Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
File: EsCzmbynzX_KI2gTkGefXMqVueE.mft (raw, json)
Hash identifier: +z8rJN1VSqtGLuQ3pzanoxnGwE4pMvE1Equal3RBK3Q=
Subject key identifier: 6A:A2:76:96:FF:C1:02:20:58:08:E7:75:2A:1D:E2:E7:88:43:7C:03
Authority key identifier: 12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
Certificate issuer: /CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Certificate serial: 01976A0597F55EDE6D4804B0726BD3B08099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
Manifest number: 12FB
Signing time: Fri 13 Jun 2025 16:00:40 +0000
Manifest this update: Fri 13 Jun 2025 16:00:40 +0000
Manifest next update: Sat 14 Jun 2025 16:00:40 +0000
Files and hashes: 1: EsCzmbynzX_KI2gTkGefXMqVueE.crl (hash: 3pkQ44FVG1q0ZVkJVHWGCJJz4xIzzojK8PiJu1aAKSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:97:f5:5e:de:6d:48:04:b0:72:6b:d3:b0:80:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Validity
Not Before: Jun 13 16:00:40 2025 GMT
Not After : Jun 14 16:00:40 2025 GMT
Subject: CN=6aa27696ffc102205808e7752a1de2e788437c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:6c:15:80:f3:62:93:30:40:25:ad:ff:a0:
ea:43:9d:6f:e4:fa:61:b7:e9:31:fb:de:c7:ae:7f:
39:88:fb:a1:27:97:a7:c1:bb:3f:b5:99:ab:51:47:
1e:ca:8b:d3:ba:60:9c:80:0c:48:51:3a:7e:da:52:
c0:d6:1a:e2:ea:9f:63:a0:90:f5:57:a0:7c:7b:16:
04:28:aa:a2:ff:ed:f7:e5:51:7c:5f:e1:74:b2:9b:
31:61:a6:1b:da:72:73:da:3d:fc:83:4e:52:e5:9c:
f2:28:e0:3d:7e:57:f4:1f:9e:b0:f7:cf:1c:d9:79:
0c:d8:f9:12:d5:bb:95:76:43:95:d2:d3:23:5b:93:
b1:5f:9f:38:46:e5:0b:fa:35:d5:94:86:df:90:c4:
25:65:5a:f3:5a:88:72:9c:74:9b:e6:f2:e7:ff:30:
91:76:b7:bb:23:1e:70:96:57:9b:c8:16:3e:a8:b5:
aa:ca:ef:98:07:7d:65:81:7f:a5:0f:8a:74:c5:3f:
fd:e6:e5:aa:e3:93:85:12:ba:fe:65:19:56:ee:de:
2f:d4:e1:89:b6:6c:f5:a8:45:11:6e:0b:1d:21:d5:
f7:6f:f6:d4:dc:f6:07:e1:c8:69:b6:89:8c:fb:3d:
89:62:28:49:59:94:8e:29:ad:c4:ae:5c:1f:fe:db:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A2:76:96:FF:C1:02:20:58:08:E7:75:2A:1D:E2:E7:88:43:7C:03
X509v3 Authority Key Identifier:
keyid:12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0c:9c:3f:ca:e4:ff:5f:62:85:0d:b6:f4:28:28:08:b4:33:
67:fe:3c:84:fa:4c:1f:26:cd:26:98:e4:5b:c2:d4:fb:10:95:
e7:e8:13:c7:f3:38:8e:fd:c0:2b:5f:05:68:29:38:bb:f0:31:
ee:0b:16:05:62:f2:d0:69:ac:b2:2f:df:62:ec:74:01:50:f9:
27:14:e2:4d:ef:2c:74:34:5c:05:69:ef:59:dd:9d:8d:d1:61:
76:89:eb:c3:90:c4:a3:6e:2e:86:48:68:42:68:d2:25:08:b1:
70:63:cc:8e:7d:40:60:31:e8:e5:7d:6f:e4:43:c6:55:27:f6:
ac:f3:bf:cf:20:e3:89:d3:80:ec:29:b1:1c:76:79:61:00:ce:
a2:89:c3:a2:d2:0f:d1:3f:da:6e:99:06:28:84:7e:a4:fd:29:
ac:38:5f:e1:ef:3c:b0:8b:72:99:0f:fa:50:4e:7a:e1:ae:db:
a4:03:8e:da:cc:10:d4:d0:ab:36:97:dd:66:b3:ab:b0:41:a0:
47:9e:22:7d:03:74:a0:24:be:07:a2:cb:5b:90:35:f2:a5:e5:
ab:65:e1:b8:04:44:57:53:ad:cd:14:ce:04:f4:26:be:03:5d:
ed:3a:25:3b:2d:d8:8a:43:c1:49:89:c8:e0:1b:c7:df:1d:46:
b3:8a:fc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:19 2025 by rpki-client