Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
File: p2H8O2oE10MHa9KG3oIURfBlTvc.mft (raw, json)
Hash identifier: WRh/rOcyS4ZV5Xe5i0vGi30bvImdYBSavodIKZpzRzA=
Subject key identifier: 5C:3D:C9:A7:2C:B3:AD:FB:2C:7D:BD:48:93:E6:A1:12:A4:16:72:A5
Authority key identifier: A7:61:FC:3B:6A:04:D7:43:07:6B:D2:86:DE:82:14:45:F0:65:4E:F7
Certificate issuer: /CN=a761fc3b6a04d743076bd286de821445f0654ef7
Certificate serial: 0197778AD5F288CEA53A42649E405457076D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
Manifest number: 1523
Signing time: Mon 16 Jun 2025 07:01:16 +0000
Manifest this update: Mon 16 Jun 2025 07:01:16 +0000
Manifest next update: Tue 17 Jun 2025 07:01:16 +0000
Files and hashes: 1: p2H8O2oE10MHa9KG3oIURfBlTvc.crl (hash: KyAZV8Yh4iDriH7UxTo/mSnvlSnRtbpBYV1ISJvlu1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:8a:d5:f2:88:ce:a5:3a:42:64:9e:40:54:57:07:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a761fc3b6a04d743076bd286de821445f0654ef7
Validity
Not Before: Jun 16 07:01:16 2025 GMT
Not After : Jun 17 07:01:16 2025 GMT
Subject: CN=5c3dc9a72cb3adfb2c7dbd4893e6a112a41672a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:9c:7f:21:d5:fc:73:38:a9:71:8b:9e:bf:a9:
e3:37:d6:c4:ba:34:78:de:d3:8c:ff:e9:67:ec:f2:
21:7f:85:df:5d:40:72:2c:fd:b1:48:27:ab:a7:40:
e6:39:36:79:42:08:c8:cb:5c:79:d6:c3:67:85:a4:
10:f4:6e:e9:0a:7f:4d:98:ef:e3:ea:06:9b:d5:3d:
d9:c1:ab:96:d5:b2:c6:99:89:0c:96:f5:cf:64:8c:
45:24:04:ad:22:d3:a9:59:21:15:71:8a:72:87:87:
e1:b2:b9:80:45:a8:0e:69:7c:c6:78:3f:57:cc:4a:
7f:1d:74:34:a6:b9:3b:9d:29:82:df:65:12:50:68:
ab:8c:43:0f:d2:78:8f:79:15:4e:32:af:c8:49:cc:
04:cd:49:1f:b5:54:8a:f7:f3:af:2a:83:0d:08:df:
58:3b:84:d2:b7:01:46:13:92:a9:8b:d9:2c:40:13:
bd:35:36:ac:4d:7b:b7:33:bc:b8:23:5c:2b:74:39:
08:0c:46:4c:5a:59:40:f9:2e:6a:75:d6:40:78:69:
e1:16:4f:4e:e5:8f:02:2e:b4:70:37:9a:9c:95:97:
9b:d8:a8:7a:4c:f1:99:46:c2:83:76:7a:08:8d:34:
43:77:a1:0f:5a:07:83:52:e0:e6:0b:47:4c:95:bd:
b6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3D:C9:A7:2C:B3:AD:FB:2C:7D:BD:48:93:E6:A1:12:A4:16:72:A5
X509v3 Authority Key Identifier:
keyid:A7:61:FC:3B:6A:04:D7:43:07:6B:D2:86:DE:82:14:45:F0:65:4E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a2:c8:d8:21:16:c1:73:c9:a3:d4:cd:a6:c4:a6:4d:1a:7d:
ea:ae:eb:1e:60:d9:26:a9:c0:c0:d1:d0:b4:a5:83:16:44:74:
a5:74:46:81:90:53:b1:11:bc:ef:ac:91:86:d3:df:0a:4d:25:
6e:20:9e:b3:9b:c5:82:0f:37:e4:b1:60:84:74:03:2c:a5:89:
a2:9b:73:e6:52:74:2b:e5:e3:39:69:4e:a9:01:0d:40:d7:f6:
63:65:c0:47:00:5a:25:20:ca:ab:c5:c1:5e:02:28:b1:c3:53:
96:80:0a:44:33:3d:5a:99:82:d6:6c:ac:ec:4e:4a:6b:bb:1d:
09:85:9c:85:eb:4f:49:5a:cc:69:6e:32:c8:cc:e0:40:6f:33:
ed:9a:23:a4:20:f6:c8:3c:01:1b:41:54:c5:6b:f8:c3:0b:40:
e5:e2:b2:48:e2:47:3f:48:4d:dc:bc:60:2e:d7:04:48:f9:f2:
1d:61:8a:4c:2c:da:14:e0:2c:59:cc:7b:06:24:7d:2b:ba:a3:
cf:23:6e:b2:dc:82:d4:84:bf:f0:f0:c5:42:ab:0a:34:d7:ae:
5f:e7:58:f7:c4:f5:fa:b8:cd:5d:4e:7c:1e:5c:a4:98:65:ec:
a0:5a:cd:1f:fc:59:7d:68:4c:a6:03:db:4d:fa:04:ee:0f:38:
c6:b5:d9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:22:23 2025 by rpki-client