Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
File: eIxPX0SmYGp2F6ls7BhJAKym-A4.mft (raw, json)
Hash identifier: TWEoKQak8taepYZxJTPyK8fhNsVLDkczAsT3iTtWFeQ=
Subject key identifier: D5:7A:39:2C:CC:DF:AB:FF:83:89:2E:C3:7E:1C:46:A4:CB:0D:77:BE
Authority key identifier: 78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
Certificate issuer: /CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Certificate serial: 01977A1D413EAA4C7056790C4D1F63E67A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
Manifest number: 0B54
Signing time: Mon 16 Jun 2025 19:00:26 +0000
Manifest this update: Mon 16 Jun 2025 19:00:26 +0000
Manifest next update: Tue 17 Jun 2025 19:00:26 +0000
Files and hashes: 1: eIxPX0SmYGp2F6ls7BhJAKym-A4.crl (hash: m166dOXjgWzMYZrIISSaWbId3BP4lkrK28rkt4X9fu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:1d:41:3e:aa:4c:70:56:79:0c:4d:1f:63:e6:7a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Validity
Not Before: Jun 16 19:00:26 2025 GMT
Not After : Jun 17 19:00:26 2025 GMT
Subject: CN=d57a392cccdfabff83892ec37e1c46a4cb0d77be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:77:78:32:a8:87:4a:6c:25:fe:66:32:8c:bd:
92:06:e4:55:00:6c:8f:c9:57:00:88:fc:b8:e0:f6:
2e:5b:cb:b8:2a:91:cd:a0:39:57:59:91:90:8f:6a:
c8:2d:43:24:41:d4:3f:e9:cc:81:39:3b:38:14:18:
20:24:6b:0b:c3:92:14:a0:50:57:57:5b:25:23:e7:
08:a6:c5:2f:4a:ca:9e:f0:23:0e:6e:e1:37:9e:20:
f2:b7:d9:3c:d9:a2:ef:3b:4b:9c:ca:75:e9:f1:79:
f9:aa:7e:6d:b8:4b:e5:b5:83:ee:a0:cb:01:b7:c3:
e2:ac:59:7b:23:59:50:70:4c:a8:34:9b:d2:1b:0e:
dc:c1:e2:c2:08:21:c2:c7:0a:68:1c:3a:31:e0:db:
8a:87:2d:8a:0f:20:b9:e3:bf:63:81:be:57:15:57:
af:9d:0d:13:56:16:64:f2:ba:cf:c2:57:3a:b2:83:
d6:d5:1e:97:2a:91:d9:92:9e:ba:e9:42:75:7b:25:
74:75:04:4b:84:62:4b:05:26:4b:57:a2:fb:10:94:
c2:82:8a:10:cf:66:08:d3:2e:26:09:ce:b4:17:2c:
f7:0d:20:65:91:42:21:28:cd:f5:bd:98:8c:ff:cc:
63:42:c5:4a:1d:62:d8:4a:1f:ec:eb:9b:0f:c0:14:
35:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7A:39:2C:CC:DF:AB:FF:83:89:2E:C3:7E:1C:46:A4:CB:0D:77:BE
X509v3 Authority Key Identifier:
keyid:78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:47:08:bd:db:79:55:47:30:6b:e7:01:dd:64:8f:b2:3d:e4:
2b:4f:94:de:be:02:4c:15:e3:c7:7a:4b:00:1c:61:c4:0a:6d:
cb:97:5d:d4:3a:ed:74:63:a7:51:70:ba:fb:e8:13:14:8c:06:
18:8d:5b:d4:03:65:73:15:3a:4c:48:6c:eb:1c:fb:7f:29:c2:
e0:55:5f:7a:c1:d1:4c:a8:3c:43:46:47:ea:9c:a0:c0:77:22:
d8:a1:30:3b:20:3f:4e:61:60:2c:35:2d:6d:15:d9:5a:9b:64:
31:8f:41:a7:b6:09:9b:af:f6:4c:e5:86:da:d4:05:cb:bf:38:
54:58:15:4d:b7:3f:69:1d:9d:26:4d:a9:88:62:ac:ec:5c:01:
8a:99:57:5d:c6:a4:a4:d6:ef:ae:f8:7c:13:a2:fb:c4:1d:9d:
90:d8:f7:aa:9b:a7:e6:df:9c:65:e0:81:29:cf:0f:57:a1:68:
f3:17:7f:2b:c9:55:70:18:01:14:ed:2d:42:31:e1:50:c5:5e:
30:7a:0a:5c:a8:8d:90:3f:4f:59:12:59:f0:4e:04:5b:28:39:
5e:c4:66:bc:67:2c:41:47:01:9f:2e:6d:0c:d4:47:db:6a:77:
27:85:e2:ce:87:f0:f8:86:cf:41:0e:59:db:6c:a5:58:01:18:
d8:3c:0d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:31:55 2025 by rpki-client