Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
File: eSttblvaBSZfwM6XGaYzvgSm6Xk.mft (raw, json)
Hash identifier: KSopuZExDTZapJDd1pjrpLPuoj/53ITHTdTFvhj8Szs=
Subject key identifier: C9:91:C6:5F:7E:F2:1D:6A:B0:6A:2E:46:FA:F8:3F:9E:3A:0B:B5:0F
Authority key identifier: 79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
Certificate issuer: /CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Certificate serial: 0197711A3554FE7945A655F98FA8648C65FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
Manifest number: 158D
Signing time: Sun 15 Jun 2025 01:00:32 +0000
Manifest this update: Sun 15 Jun 2025 01:00:32 +0000
Manifest next update: Mon 16 Jun 2025 01:00:32 +0000
Files and hashes: 1: eSttblvaBSZfwM6XGaYzvgSm6Xk.crl (hash: OVfp7o1jSQ/IjQB64UT7WobUMWIqaejjZC/hM5Z/sEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:35:54:fe:79:45:a6:55:f9:8f:a8:64:8c:65:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Validity
Not Before: Jun 15 01:00:32 2025 GMT
Not After : Jun 16 01:00:32 2025 GMT
Subject: CN=c991c65f7ef21d6ab06a2e46faf83f9e3a0bb50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:59:50:b6:8d:aa:01:ef:d4:94:33:98:9b:
ab:df:16:08:9b:16:ab:5d:60:9a:91:00:11:e3:b9:
ba:c2:06:e7:41:9b:39:ad:fb:65:07:68:cf:35:3d:
24:f3:e0:da:b0:32:03:a8:8c:7e:08:6c:e8:44:e6:
09:c8:3e:ec:b6:1f:42:f6:12:67:f4:bb:82:f0:1e:
e3:80:34:d0:a5:be:03:9d:df:dc:3d:71:ce:67:19:
bb:98:c5:6a:26:56:85:14:1b:a3:15:5f:e2:90:9a:
92:4a:5a:d5:d3:84:fd:8e:04:88:9e:46:51:5b:3a:
ed:fe:a6:ca:bf:b8:ac:42:2c:da:7b:88:23:b6:cf:
aa:5f:8c:5f:67:d3:44:7f:9a:59:ee:4e:d1:4c:3a:
a3:8f:98:99:e6:e2:14:e5:a2:57:02:de:4c:d4:ed:
1f:19:ba:a7:f2:19:17:cb:0a:3f:0c:f6:6d:b4:7c:
a4:5f:d5:8b:7b:06:08:1d:94:b3:fe:13:55:07:be:
3d:af:c2:78:c3:a6:27:fd:6b:df:12:ff:c0:ef:e2:
26:3e:61:27:61:08:9a:ce:ff:99:2c:eb:98:5e:7e:
ce:e6:c1:65:03:c8:4e:8d:76:a1:c8:73:35:59:ef:
b0:a4:93:c6:37:ec:67:d3:72:e4:10:3d:78:7d:1c:
2c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:91:C6:5F:7E:F2:1D:6A:B0:6A:2E:46:FA:F8:3F:9E:3A:0B:B5:0F
X509v3 Authority Key Identifier:
keyid:79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:34:b9:3f:11:3d:0b:c9:3d:8c:3c:12:3d:52:f7:0b:31:1d:
01:5f:8c:b0:05:07:e1:e5:6d:4f:31:9e:03:55:35:0e:d9:10:
90:3e:ef:f3:83:9c:8d:6e:00:47:5a:ea:78:c0:61:aa:07:f9:
17:0d:ce:dc:ff:9f:03:f1:70:d1:46:39:0b:ac:73:44:8d:7a:
fd:92:c2:5a:59:f0:6a:f7:ac:06:f5:cd:03:7f:97:b8:7f:81:
15:e4:06:fb:8f:59:df:54:f5:72:8a:67:25:d4:de:59:ad:85:
2c:bc:99:8a:df:df:cd:d4:d6:b1:a8:c9:a5:8f:93:ad:96:54:
c5:3e:b1:55:52:0b:e9:cf:3b:07:0b:5f:90:2e:06:a8:34:be:
65:7b:01:78:55:c6:7e:7a:3b:63:c5:9e:4a:4f:56:fa:82:8d:
d2:f7:a1:c3:15:e1:9c:34:9a:eb:d1:9b:f5:2c:1a:46:f8:45:
02:a6:47:63:83:9d:78:8f:07:77:73:4e:f4:7d:b7:e3:39:2e:
5e:f4:d6:ff:e3:a7:49:89:8c:3b:1d:d9:29:9c:1f:77:c6:cc:
ed:56:8c:45:5e:48:10:02:9b:16:c4:33:e4:b7:26:76:d1:ba:
79:ff:d3:70:49:1d:48:04:7a:9e:6c:dc:41:23:46:79:24:e1:
26:1f:67:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:42:47 2025 by rpki-client