26 2025 GMT
Not After : Jun 30 01:01:26 2025 GMT
Subject: CN=ecb622b18f3355b33c4d375a8f2a96e020aa7b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:27:b6:9d:dc:47:33:43:a9:72:65:30:3f:
51:be:3b:e5:fa:cb:12:3c:bf:54:a6:e6:01:41:68:
c9:7d:e1:57:f1:ac:86:15:6b:e4:e3:e3:20:d3:9d:
b4:6b:b4:cf:68:84:44:e7:e8:04:48:3c:db:c0:25:
e4:ba:30:b8:67:a4:6f:a5:10:5a:db:3f:b6:b1:da:
a3:d8:ad:3a:c5:00:e3:30:56:f2:6b:38:23:5e:27:
5a:8c:bb:7a:c7:51:3c:91:46:5f:08:0f:2e:a2:f1:
00:46:f2:3c:20:18:38:75:05:f1:62:ec:08:c0:ee:
b7:92:14:4b:8f:b4:6f:eb:42:73:0e:98:f3:6f:43:
0e:d3:ce:1c:54:94:fc:60:c7:c1:25:e1:a4:cb:a4:
59:10:6b:43:b7:49:22:20:64:cd:2b:92:68:b2:ce:
3c:2c:35:bd:19:c6:00:e0:95:a8:d7:0c:0f:d9:8c:
69:f9:20:b9:bd:cf:57:9b:0d:df:79:35:c1:68:2b:
d0:5e:e4:3d:60:01:84:a0:a1:a6:f5:f3:f7:53:fc:
10:a5:67:a0:e8:ee:b8:36:0a:3d:68:2d:89:a8:e4:
4e:ec:50:01:b4:c8:c0:bf:42:9b:26:3b:16:53:ba:
1c:c4:48:3a:65:8c:c5:1f:3b:3e:05:d2:78:77:1b:
59:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B6:22:B1:8F:33:55:B3:3C:4D:37:5A:8F:2A:96:E0:20:AA:7B:32
X509v3 Authority Key Identifier:
keyid:B5:0E:DF:C9:6D:2B:61:78:86:89:53:31:42:96:9E:65:56:65:12:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:85:0a:c9:30:a8:98:f6:aa:f2:21:77:d1:4a:e9:fc:07:04:
09:be:df:df:5a:e8:1b:32:b3:4b:bd:d4:ed:0f:18:40:9c:a8:
87:3c:eb:9f:da:29:2b:3c:2b:13:53:70:09:61:ae:b6:fa:2e:
40:31:9c:7e:f5:f6:23:f0:23:d2:82:6a:6a:6c:bd:fc:91:49:
83:55:f1:81:37:6e:e4:1f:e3:da:f1:1c:77:5a:01:23:d1:11:
ed:37:8c:54:87:4a:ae:77:db:44:4e:17:da:79:90:6f:8a:83:
5e:23:9c:63:4c:cd:0c:4f:a2:0c:48:dc:f8:32:0f:5c:b5:e2:
03:4c:1a:1a:28:77:b1:c5:43:c4:6e:71:90:67:da:f1:03:c9:
d4:a5:74:ed:68:85:39:3d:53:33:d3:99:a5:57:bb:8e:bc:73:
1a:5b:a0:b6:6b:e0:fc:5c:a4:6c:cf:1a:f1:b8:0d:20:33:78:
1f:c9:df:2d:71:9a:e6:d7:21:9d:e1:68:ad:93:ee:9e:f6:2d:
6d:d4:0f:17:f0:b4:0b:29:f2:4f:e7:7d:0e:7b:b4:7b:d3:95:
48:8c:d6:be:f0:31:a6:24:f4:25:2b:b5:1c:9e:7d:e4:5f:6e:
00:90:6c:61:cc:e1:86:39:1e:90:c4:22:48:1f:5f:e9:cc:a5:
85:e1:62:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:18:55 2025 by rpki-client