Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
File: t6K9aUc7So6Fp2r72OW77ptLs0s.mft (raw, json)
Hash identifier: BlMx7LL1IcmPoXeiEuZUG5mOYPPalKTclfZazX6aG0U=
Subject key identifier: 79:5B:3F:30:51:2B:09:66:AE:1F:AA:F9:84:95:DB:2E:43:57:F0:46
Authority key identifier: B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
Certificate issuer: /CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Certificate serial: 019776E64CCD80700CFEF3B490A55891FB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
Manifest number: 0EF8
Signing time: Mon 16 Jun 2025 04:01:33 +0000
Manifest this update: Mon 16 Jun 2025 04:01:33 +0000
Manifest next update: Tue 17 Jun 2025 04:01:33 +0000
Files and hashes: 1: t6K9aUc7So6Fp2r72OW77ptLs0s.crl (hash: lPl01UlvMEZabcfBR/N2Hhze9nXYz7wsxHCab2aiiPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e6:4c:cd:80:70:0c:fe:f3:b4:90:a5:58:91:fb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Validity
Not Before: Jun 16 04:01:33 2025 GMT
Not After : Jun 17 04:01:33 2025 GMT
Subject: CN=795b3f30512b0966ae1faaf98495db2e4357f046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:a2:cc:49:75:63:be:43:b4:03:74:32:ab:
5c:85:e2:af:7e:d5:21:6d:89:5d:d0:df:b9:9a:cb:
d4:d7:04:ce:07:d8:d2:88:7b:b0:50:08:0d:f5:68:
7a:32:97:b8:5d:ca:93:93:27:ea:dc:d8:4e:df:fe:
c9:a5:83:4f:09:7b:73:ec:e1:b9:de:34:f1:cf:5e:
b1:5e:e7:26:fb:9b:b9:ad:58:55:90:4f:e9:d8:16:
17:fc:52:ac:a2:d0:0d:63:f4:cc:d8:c2:56:c4:b8:
db:6e:25:9d:b7:46:a0:69:22:5a:51:5c:04:cd:91:
a2:a6:3f:2c:a1:39:af:88:68:99:ee:d0:1b:33:8a:
f4:40:26:da:8a:a7:d9:ab:02:40:9f:2d:41:33:fd:
6a:ce:cc:03:26:eb:c0:cd:b8:c0:63:84:92:99:f0:
8b:04:23:6d:88:e4:b4:ba:66:80:95:a1:a2:2e:80:
e8:3f:b3:f0:31:31:b5:88:30:1e:8a:fc:8f:58:72:
8a:c3:1d:a2:48:e0:12:aa:08:70:65:ad:3a:28:11:
13:41:1f:8f:97:c3:b9:e3:62:f3:8f:29:94:0b:31:
c4:fa:c7:3f:c5:bf:eb:a8:2d:29:3a:c1:26:18:16:
5e:0d:95:d6:06:b6:26:cb:11:5e:83:a0:ab:0f:d4:
3c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5B:3F:30:51:2B:09:66:AE:1F:AA:F9:84:95:DB:2E:43:57:F0:46
X509v3 Authority Key Identifier:
keyid:B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b2:7e:48:03:69:ac:9b:5f:5a:46:2c:dc:6a:81:f7:c9:73:
92:5d:00:73:c0:c8:9e:98:d7:99:4a:ac:b4:f9:ae:31:e8:c1:
f7:40:ce:b9:c3:3e:48:43:65:28:de:70:dd:5b:14:e2:ab:a2:
fa:c9:0c:95:6e:82:07:01:11:c5:df:4a:df:3b:c3:ad:2b:f2:
b4:73:dd:7e:46:c6:55:10:2a:b9:10:63:9f:ee:78:7b:96:8c:
99:17:16:56:3c:3e:76:13:3d:6d:4f:45:13:15:c4:28:de:2f:
ad:75:9d:dc:51:e3:ff:a7:4a:bb:4e:55:f7:ee:2f:4a:a8:f5:
da:0d:29:da:da:50:c0:45:67:27:eb:0d:43:ad:5c:c5:2e:a6:
5e:b1:5d:35:60:28:1d:5d:76:8e:1e:29:8d:b3:4e:da:6f:f5:
b3:b8:2f:02:c4:64:19:ff:c0:d4:2f:4d:26:b5:08:6a:8a:0a:
80:a1:80:ce:b0:8f:e8:5d:d8:fd:2e:d2:b8:49:4b:fb:c7:9b:
07:22:7e:95:44:70:e0:d9:68:8f:d6:ba:dd:61:b8:ee:70:77:
b0:98:e7:17:e2:23:6f:2d:c3:81:2d:db:b1:b0:88:da:fc:50:
f6:cb:b3:cc:d4:c1:e5:9b:b5:76:a1:ac:b7:7b:e1:ea:d3:9f:
ee:7d:fa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:12:11 2025 by rpki-client