Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
File: cMySQTZlvWsN3lGpprVl5ywyHlI.mft (raw, json)
Hash identifier: 63r6BRrjdO/fcqvA7BAvC4sEiUwCWYjEwDvsRdFoiJM=
Subject key identifier: 94:9B:58:17:0C:7D:32:AB:2E:DD:39:74:AE:01:7F:A7:3F:2D:E6:C9
Authority key identifier: 70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
Certificate issuer: /CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Certificate serial: 01976D3D511BD1EB496B02E857724BACE251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
Manifest number: 066B
Signing time: Sat 14 Jun 2025 07:00:24 +0000
Manifest this update: Sat 14 Jun 2025 07:00:24 +0000
Manifest next update: Sun 15 Jun 2025 07:00:24 +0000
Files and hashes: 1: cMySQTZlvWsN3lGpprVl5ywyHlI.crl (hash: K+7YDTDB1+N88w5/VYaKKtIklanlUOBtu2KQvEtFtjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:51:1b:d1:eb:49:6b:02:e8:57:72:4b:ac:e2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Validity
Not Before: Jun 14 07:00:24 2025 GMT
Not After : Jun 15 07:00:24 2025 GMT
Subject: CN=949b58170c7d32ab2edd3974ae017fa73f2de6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:1c:98:06:4e:77:2f:ff:bb:da:11:66:8f:
69:ba:e4:d7:8d:51:45:5f:0b:f6:71:9f:16:83:c1:
30:e3:0e:27:b0:6c:49:bc:45:d8:e3:2a:4a:ee:83:
b1:df:c5:1b:5f:4e:ed:f3:a0:00:fd:04:36:f6:f0:
d4:a4:8b:68:a6:6e:05:57:85:f2:3e:aa:f9:76:8e:
61:98:02:16:e2:59:84:88:ae:77:4b:85:81:da:da:
85:03:51:46:4e:d4:5a:c6:76:fb:e2:a2:22:90:04:
c9:c0:16:7e:3d:47:a9:7f:32:68:6e:b7:00:a2:8f:
d2:d5:48:ea:87:25:5a:5c:2e:02:e6:b7:61:22:2d:
fe:e6:9a:70:85:10:6b:39:26:86:87:af:46:4a:80:
ca:22:88:da:68:a9:93:bf:48:96:80:27:37:16:4a:
01:c8:5f:ce:13:06:72:25:95:56:cf:54:7a:ca:f9:
a7:c8:c9:b6:29:f3:c1:8a:0d:38:9f:ba:59:ab:6f:
98:d3:a3:5f:a8:fb:5a:90:7e:f5:92:ec:79:c8:2c:
47:9f:9c:bc:06:85:10:36:c8:32:23:e0:11:41:9c:
b3:83:e8:64:80:81:74:e8:09:00:b8:a0:e5:4d:98:
e1:18:1c:3a:02:5c:f8:de:08:4a:f8:62:ac:a0:2d:
7a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9B:58:17:0C:7D:32:AB:2E:DD:39:74:AE:01:7F:A7:3F:2D:E6:C9
X509v3 Authority Key Identifier:
keyid:70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c4:ea:82:cd:41:04:16:1a:8f:49:df:33:83:89:50:96:0d:
1b:28:6a:07:8e:e1:85:68:77:72:b9:d5:64:c3:00:0c:d5:16:
1c:9e:21:40:71:5e:bb:13:0e:28:85:85:2b:4d:9e:5c:03:13:
4a:6a:3a:24:0a:a3:51:a5:cc:c0:c1:9b:cf:7f:24:8b:d0:9d:
57:d0:17:ff:d1:95:19:15:22:92:0f:f9:8e:34:94:12:3b:52:
16:58:62:b2:2b:6c:6c:10:92:35:e1:ec:a2:37:60:d9:47:b3:
6a:43:6d:54:d4:31:90:2d:eb:73:8a:11:b0:f0:84:b2:4c:42:
9e:80:9b:de:c3:bd:99:46:5f:10:68:cf:01:45:6e:83:5f:9c:
0e:45:29:e9:95:f8:f8:d6:f3:2e:63:3a:6b:e0:e5:73:41:6a:
90:90:9b:e9:38:00:b5:b5:f8:3a:5a:cf:0b:57:cb:f5:03:b6:
9d:60:e3:d5:16:24:01:23:f8:e9:b2:d4:af:20:14:8a:34:92:
0a:a5:71:1d:05:26:68:8c:60:a2:cf:53:d8:3b:d0:2e:c9:92:
76:fc:eb:41:ba:ab:28:2e:37:cc:34:53:c8:e4:68:fe:02:4b:
4c:0c:ff:17:60:40:78:e9:af:36:83:0c:14:d9:14:47:82:af:
fa:7c:0f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:36:34 2025 by rpki-client