Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
File: St2XYC4ZGOerwfYtz9TaynNJmz4.mft (raw, json)
Hash identifier: tXB4+5Q8n73q9BpYTE3bKlYiT8KcNLc4+q3VmUmSQBA=
Subject key identifier: 85:D9:78:DC:A2:F5:9C:4F:F3:33:32:BB:21:05:47:E9:A0:2F:13:44
Authority key identifier: 4A:DD:97:60:2E:19:18:E7:AB:C1:F6:2D:CF:D4:DA:CA:73:49:9B:3E
Certificate issuer: /CN=4add97602e1918e7abc1f62dcfd4daca73499b3e
Certificate serial: 0197794249321C2861B362AC87971C6D042A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
Manifest number: 0101
Signing time: Mon 16 Jun 2025 15:01:16 +0000
Manifest this update: Mon 16 Jun 2025 15:01:16 +0000
Manifest next update: Tue 17 Jun 2025 15:01:16 +0000
Files and hashes: 1: St2XYC4ZGOerwfYtz9TaynNJmz4.crl (hash: DBzNnIYjKo2VhpY938OIeXhGmTN570HUFJZpVuxI+UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:42:49:32:1c:28:61:b3:62:ac:87:97:1c:6d:04:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4add97602e1918e7abc1f62dcfd4daca73499b3e
Validity
Not Before: Jun 16 15:01:16 2025 GMT
Not After : Jun 17 15:01:16 2025 GMT
Subject: CN=85d978dca2f59c4ff33332bb210547e9a02f1344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:77:e3:9c:e7:45:6a:d0:c7:42:7b:f8:87:
32:a3:4b:3d:b7:cc:c6:cf:74:91:1a:5b:d6:27:d5:
96:3c:e0:13:b5:83:cc:7d:f8:96:1e:a7:4d:37:fa:
f8:29:27:5d:62:73:8a:46:85:37:37:0c:f5:20:fb:
bc:10:39:f7:3c:33:f5:e0:ca:bb:4d:45:77:cd:76:
53:02:34:06:31:e0:de:51:64:5e:2b:c7:b1:a7:12:
e0:dd:c9:61:cf:b1:8f:9b:d7:af:d3:9c:b8:a2:96:
7a:7b:1e:b0:a3:b0:71:26:da:6c:b0:82:e2:3f:36:
76:47:6d:ea:de:cf:5a:d9:25:62:4a:71:93:c0:95:
7b:7d:0b:6b:f1:1d:47:d3:f5:66:a5:64:75:5a:73:
40:cf:d0:69:6f:73:05:2e:8d:92:5d:ed:f5:b0:4d:
df:ed:a7:a4:21:ae:b2:67:a2:0a:4b:b0:71:53:ab:
f7:c5:fe:4e:6c:7d:94:f9:c8:52:ba:b9:12:a3:d3:
86:91:ae:e3:75:d5:7e:e7:07:c2:d4:e2:bf:b9:f6:
f6:d7:32:48:5a:9a:cb:c8:6b:3a:ad:0e:2b:02:69:
63:65:3b:58:55:81:c8:57:2f:76:ad:27:09:90:74:
16:81:a8:36:96:20:92:18:86:df:49:46:66:90:7c:
8e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D9:78:DC:A2:F5:9C:4F:F3:33:32:BB:21:05:47:E9:A0:2F:13:44
X509v3 Authority Key Identifier:
keyid:4A:DD:97:60:2E:19:18:E7:AB:C1:F6:2D:CF:D4:DA:CA:73:49:9B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:44:8b:af:11:fd:88:2d:96:a1:68:74:14:e6:35:0d:d3:ba:
ce:1b:60:b1:be:1d:48:e9:43:fa:b9:9d:4f:59:2f:f5:99:0a:
94:1d:5a:51:ac:7e:5a:21:af:8f:58:d3:93:a0:ef:9d:c7:a0:
11:3f:00:89:f5:05:0f:08:56:36:21:c1:d0:c3:09:5b:cb:d4:
90:e9:49:99:ac:ab:fc:b1:9b:1f:06:5b:4a:f0:f1:b1:cb:73:
37:19:44:94:87:e0:01:54:ba:9c:e8:ad:ff:74:c9:86:b2:9a:
c6:9e:d5:13:e1:6e:20:ef:bc:42:d6:85:7a:bf:0b:0c:b6:a1:
ab:41:88:08:4c:f4:c7:ea:52:09:d5:09:7b:97:e5:6b:74:e5:
1d:37:6c:09:23:2a:00:b2:fa:2f:1c:22:0f:64:0f:43:b8:37:
31:10:c4:9d:45:ce:79:60:b8:2d:67:2d:7a:a3:ed:46:d9:36:
16:26:6d:45:ff:4c:9f:a0:74:8f:ed:c7:04:60:a1:8d:df:05:
d7:39:bd:88:74:aa:23:23:ae:fb:2b:af:57:3f:f0:20:17:35:
48:04:39:2b:61:ba:e4:86:89:31:de:c4:d9:8a:a6:89:dc:a2:
50:23:76:52:c6:f4:90:10:de:c4:e4:60:4d:ae:4c:1e:4a:d6:
2f:d8:84:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:06:59 2025 by rpki-client