Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft
File: d6TN722YqQcT__52cRNId5pjKgo.mft (raw, json)
Hash identifier: Kl6N+0wRJVjbNiPJozVIKkZ0Zost+zmvhoTZ2CBsyDI=
Subject key identifier: EE:50:3C:DB:BA:AC:2A:08:0A:3D:74:02:B2:63:D6:7B:4E:DB:23:4E
Authority key identifier: 77:A4:CD:EF:6D:98:A9:07:13:FF:FE:76:71:13:48:77:9A:63:2A:0A
Certificate issuer: /CN=77a4cdef6d98a90713fffe76711348779a632a0a
Certificate serial: 0197B6D77241E72D699EBC7A091C183CC314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6TN722YqQcT__52cRNId5pjKgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 14:01:02 +0000
Manifest this update: Sat 28 Jun 2025 14:01:02 +0000
Manifest next update: Sun 29 Jun 2025 14:01:02 +0000
Files and hashes: 1: d6TN722YqQcT__52cRNId5pjKgo.crl (hash: ecjy//kaqXiyM7ppNVHp/YTB3mLKt3RvpgYnm1QpfJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6TN722YqQcT__52cRNId5pjKgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:72:41:e7:2d:69:9e:bc:7a:09:1c:18:3c:c3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a4cdef6d98a90713fffe76711348779a632a0a
Validity
Not Before: Jun 28 14:01:02 2025 GMT
Not After : Jun 29 14:01:02 2025 GMT
Subject: CN=ee503cdbbaac2a080a3d7402b263d67b4edb234e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:11:1a:a5:fa:82:0c:ed:25:28:1f:9a:c1:
ca:fd:36:f2:93:1e:d8:9d:75:66:ba:b4:66:4f:7b:
36:fe:9f:c1:d2:d0:bd:cc:5b:b4:f9:a1:86:8e:1c:
89:cb:23:13:15:69:42:69:3c:1f:f7:35:6e:c9:66:
01:9f:22:03:38:8e:e8:28:2b:ef:96:46:4b:a4:5a:
6c:20:1f:48:ad:e7:2b:2a:ee:54:16:ef:72:3c:ca:
27:46:dd:15:44:b1:dd:ae:1b:96:33:ab:39:00:79:
55:5f:8b:69:53:0c:a2:75:df:61:27:73:4a:d7:05:
af:49:d5:02:ca:ae:45:20:8b:a7:69:16:20:04:74:
4f:72:e4:f7:a3:26:8c:b2:ad:ef:a3:bd:9e:37:1b:
60:0b:de:9c:94:c1:ae:d4:bc:70:a4:f3:73:82:46:
dc:58:d8:a5:ec:8d:29:34:3e:0d:3a:51:96:34:a9:
6a:cf:4a:fb:88:64:3c:13:fd:e6:c4:bf:23:9d:f8:
ba:29:6f:a3:71:ff:c0:5f:56:44:cd:3b:14:de:62:
91:b0:00:9f:09:d2:a4:ad:b4:94:cd:0b:df:ea:ce:
0b:26:2c:b3:62:61:c0:8b:5b:5a:73:f1:76:23:e8:
26:2b:eb:36:29:df:7e:1c:9e:07:8c:cb:c7:ef:54:
41:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:50:3C:DB:BA:AC:2A:08:0A:3D:74:02:B2:63:D6:7B:4E:DB:23:4E
X509v3 Authority Key Identifier:
keyid:77:A4:CD:EF:6D:98:A9:07:13:FF:FE:76:71:13:48:77:9A:63:2A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6TN722YqQcT__52cRNId5pjKgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:06:55:15:0f:ab:ab:b9:ac:ae:dc:74:81:f9:7a:fa:7c:0b:
1e:96:e1:4c:ec:1c:8d:81:59:6b:72:31:f7:e3:82:10:55:ba:
41:f8:fc:d2:a7:23:72:28:03:58:08:1c:d1:19:6a:09:cf:dd:
ac:e9:d7:e9:c0:b6:92:e7:10:ce:0e:e9:df:72:cc:6c:eb:40:
d3:48:72:7c:ca:9c:4d:17:83:42:f6:76:7f:4c:11:5d:5a:1d:
ce:85:93:4c:18:c9:37:1c:69:82:0f:d9:c4:2b:44:c5:c4:4d:
62:43:90:c7:61:14:00:f8:22:14:40:08:65:0b:44:c0:58:50:
22:cb:8a:6c:5d:00:7a:c7:b1:b8:7a:ca:7e:75:84:a7:82:f6:
8b:13:9c:38:85:f8:bd:b6:f3:7b:4c:56:db:f2:c2:86:01:0d:
03:79:6e:4c:df:ac:c4:39:22:9b:41:5a:3c:86:67:6b:89:b9:
cd:98:e8:1e:83:5c:33:fe:c4:e8:dc:c6:5c:fb:cb:a3:eb:2f:
5f:03:cf:2a:e3:16:e8:01:89:40:42:0f:3e:fd:22:0c:dc:c8:
a9:8e:d9:37:23:9b:ad:51:e5:b9:d0:14:02:db:2a:22:1a:de:
07:6c:ba:b9:ce:06:e8:ec:e2:ef:07:7d:56:a5:f3:a6:e4:ab:
46:69:bb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:31:34 2025 by rpki-client