Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
File: uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft (raw, json)
Hash identifier: gxprp9R7HWUb9Vw7OuPl8yFznBrh53FObsrd6WFiMKs=
Subject key identifier: 7E:4F:76:01:BE:95:7D:C0:CE:EF:7E:24:81:5B:7D:F6:11:26:F9:42
Authority key identifier: B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E
Certificate issuer: /CN=b9145315b44cb65d2a791a0ae5823664d0c4445e
Certificate serial: 01976960F7CA0E09F117B5BF2735899551D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
Manifest number: 1587
Signing time: Fri 13 Jun 2025 13:00:51 +0000
Manifest this update: Fri 13 Jun 2025 13:00:51 +0000
Manifest next update: Sat 14 Jun 2025 13:00:51 +0000
Files and hashes: 1: uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl (hash: XYipXZ8/nxsQAWfBJDx1B5aRuTsRl1I+7ecXfikHBRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:f7:ca:0e:09:f1:17:b5:bf:27:35:89:95:51:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9145315b44cb65d2a791a0ae5823664d0c4445e
Validity
Not Before: Jun 13 13:00:51 2025 GMT
Not After : Jun 14 13:00:51 2025 GMT
Subject: CN=7e4f7601be957dc0ceef7e24815b7df61126f942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:c3:d5:0d:7b:a1:ad:b2:a9:3c:f1:6a:59:
63:f3:4a:40:9f:5d:e4:f1:8f:87:1b:47:68:d1:53:
5b:34:29:d2:fa:e4:47:6e:d6:ac:36:9a:45:f8:1f:
b4:ed:e9:02:65:49:6b:73:b6:ea:58:7c:3b:1e:80:
dd:71:8f:64:ab:bb:e4:e0:21:c7:06:bc:5f:d4:f0:
5e:5c:3a:86:c4:d0:5c:87:96:b0:88:ee:74:47:3f:
64:62:d2:b8:35:5d:2f:0a:6a:94:3f:55:2e:34:54:
d5:40:9b:44:e5:6f:a4:6d:3a:38:ae:42:9c:b4:ee:
17:84:b8:e6:bd:ed:85:65:e4:0a:09:cb:64:68:9f:
11:de:9f:8f:19:a1:f8:e3:54:2d:8d:8a:43:12:0c:
9c:b3:34:69:3e:10:aa:6a:01:38:9c:d2:b4:a0:cc:
93:44:15:c0:4e:14:ab:be:f0:67:13:dd:cb:10:76:
89:e1:c1:80:46:e3:9f:b1:56:55:1d:c0:a8:4d:76:
a7:85:65:62:c4:0c:e5:f5:d1:2a:4e:87:32:39:d4:
e3:81:0d:fc:b2:1b:38:56:ea:db:66:2c:16:8d:b2:
71:03:8b:6f:8f:64:d8:db:70:16:66:94:80:28:b4:
74:21:af:27:4d:3c:c9:2b:e8:15:12:3d:ed:0c:88:
4c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4F:76:01:BE:95:7D:C0:CE:EF:7E:24:81:5B:7D:F6:11:26:F9:42
X509v3 Authority Key Identifier:
keyid:B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:86:d6:ce:ba:e4:3d:c9:d6:4f:b6:be:4d:8e:26:57:fb:5c:
69:de:b2:ae:b8:5d:15:e6:0a:db:ca:b5:83:21:2a:f0:6a:15:
c3:33:2b:1f:91:86:85:d1:26:58:7a:c9:d6:20:1e:d8:ac:01:
86:f2:86:03:b5:f0:37:c7:f1:a9:06:42:8b:18:79:c6:d6:4b:
da:cd:33:37:d7:f2:7a:a7:23:52:b6:3f:51:8d:e9:44:96:17:
c0:0e:1b:0c:4b:06:c9:7b:0b:89:79:c5:06:cb:f0:b8:2b:f0:
81:2b:87:39:22:95:f7:e9:a3:09:81:8a:ab:cb:4a:77:48:07:
d0:c8:e6:7e:cd:79:bd:3c:2e:97:2a:b5:4e:a6:dc:a1:c5:f3:
14:36:4d:62:f2:cc:fd:49:d6:30:a6:66:ff:8b:3a:46:f1:a2:
92:0e:6e:2e:62:f3:40:af:56:50:da:60:42:cb:dd:e6:f9:4f:
81:85:71:bd:e2:60:67:b4:23:9e:d9:61:b1:45:e5:54:6e:b0:
8e:e9:5e:71:bb:e0:60:69:84:67:29:c9:c2:4b:8a:27:10:70:
5a:f0:be:25:b1:34:e3:60:68:86:e2:47:54:8d:18:92:05:a5:
27:be:76:86:94:17:a4:f4:dc:f2:6e:80:d1:68:5b:05:a3:7a:
f5:1e:80:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:28 2025 by rpki-client