Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
File: l37KDVyVbeF79pcQRvLrlc5hXik.mft (raw, json)
Hash identifier: u6Ye1eF81fcI/k8Yb9OJwMdS9SSNdcTWeXIuzn9UdMU=
Subject key identifier: E9:BD:CB:40:D2:C6:10:F5:08:BD:3C:04:6F:BB:4D:46:03:E9:79:DD
Authority key identifier: 97:7E:CA:0D:5C:95:6D:E1:7B:F6:97:10:46:F2:EB:95:CE:61:5E:29
Certificate issuer: /CN=977eca0d5c956de17bf6971046f2eb95ce615e29
Certificate serial: 0197696199312D93838D901675EEAFB4437D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l37KDVyVbeF79pcQRvLrlc5hXik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 13:01:33 +0000
Manifest this update: Fri 13 Jun 2025 13:01:33 +0000
Manifest next update: Sat 14 Jun 2025 13:01:33 +0000
Files and hashes: 1: l37KDVyVbeF79pcQRvLrlc5hXik.crl (hash: Rai5jF8an7vQH/F/tWhHluJtL7GzJMJPvamW6bsxi4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
rsync://rpki.ripe.net/repository/DEFAULT/l37KDVyVbeF79pcQRvLrlc5hXik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:99:31:2d:93:83:8d:90:16:75:ee:af:b4:43:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977eca0d5c956de17bf6971046f2eb95ce615e29
Validity
Not Before: Jun 13 13:01:33 2025 GMT
Not After : Jun 14 13:01:33 2025 GMT
Subject: CN=e9bdcb40d2c610f508bd3c046fbb4d4603e979dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:ef:e9:e4:3b:c9:3e:8a:88:15:76:83:98:
29:a0:b2:6d:1c:85:bf:f6:f7:33:6b:44:a8:d4:15:
29:3c:e6:8e:24:45:0a:f8:f8:fe:b9:fe:21:3f:50:
31:f2:8b:26:db:a2:db:9b:a7:07:f1:fb:80:05:d7:
99:5c:52:24:61:6a:94:7e:30:e7:5e:b5:c4:93:e0:
4c:f1:c6:20:f9:be:bd:cc:ae:c2:82:cb:aa:89:bf:
c3:ff:cd:ac:64:b3:30:38:d5:63:5c:71:f2:22:68:
71:cc:47:84:dd:f2:10:96:a3:c4:42:33:5b:ad:04:
3d:3f:6a:39:40:f3:ca:3d:9b:d3:50:fc:48:b4:4d:
2b:66:a9:c3:6e:03:20:34:dc:02:f0:2f:65:a0:db:
f0:3a:1d:66:27:d3:0a:54:33:32:31:13:2b:f4:5d:
41:4a:2e:e6:b1:26:db:9c:1e:67:15:a8:b3:7d:e1:
f7:91:20:d5:de:55:fe:9f:37:6a:ae:e1:c4:4e:1b:
70:66:42:3d:13:1f:23:88:9f:9f:7f:c6:4d:c5:2d:
37:bf:f3:03:bd:c8:03:e9:86:a3:6f:a0:2c:35:c8:
7e:c4:f0:db:3b:7d:f1:e6:c8:5b:0a:be:f8:ba:d1:
37:c9:f1:91:bf:46:05:9b:77:1d:2d:4f:3a:c4:81:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BD:CB:40:D2:C6:10:F5:08:BD:3C:04:6F:BB:4D:46:03:E9:79:DD
X509v3 Authority Key Identifier:
keyid:97:7E:CA:0D:5C:95:6D:E1:7B:F6:97:10:46:F2:EB:95:CE:61:5E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l37KDVyVbeF79pcQRvLrlc5hXik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:2f:e7:ff:9b:4c:b1:e9:c9:32:a9:f0:ff:c1:8f:8f:c2:81:
1d:9f:5c:43:ee:e7:dc:cc:6d:8f:83:dd:9b:9f:e7:8c:6f:a7:
a0:4c:81:0e:1a:ba:19:68:57:21:56:2e:84:d4:f8:9d:a6:05:
17:7e:10:d4:6c:46:dd:25:97:9d:ad:22:97:24:e3:07:ef:37:
b6:37:82:cb:9f:5c:89:3a:13:a1:12:41:5d:aa:40:a0:30:51:
71:f4:56:8b:8f:0a:aa:b1:e7:43:96:b9:d7:e0:3c:3c:09:21:
d2:8f:46:9b:c9:61:e8:91:53:04:b3:1d:12:bb:ec:c3:a5:c8:
d6:b5:78:9d:c2:94:09:49:71:73:db:33:84:b4:aa:85:2e:01:
01:b2:5a:63:67:81:31:4b:18:0c:3d:a6:b1:d1:3f:96:f6:89:
b3:51:e0:11:f7:16:83:50:84:aa:a7:d2:78:a4:e7:f3:dc:7a:
45:6c:24:0e:b3:3d:6f:00:6e:a7:88:a5:af:24:4a:86:80:2e:
43:6b:c7:d0:51:de:8a:bc:67:b7:35:ed:6f:4f:9f:e5:41:62:
d5:ab:7f:af:a2:f3:73:ec:e9:ae:9d:2c:b0:86:5e:8d:fc:66:
1f:fc:fc:ec:8a:30:2e:91:b6:0c:da:4c:ea:e0:85:61:4d:30:
86:2a:03:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:38 2025 by rpki-client