Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
File: RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft (raw, json)
Hash identifier: 6XciiJTdmaZlBcG19Co8ycShKLn4FQGDa80mNDK5qRA=
Subject key identifier: AE:45:B1:52:F2:CD:D6:0B:B8:D0:80:F1:2F:2A:66:B0:67:44:D1:4F
Authority key identifier: 45:98:1C:E7:19:42:D4:57:29:F8:70:6E:2B:B1:B0:14:9A:52:B4:15
Certificate issuer: /CN=45981ce71942d45729f8706e2bb1b0149a52b415
Certificate serial: 0197711A2A28D16559D54BF2DCB9A8508083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
Manifest number: 158D
Signing time: Sun 15 Jun 2025 01:00:29 +0000
Manifest this update: Sun 15 Jun 2025 01:00:29 +0000
Manifest next update: Mon 16 Jun 2025 01:00:29 +0000
Files and hashes: 1: RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl (hash: xG4D9ku4/IRWj6bDeBtS/ML6rGCcNsrijJVUWf8vvX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:2a:28:d1:65:59:d5:4b:f2:dc:b9:a8:50:80:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45981ce71942d45729f8706e2bb1b0149a52b415
Validity
Not Before: Jun 15 01:00:29 2025 GMT
Not After : Jun 16 01:00:29 2025 GMT
Subject: CN=ae45b152f2cdd60bb8d080f12f2a66b06744d14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2d:23:c4:6e:a0:f0:cf:f9:78:46:6c:91:28:
c8:b1:8a:0d:73:01:34:e6:7c:7d:50:7a:29:d8:a2:
c0:fe:a9:4d:92:1d:39:08:5e:52:9d:e8:0d:02:9d:
41:75:55:f8:9c:fb:8a:7f:0c:db:ae:1b:94:a7:b0:
c0:14:fa:d2:09:4a:90:0e:08:f5:73:e9:ad:33:8b:
82:ae:14:bd:12:7d:4f:8d:9e:b5:64:97:5e:e3:1d:
47:f0:e5:a0:e1:5e:6f:62:ec:ba:44:3f:ef:ac:28:
56:1d:35:80:ee:48:86:d6:31:2c:0f:0d:54:ae:dc:
b4:93:f0:4b:a1:0b:f3:e0:13:8b:85:bd:d7:8d:04:
2c:63:75:b4:21:71:62:4f:c2:06:25:71:2f:bb:06:
5a:2b:cc:f9:a3:9c:51:ae:74:21:8d:13:57:0f:de:
bf:f5:88:cc:e3:5c:a2:30:e9:8b:85:15:45:d7:79:
bb:8d:7b:1b:8e:6e:ae:81:7a:18:5f:42:75:bc:4b:
ab:33:cc:c3:b7:f3:a3:69:be:84:c6:68:44:79:5a:
cc:e1:07:ef:42:be:26:c3:66:90:e1:2f:a5:55:43:
93:3d:74:69:8a:b9:36:5d:d2:46:69:d5:2c:ac:cf:
28:cc:c0:5d:3e:4a:db:a2:0f:cd:4b:00:2c:cc:ae:
34:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:45:B1:52:F2:CD:D6:0B:B8:D0:80:F1:2F:2A:66:B0:67:44:D1:4F
X509v3 Authority Key Identifier:
keyid:45:98:1C:E7:19:42:D4:57:29:F8:70:6E:2B:B1:B0:14:9A:52:B4:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:af:22:9c:d1:6b:8a:96:1b:cf:ac:44:43:9e:8e:b4:e4:da:
46:db:59:0b:15:45:29:eb:75:b2:87:97:ed:35:7f:a2:93:ba:
0c:6e:58:1f:86:a7:bd:f8:16:27:ee:d2:4e:d6:3a:60:37:9e:
fb:a6:a2:fc:26:9b:b1:86:ad:a7:18:33:d7:fb:d7:19:3d:61:
e2:d4:e1:77:42:7f:4a:cb:56:85:77:f5:bb:02:26:9a:29:5a:
b3:5a:1f:d7:ca:93:3e:43:79:6b:17:cd:99:c8:b4:a3:f6:ca:
a9:00:5d:6f:23:dd:7e:d3:9b:60:b3:81:7a:47:4c:cb:d9:e5:
ba:2c:dc:df:19:1a:b2:84:09:52:af:ee:c8:4b:03:82:0e:8a:
0e:63:d5:97:0e:c5:10:aa:e6:12:67:d9:f5:cc:7d:81:86:f0:
cd:f0:11:3f:9a:95:39:91:dc:1c:2b:2a:10:a7:e2:54:95:ec:
b5:47:8f:20:89:ff:eb:c8:9f:26:3a:92:8c:65:91:b2:3c:39:
2c:b7:27:c8:db:ab:7b:e7:bd:b7:3b:05:5b:bd:5e:52:e3:b6:
20:0c:41:f3:27:17:43:f1:09:f3:f4:6e:70:e4:2d:eb:7c:b9:
26:00:3d:8a:92:77:b2:50:a5:a1:c2:7f:17:7e:82:ad:93:f1:
12:90:3f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:58:21 2025 by rpki-client