Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
File: _C71HmsUo-6_tImOD6gTq2eIUTY.mft (raw, json)
Hash identifier: UflTq57YAvaZxmtpGg7QbqnQSQ0D3BRnYX/wg/ocL9E=
Subject key identifier: CD:98:66:A9:AB:56:75:65:48:EB:F4:AC:60:44:2F:E2:0C:30:F5:DA
Authority key identifier: FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
Certificate issuer: /CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Certificate serial: 01976960DDB34625ADC03270C469DFAB6598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
Manifest number: 0CED
Signing time: Fri 13 Jun 2025 13:00:45 +0000
Manifest this update: Fri 13 Jun 2025 13:00:45 +0000
Manifest next update: Sat 14 Jun 2025 13:00:45 +0000
Files and hashes: 1: _C71HmsUo-6_tImOD6gTq2eIUTY.crl (hash: LYGhSqd2R2xIKd8kqMOoeDAX84JvhfQ3DqfQyWli5eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:dd:b3:46:25:ad:c0:32:70:c4:69:df:ab:65:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Validity
Not Before: Jun 13 13:00:45 2025 GMT
Not After : Jun 14 13:00:45 2025 GMT
Subject: CN=cd9866a9ab56756548ebf4ac60442fe20c30f5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:e5:ab:c0:21:7f:52:e6:7a:43:63:8e:54:
79:86:f7:a0:15:cf:a2:e7:fb:5a:ef:18:db:ce:2d:
1d:e6:9b:92:00:1c:19:e3:5e:a5:c4:1c:28:d6:9a:
5f:46:21:15:36:1f:0b:c4:aa:54:75:74:7c:89:f0:
8c:f9:a5:d5:dc:e8:47:98:41:be:fe:e3:5b:1c:66:
e8:01:08:11:fe:65:9e:7e:cd:9a:f1:d3:a8:22:e7:
d4:88:06:86:6e:1e:f6:5b:ec:a6:77:b3:67:f4:29:
3a:08:2d:18:ef:20:c8:6c:ce:cc:42:e1:37:61:b3:
72:f2:8c:af:fe:aa:64:6f:34:c2:a0:1e:85:bd:e4:
a0:b9:64:25:ba:cc:c6:7c:ad:d5:36:71:cb:7a:c6:
25:d2:1d:a4:f1:3e:77:13:fe:00:44:ef:83:27:a5:
0b:66:5d:ea:e5:a4:f5:eb:bf:08:56:62:14:1d:e8:
0c:e1:34:89:87:7b:54:e4:79:b7:d3:5a:32:2d:65:
7e:96:bf:d1:17:c7:27:94:88:62:05:aa:1a:04:43:
32:f4:ab:4a:e9:b4:00:87:bf:fa:d3:b3:c3:cb:ec:
23:85:e8:e6:ea:59:3b:e5:a6:b7:92:9e:8c:f9:75:
d3:b3:75:a0:50:08:f7:72:1b:ff:29:8d:e5:10:f6:
cb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:98:66:A9:AB:56:75:65:48:EB:F4:AC:60:44:2F:E2:0C:30:F5:DA
X509v3 Authority Key Identifier:
keyid:FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8d:a4:31:e7:42:14:4b:fd:45:ce:bf:45:6c:90:fb:9c:f9:
39:6e:5f:ed:65:34:33:d9:33:a7:da:b3:28:9e:22:ff:d0:5d:
5f:af:b2:44:ee:8a:67:56:2c:fa:8c:45:7f:ec:7f:8c:39:c8:
3d:be:1b:7a:a3:7a:e5:b9:65:14:81:3d:f0:a9:ea:d8:3b:c1:
cb:54:e5:a9:44:2e:99:26:81:f1:c3:1e:fc:49:d9:c4:b2:af:
46:cc:53:f2:c6:eb:f5:59:c3:bc:2c:82:2f:4b:4e:34:da:35:
f4:a7:8c:44:d9:89:7d:4a:d3:a7:ed:b2:ed:28:f9:7d:91:8f:
2c:74:43:fe:a4:5e:f6:02:70:e3:6c:72:82:ee:e6:a9:7f:03:
a4:36:ac:d5:ff:63:0e:eb:54:33:fd:97:ed:48:61:a7:d2:8b:
f6:72:33:99:09:b8:e5:c2:37:c3:88:5f:9c:d9:dd:db:be:ff:
a3:7c:be:c1:3e:2f:7b:10:7f:a2:63:a5:44:7e:de:e7:cb:b9:
e9:05:c2:bb:63:e8:cc:34:c4:b5:19:85:69:a4:26:cc:77:f2:
dc:ea:1e:31:c4:60:bb:23:2f:a3:e4:6b:e8:c8:63:e3:fe:1f:
22:06:c2:44:74:df:82:d5:58:57:35:e8:72:74:61:46:1e:95:
ba:0b:6f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:02 2025 by rpki-client