Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
File: cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft (raw, json)
Hash identifier: BeNGUwOdeCXVJzDe+Q6/dM+R2AQdp56ZEWeklyE2+tM=
Subject key identifier: 9F:86:62:8C:31:CB:98:51:15:71:6D:D5:B3:C0:CE:0A:C6:86:C7:EA
Authority key identifier: 73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F
Certificate issuer: /CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
Certificate serial: 019768BBE881689E93B8050F2EB690A99C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
Manifest number: 1212
Signing time: Fri 13 Jun 2025 10:00:34 +0000
Manifest this update: Fri 13 Jun 2025 10:00:34 +0000
Manifest next update: Sat 14 Jun 2025 10:00:34 +0000
Files and hashes: 1: cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl (hash: Z1/IM912+pWuMJMl3SihDVBmysaiIvwLJK3EsAfCQio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:e8:81:68:9e:93:b8:05:0f:2e:b6:90:a9:9c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
Validity
Not Before: Jun 13 10:00:34 2025 GMT
Not After : Jun 14 10:00:34 2025 GMT
Subject: CN=9f86628c31cb985115716dd5b3c0ce0ac686c7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:a5:5a:dd:f4:db:7b:56:c4:e6:3c:b2:7f:
5e:40:4c:a6:50:44:5a:32:68:a7:2d:98:57:9b:4e:
a7:d2:bb:6f:c2:c9:5c:da:f9:a6:04:6f:77:e0:f4:
5b:6d:d8:d1:5d:5b:52:ef:c6:99:cd:d6:ef:c2:5c:
bc:cb:a4:3d:d3:4a:dd:89:0d:35:e9:8d:6d:b2:60:
6a:50:4d:f3:46:fc:f8:fd:54:14:69:ee:44:0d:82:
22:71:c3:ae:6a:7f:f8:05:5f:bd:89:d3:13:8d:84:
63:c2:28:86:2d:6b:a8:89:b5:2e:80:c2:3f:97:85:
4f:68:34:75:59:b0:37:cf:3c:bf:3d:fa:22:de:1b:
98:d6:ea:80:fb:ff:37:52:76:fd:09:26:c6:36:51:
72:cd:48:44:27:5f:d2:b1:c3:ed:97:87:a1:1b:55:
4a:44:0b:a0:9e:d2:9e:c0:d0:56:24:6b:fc:58:75:
27:43:d5:5f:16:60:fe:92:ae:3f:e6:69:57:11:f3:
ab:ed:be:62:b9:a6:cd:57:99:76:84:4c:3b:41:70:
40:18:15:56:2e:fb:4e:25:b7:11:f8:4d:7f:70:f1:
f0:27:72:51:cb:ca:af:2c:80:52:7d:b3:51:9f:84:
92:4d:74:f6:28:28:7b:d6:88:79:3d:00:76:50:87:
8b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:86:62:8C:31:CB:98:51:15:71:6D:D5:B3:C0:CE:0A:C6:86:C7:EA
X509v3 Authority Key Identifier:
keyid:73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7e:bf:47:7c:e5:b6:ef:69:0a:82:a5:db:b2:05:af:fd:41:
1a:74:80:c7:90:42:6a:3f:be:bb:88:ee:dc:45:78:aa:7e:ed:
f7:d9:ee:bd:e4:60:31:d7:c0:67:13:ca:5f:88:d4:fc:08:65:
0f:cd:ac:38:e6:99:f8:ae:6e:76:5a:2c:a8:a2:3b:8d:58:7b:
cd:52:40:ee:fb:a5:6e:8c:f2:f8:ea:bb:25:60:1b:a1:08:9c:
c3:6f:26:b7:23:bf:3c:ef:cb:f2:a4:62:10:aa:fb:18:ff:62:
db:df:6b:c1:ae:52:32:a7:07:d0:3c:34:a0:e1:8d:23:95:fc:
24:09:2d:1d:49:3a:df:3b:4f:b8:3b:21:34:71:4a:72:61:1c:
af:6f:d8:4a:c1:11:a3:90:20:21:11:cb:18:2c:3f:9e:22:fc:
62:74:56:64:89:9c:f5:a1:62:90:f4:e1:96:09:95:ca:5f:c7:
2c:eb:5d:72:b1:cf:12:61:c4:98:68:c8:b5:94:72:95:1b:36:
8f:95:d6:bc:c6:f4:10:b6:40:cc:5c:6c:c1:db:b7:38:73:06:
54:87:7f:06:01:e6:61:05:af:85:f7:9d:f0:2d:61:4a:27:05:
00:a9:17:ff:67:17:cb:68:5a:07:72:a2:1d:97:8d:6b:a2:7b:
5d:9b:78:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:41:53 2025 by rpki-client