Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
File: MenbQitjczJSiuYo2dpQ5AOX-2Q.mft (raw, json)
Hash identifier: MTpaEoGtJOZk4jwGGSD5MqaOYkMzYSOIp/TokzLA7hQ=
Subject key identifier: A2:92:31:11:74:B6:DF:92:38:15:BD:F9:CC:DC:49:2C:40:6E:6E:AF
Authority key identifier: 31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
Certificate issuer: /CN=31e9db422b637332528ae628d9da50e40397fb64
Certificate serial: 0197B70E8661942EC772C2749842FB2E4C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
Manifest number: 01C3
Signing time: Sat 28 Jun 2025 15:01:11 +0000
Manifest this update: Sat 28 Jun 2025 15:01:11 +0000
Manifest next update: Sun 29 Jun 2025 15:01:11 +0000
Files and hashes: 1: MenbQitjczJSiuYo2dpQ5AOX-2Q.crl (hash: 7hSILwuxIyIVOg4gZdsRPrBSHDgFMjvLUajeBtBE4LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:86:61:94:2e:c7:72:c2:74:98:42:fb:2e:4c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31e9db422b637332528ae628d9da50e40397fb64
Validity
Not Before: Jun 28 15:01:11 2025 GMT
Not After : Jun 29 15:01:11 2025 GMT
Subject: CN=a292311174b6df923815bdf9ccdc492c406e6eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:e4:ec:79:c7:78:c2:97:0e:24:65:ad:5b:
d6:1e:70:39:c2:b7:20:ed:3a:bd:cf:37:d4:09:72:
f2:9b:73:1a:0f:58:cd:44:15:09:59:ac:3a:3f:d5:
06:ca:b2:97:ce:94:b7:9c:3b:d3:2f:63:cb:6e:eb:
e7:0a:02:9d:e8:ee:c3:3f:dd:d2:b0:aa:b5:af:ff:
f7:b3:e9:af:31:a7:60:39:35:34:c8:7a:c1:57:8b:
9c:22:8d:e6:d5:b2:dd:fd:0d:5f:7a:1b:75:8a:f4:
87:40:7e:8c:f2:e4:38:a4:25:4e:2e:94:81:b4:62:
5b:9d:25:03:eb:d7:21:0a:b0:fb:a2:30:ae:51:02:
7e:ba:d3:bf:f2:7f:1f:6d:a7:16:17:cf:3d:6e:33:
24:57:07:91:ea:50:c7:53:ff:f9:9b:16:e6:4c:9c:
51:7f:d9:ce:05:c0:84:7c:9d:e6:50:53:27:d2:50:
2b:b3:3e:f7:80:5a:db:fa:e1:97:e8:c4:75:7f:b4:
8b:e3:e7:00:11:4a:51:ea:f6:70:f0:d9:a4:96:ec:
ae:a3:15:dd:77:75:4b:fc:0a:67:aa:e6:aa:8a:6a:
5c:86:04:fa:76:23:99:28:cb:cf:69:62:28:dc:bd:
05:84:84:4a:c6:3c:1b:60:e5:3f:e5:47:f7:7c:6e:
2f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:92:31:11:74:B6:DF:92:38:15:BD:F9:CC:DC:49:2C:40:6E:6E:AF
X509v3 Authority Key Identifier:
keyid:31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c6:f1:c0:a9:30:96:b3:3c:94:cf:9f:ec:70:01:bd:84:7a:
0f:d8:49:09:75:bd:72:d1:7e:f5:c9:79:65:83:e8:0d:ce:21:
77:40:14:7d:99:a6:5c:f6:dd:a7:d1:21:19:39:02:03:bc:1b:
30:0d:00:51:1a:92:59:88:9d:5b:d8:96:0d:56:7a:2c:89:7e:
1b:89:8e:79:08:56:33:1b:79:17:78:56:c0:27:6d:d7:4e:e0:
dd:20:b5:56:68:9b:fd:d6:c5:ee:18:e5:73:b6:5a:f4:7e:cc:
09:5d:96:50:59:7a:5b:44:03:48:23:41:0f:fa:4d:13:66:af:
eb:26:09:b1:ce:64:e1:66:6e:a5:26:2b:8f:46:cc:85:04:48:
e5:70:f0:b6:a1:19:cb:da:c8:52:d8:0f:93:0e:89:22:40:51:
85:fc:d4:22:de:42:45:a6:2c:61:e6:f9:6c:34:ab:26:49:c1:
07:1d:9e:33:05:ee:f2:98:51:9d:c4:81:00:84:5e:71:d2:5a:
5e:7d:73:3e:4b:40:2a:8e:e8:c1:16:d3:68:a9:fd:90:4f:ba:
cc:bb:b7:e6:69:18:d2:bd:20:33:6a:04:c3:c6:6a:ac:86:6d:
5e:61:22:3e:95:f0:2f:6f:f3:20:f0:8d:72:fd:df:47:fc:76:
f7:9f:b8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:51 2025 by rpki-client