Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
File: prEMlxD_hEDaQeVJvif-h38Uuwc.mft (raw, json)
Hash identifier: 45GMOdC1sl3UboQL7oBTwidPCpQKKZr2KUN8klfkDJ8=
Subject key identifier: 98:97:9C:C8:4C:68:03:A7:CD:3E:CD:48:1C:79:95:1E:22:31:9F:4B
Authority key identifier: A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
Certificate issuer: /CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Certificate serial: 01976F2C83AF15E0F534B4497DEE69489D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
Manifest number: 08EC
Signing time: Sat 14 Jun 2025 16:01:17 +0000
Manifest this update: Sat 14 Jun 2025 16:01:17 +0000
Manifest next update: Sun 15 Jun 2025 16:01:17 +0000
Files and hashes: 1: prEMlxD_hEDaQeVJvif-h38Uuwc.crl (hash: 1xiHYKGfoS18vmMdesk2qH0k2CFqmRGjvBWr6N4zImA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:83:af:15:e0:f5:34:b4:49:7d:ee:69:48:9d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Validity
Not Before: Jun 14 16:01:17 2025 GMT
Not After : Jun 15 16:01:17 2025 GMT
Subject: CN=98979cc84c6803a7cd3ecd481c79951e22319f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:87:2a:99:f5:2e:dc:3a:1b:06:06:1d:6b:
62:d8:98:26:a7:fc:5a:ac:2b:a3:ec:38:50:af:32:
ca:ca:fd:19:97:e6:00:ca:48:3b:f4:f0:41:98:3f:
65:54:8c:cb:9f:cc:bb:0f:63:a6:fd:61:95:cf:21:
05:ff:ca:88:a5:5e:0f:fd:75:9e:3e:49:d2:81:3a:
c3:e5:36:f1:f5:bd:60:bb:23:48:52:c1:fb:02:8d:
2e:fb:7a:f5:fd:6d:d1:89:66:5d:f2:9e:3d:91:98:
74:4d:c7:1d:46:5e:05:d3:02:28:ab:7f:39:0f:48:
19:35:60:94:e8:e9:3a:c2:91:2f:f5:63:2f:07:90:
94:bb:c3:fe:75:d9:18:c8:d8:67:47:eb:c2:26:cc:
a4:2f:84:d2:06:09:8a:c8:8e:b2:5b:bd:2d:e4:41:
e4:10:e5:33:d2:59:5d:db:1f:6a:e6:53:03:b1:1a:
44:be:ee:b2:d9:19:ef:2a:92:28:25:e4:d6:6c:6f:
39:fa:37:f7:6c:33:e6:48:a6:ef:fb:a0:e8:32:87:
94:94:75:55:ba:30:f8:d9:e6:eb:f7:ff:cd:cb:0e:
f1:2b:ef:e8:f0:5e:3c:94:20:a5:07:a9:b7:26:ae:
8a:0f:18:70:70:24:07:40:c5:15:8d:89:e2:95:4b:
e1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:97:9C:C8:4C:68:03:A7:CD:3E:CD:48:1C:79:95:1E:22:31:9F:4B
X509v3 Authority Key Identifier:
keyid:A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f6:ab:db:13:ad:f3:0e:1a:2b:e1:7d:ac:29:ab:94:c2:69:
38:41:74:f1:88:c3:69:b0:76:11:f2:08:af:91:25:82:ec:c1:
80:b7:a3:de:b0:47:63:78:9c:86:6e:8d:1e:28:04:1c:25:f5:
63:0a:c5:8d:70:83:75:2d:3c:6c:52:91:99:45:9b:85:7d:a9:
21:95:8b:a4:dd:42:8f:29:17:68:be:ae:d9:56:45:7c:fe:ca:
04:9b:91:b7:24:b1:cf:c3:36:b6:78:5b:61:4d:38:05:f3:f4:
62:bf:44:9f:a7:e2:8d:94:1a:70:d2:d0:f3:e8:b0:07:07:c0:
7a:21:ef:ca:60:ef:48:b6:5f:ab:5c:57:fc:71:12:98:1f:08:
69:8e:b6:68:46:3d:f2:ac:99:f9:da:4c:82:01:05:8d:8a:13:
7e:20:1f:98:ec:38:f1:b4:21:82:d5:ee:b2:68:46:3e:98:bc:
63:62:a1:33:4c:70:7f:a9:6a:da:eb:42:68:6d:c8:f8:4a:bb:
b5:54:8d:e4:0a:ec:0a:15:92:31:f4:d4:07:37:cd:1d:bf:72:
3f:07:7a:89:8b:f2:56:cd:05:ea:89:fc:9f:78:67:56:09:6b:
63:93:d9:4d:20:9a:7e:29:b5:bc:18:0b:f7:cb:8d:bb:a1:04:
a0:28:49:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:49:17 2025 by rpki-client