Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
File: 11d1Kggad4_B0s7hsNaqRdUaLEk.mft (raw, json)
Hash identifier: ZeZThphdcjtTwJp7AUqfCS+Oz/yQW/K0vQvnb3nzv2A=
Subject key identifier: 5A:C2:5C:53:62:4C:5A:52:42:4E:FE:0B:D3:D2:5D:73:40:42:D2:4F
Authority key identifier: D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
Certificate issuer: /CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Certificate serial: 01976E8776364291077475576218EAA7401D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 13:01:00 +0000
Manifest this update: Sat 14 Jun 2025 13:01:00 +0000
Manifest next update: Sun 15 Jun 2025 13:01:00 +0000
Files and hashes: 1: 11d1Kggad4_B0s7hsNaqRdUaLEk.crl (hash: yMUtDqey87Jif+DYmWvPywQEIkwT2jyNHlkQ+enyv0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:76:36:42:91:07:74:75:57:62:18:ea:a7:40:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Validity
Not Before: Jun 14 13:01:00 2025 GMT
Not After : Jun 15 13:01:00 2025 GMT
Subject: CN=5ac25c53624c5a52424efe0bd3d25d734042d24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:f1:d8:cd:81:74:d0:ca:58:3c:b8:5a:36:
fb:96:cf:d9:a3:0b:94:d1:96:47:1d:3a:41:7e:72:
e9:fb:df:71:0f:80:f7:1d:3a:36:44:4e:74:14:f8:
e7:bb:ad:3a:b9:d1:11:f5:f9:53:f6:5f:d8:c9:11:
76:cd:6c:62:e0:3a:92:3e:5f:b9:5a:64:96:ca:fb:
ed:41:ce:07:ae:6e:7f:f9:73:66:6b:37:46:63:bf:
a2:1e:ed:ab:a2:49:84:5b:aa:2d:c0:c1:09:cd:5c:
8c:c2:a0:44:97:b5:1d:af:16:ac:22:47:8d:5a:ec:
b2:1b:d7:38:67:81:3e:de:7a:39:e6:3b:46:1c:2c:
63:8b:de:98:08:b9:e8:51:79:b5:a7:c8:1a:f0:62:
c0:b2:35:e2:d3:27:ff:d1:4e:df:01:51:c8:be:aa:
ee:c0:d2:c9:be:59:58:57:d2:d6:c3:80:89:09:e3:
95:1e:47:00:ef:72:17:b5:df:34:7b:a7:8b:72:2d:
30:52:e9:6f:ab:e7:e0:61:c5:66:14:dc:1b:91:4e:
ea:a4:d6:a8:e8:22:fb:f8:b0:a5:c6:e5:65:17:74:
c2:c0:a2:72:63:58:6e:5b:e8:06:b9:fe:eb:fe:0e:
c2:63:ac:a6:ab:d3:60:36:b8:e5:76:59:1d:35:19:
bb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C2:5C:53:62:4C:5A:52:42:4E:FE:0B:D3:D2:5D:73:40:42:D2:4F
X509v3 Authority Key Identifier:
keyid:D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b7:36:e1:4e:25:7f:b9:0d:5c:b4:78:f7:47:33:0f:eb:5f:
19:52:96:ba:ed:4e:3e:fa:b3:95:7e:01:65:95:0f:b7:2c:dd:
fe:bb:a1:26:50:0c:dc:74:c7:ca:33:d5:b2:17:6a:07:46:c5:
34:2e:83:05:9e:43:44:42:d0:66:46:2b:26:9a:71:aa:d0:e9:
c4:ba:ac:2a:d1:58:eb:e3:84:d2:9f:cc:1b:5e:0a:ae:b1:a8:
83:61:09:44:eb:7f:2b:98:19:0d:56:38:a0:db:2f:70:30:b5:
d2:a2:39:06:03:83:6b:93:ed:e0:e2:b8:9f:08:49:90:fb:e3:
bb:f5:26:61:64:9d:c2:97:1d:55:da:fd:dd:ba:3b:e4:a8:c8:
ec:c9:fd:4c:6c:64:0b:c7:80:bc:80:5f:51:ad:78:cb:84:35:
8a:13:c8:4b:1b:4c:c6:21:e6:6c:99:58:3d:bb:85:dd:5e:10:
08:14:b4:17:d5:98:e9:6d:c9:fa:c6:c2:c1:5e:28:df:e9:22:
ca:4e:a7:22:e5:2c:09:52:30:7a:4a:aa:3a:fa:39:87:1a:94:
27:bc:62:0d:fa:57:8f:72:d6:6a:92:f8:bf:91:60:77:19:c4:
ed:d2:12:6a:a4:0b:0c:1e:e2:dc:a5:22:1e:07:6d:d8:0b:21:
a9:2b:a7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:35:54 2025 by rpki-client