Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
File: RtlEd8i1TRLsiz97bZrnjlELI9g.mft (raw, json)
Hash identifier: b4jxBEvShI4oDZVd4lzsg7xwcBdvUXueoyWwQauuUSQ=
Subject key identifier: A0:FC:C8:49:78:0B:17:D8:46:00:76:80:BB:5F:42:3A:82:EF:85:9F
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial: 01976F2C0FE3BFEDFEE9A819F0F6697A1BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 16:00:48 +0000
Manifest this update: Sat 14 Jun 2025 16:00:48 +0000
Manifest next update: Sun 15 Jun 2025 16:00:48 +0000
Files and hashes: 1: RtlEd8i1TRLsiz97bZrnjlELI9g.crl (hash: VhcGwbUb8Lf/Z5Nb06DIuPpE5OCcc9eEbIriR8ipDnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:0f:e3:bf:ed:fe:e9:a8:19:f0:f6:69:7a:1b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Validity
Not Before: Jun 14 16:00:48 2025 GMT
Not After : Jun 15 16:00:48 2025 GMT
Subject: CN=a0fcc849780b17d846007680bb5f423a82ef859f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:5a:b1:e6:c4:7e:3c:53:82:61:da:2b:b2:
90:8e:32:fd:ac:6f:86:f4:ea:ea:d7:38:21:e6:7e:
5e:6d:f5:07:b0:c0:39:61:91:f9:d3:8f:f2:43:82:
55:e2:1b:82:b3:d7:e8:a4:47:e7:6b:e8:62:37:ee:
7d:a6:46:74:b8:a5:32:96:8b:95:a7:dc:f9:dd:d0:
e9:83:d0:5a:00:65:88:87:cc:dd:c2:48:38:85:bb:
a3:8e:d9:2f:0d:3a:81:70:de:6e:9b:10:45:00:48:
4b:b9:f2:1b:fd:01:bb:2e:81:d3:ca:f5:d5:0f:fc:
1b:54:9e:3d:f2:66:d5:4b:50:5b:fd:e2:81:e2:33:
a7:7d:97:49:23:c2:42:23:cb:e2:9d:f1:88:2a:54:
1a:02:20:8c:7a:a3:69:7d:cf:ea:e6:db:23:18:29:
42:7b:ab:da:74:d1:dc:89:c7:dc:19:52:19:52:d0:
04:57:8e:fd:c1:ad:32:c9:68:79:24:62:43:19:57:
6b:be:50:7b:44:39:de:04:43:e9:90:be:e5:22:e2:
bc:39:ce:1a:29:a1:e3:3b:8b:31:47:b5:d6:2b:8d:
65:7e:8d:63:16:ea:7f:70:a8:d0:e7:64:a9:0c:c4:
19:02:8a:4c:04:45:53:7b:1c:b8:e0:e5:fc:74:a1:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FC:C8:49:78:0B:17:D8:46:00:76:80:BB:5F:42:3A:82:EF:85:9F
X509v3 Authority Key Identifier:
keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:84:c9:68:75:08:14:e5:4c:20:12:1a:4a:da:63:50:39:cf:
f5:ba:7b:97:b7:90:eb:74:12:5a:90:8e:16:8b:c4:ea:4a:cd:
90:90:88:2a:30:c2:31:a3:e9:79:12:6a:8e:6e:e2:a2:ba:fd:
61:f2:53:d7:f0:ec:46:23:65:76:68:9c:aa:39:aa:82:0f:84:
d9:ba:e7:92:60:ae:9c:39:b4:2d:39:b5:88:87:13:83:5e:a0:
a7:a6:38:d5:7c:ae:d3:0a:ab:d0:d7:ac:94:b1:34:4b:43:6c:
7a:f1:cf:42:8c:74:a0:d8:48:c1:0f:96:16:cf:de:59:1b:51:
1c:b1:99:f8:53:83:ae:81:db:b8:8d:27:44:52:fa:f4:16:31:
99:b4:23:b4:43:f0:c9:71:e6:39:a8:08:f5:1a:a3:bf:54:80:
0e:57:df:43:99:eb:77:a3:b4:6c:f0:ad:10:2e:d2:35:d5:a3:
40:fe:9c:31:35:5a:55:f1:0f:b3:92:b4:ae:6e:64:39:fe:d3:
53:4f:7b:b6:f2:4b:b1:0e:1f:ed:b1:25:79:f9:50:9b:83:94:
63:09:36:d7:c5:48:63:54:4c:8c:77:50:35:88:86:eb:ee:a1:
22:94:88:aa:69:90:48:b5:4b:c9:b7:a3:1f:19:d3:ac:b6:d4:
91:42:f9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:33:14 2025 by rpki-client