Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
File: w6PDZsu4xcf3NZGdFQovrwwI-F8.mft (raw, json)
Hash identifier: mlC1+8mlNb9hRgGaNXvgXiOkXZM8sMNMA9U8IcQ4Nz8=
Subject key identifier: 83:74:C3:A0:7A:AB:D2:48:54:BD:9F:0E:BC:86:2E:AB:60:28:0C:36
Authority key identifier: C3:A3:C3:66:CB:B8:C5:C7:F7:35:91:9D:15:0A:2F:AF:0C:08:F8:5F
Certificate issuer: /CN=c3a3c366cbb8c5c7f735919d150a2faf0c08f85f
Certificate serial: 0197B77C11DF2F91A85210E84AD063069A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
Manifest number: 053C
Signing time: Sat 28 Jun 2025 17:00:50 +0000
Manifest this update: Sat 28 Jun 2025 17:00:50 +0000
Manifest next update: Sun 29 Jun 2025 17:00:50 +0000
Files and hashes: 1: w6PDZsu4xcf3NZGdFQovrwwI-F8.crl (hash: BAGs3HAXw+qza2kD2miCv3kOic9Jstqy8tbmCIWZ/xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:11:df:2f:91:a8:52:10:e8:4a:d0:63:06:9a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a3c366cbb8c5c7f735919d150a2faf0c08f85f
Validity
Not Before: Jun 28 17:00:50 2025 GMT
Not After : Jun 29 17:00:50 2025 GMT
Subject: CN=8374c3a07aabd24854bd9f0ebc862eab60280c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7a:02:12:ee:d8:bb:d4:08:75:05:f7:cd:98:
bc:52:f6:b3:9d:6f:47:5b:a5:40:cd:ca:ab:00:6d:
1a:75:e1:a2:b1:fa:08:e0:88:3d:ee:94:1a:4a:84:
66:43:bf:0f:a0:8a:9f:44:ef:1a:6e:79:e9:80:04:
cd:8f:52:48:c4:92:01:03:29:ac:40:c9:89:ac:8d:
87:a9:c2:54:3d:11:f2:03:e0:b2:57:40:9f:6e:68:
f5:59:ce:a8:07:12:67:f3:9a:c6:47:ea:b9:b5:9a:
14:d6:04:9f:e4:7a:06:69:16:54:13:15:ef:d3:49:
d9:2a:14:a7:d8:6a:22:10:83:44:cd:4f:f1:73:ba:
43:81:f0:54:ee:cb:28:30:34:c0:50:d2:9e:a8:fa:
38:fa:f3:66:be:13:27:26:cc:99:f7:e5:88:df:9b:
18:05:a2:cf:45:d5:25:d0:48:9f:69:30:71:be:c2:
6f:3e:52:47:8f:6b:c9:3f:aa:a8:b5:97:92:ad:ae:
0d:42:22:bc:0d:85:74:04:e0:f8:d3:ad:cb:8b:02:
88:26:56:48:c0:1a:d6:c0:1a:be:5f:2f:1e:15:6f:
d6:26:83:05:e8:35:5f:0c:bc:61:87:37:3f:99:a2:
89:de:bc:e1:89:be:ac:7f:3c:c3:23:84:86:52:2b:
42:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:74:C3:A0:7A:AB:D2:48:54:BD:9F:0E:BC:86:2E:AB:60:28:0C:36
X509v3 Authority Key Identifier:
keyid:C3:A3:C3:66:CB:B8:C5:C7:F7:35:91:9D:15:0A:2F:AF:0C:08:F8:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1a:af:ff:5f:a6:19:28:86:5f:dd:53:ee:df:7c:50:f0:9e:
bc:04:02:f0:bd:84:7d:c4:86:6c:0e:51:44:97:4f:39:42:36:
48:a5:fa:c0:ee:ea:f4:1d:ea:90:1b:f3:88:ae:e8:29:5e:af:
e1:3d:ba:b9:c7:be:5b:c1:4f:97:d9:38:3b:6c:28:df:af:3a:
81:a9:4a:70:76:35:3a:94:a9:94:cc:63:74:36:6d:ce:6a:79:
7f:ef:92:f6:b6:18:0d:f9:7a:58:b6:7b:f0:e5:f3:e2:3d:15:
8b:a0:da:96:74:d8:e2:9c:13:7a:0d:ef:df:99:9c:33:35:9f:
a6:cb:78:cd:04:b2:87:6e:bd:b8:26:63:c8:dd:52:89:8a:ab:
7f:ec:be:30:fd:89:c8:48:6c:a5:34:84:87:f4:a9:57:31:ce:
c0:20:44:64:86:a1:bc:12:fb:28:84:4d:5a:83:d8:35:86:94:
60:e1:0a:a5:4c:40:5f:b5:6e:4e:9d:5f:5c:4c:ac:13:e9:25:
5f:61:69:dc:36:89:f3:f2:7c:6d:73:58:90:3c:e9:f6:95:5f:
5b:04:05:12:43:dc:e1:11:f3:a2:f1:d3:38:30:ac:96:93:4f:
f1:bb:21:c7:59:64:b3:34:b3:3c:48:2a:ca:6f:aa:88:9e:78:
38:ec:2c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:08 2025 by rpki-client