Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
File: C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft (raw, json)
Hash identifier: fmbCVerx4jSpQe8kX2ODTJviNsE0eOz3kQmQJqfGRNw=
Subject key identifier: 5D:29:07:78:28:94:34:61:90:F0:F7:38:27:DE:69:58:44:B5:F5:72
Authority key identifier: 0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
Certificate issuer: /CN=0bfa7348d6c1d7186328328720730f684fa20edc
Certificate serial: 019769CF20B1A6321A79DF1E8FF4F59F275A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 15:01:11 +0000
Manifest this update: Fri 13 Jun 2025 15:01:11 +0000
Manifest next update: Sat 14 Jun 2025 15:01:11 +0000
Files and hashes: 1: C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl (hash: tEX4fct0IeKUw5XtaGS9jtQCD/Q85aTIMsixQt0JzzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:20:b1:a6:32:1a:79:df:1e:8f:f4:f5:9f:27:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfa7348d6c1d7186328328720730f684fa20edc
Validity
Not Before: Jun 13 15:01:11 2025 GMT
Not After : Jun 14 15:01:11 2025 GMT
Subject: CN=5d2907782894346190f0f73827de695844b5f572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:ef:27:a2:d8:5d:ab:41:4b:fc:31:93:00:
7c:2c:30:1c:13:b4:7a:22:01:22:cb:11:bd:d0:b4:
e2:b4:50:d4:82:6e:e8:24:62:f8:db:c6:80:bf:4d:
1c:4f:c3:1e:14:1f:a2:6f:1f:ca:b4:96:e2:58:c4:
39:0f:42:38:44:69:5f:0a:6f:56:89:84:f4:b1:be:
89:49:09:9f:4e:6c:c9:62:80:76:2e:e2:06:33:3b:
09:c6:91:64:51:af:ee:f5:99:d8:d2:47:91:52:31:
b8:89:a9:91:05:91:f6:7a:fd:a5:f2:cf:7f:d6:8c:
c7:08:a9:3b:a4:b7:4e:eb:c5:51:b4:76:b8:4e:1d:
b4:1c:36:52:e6:32:3d:dd:bb:78:43:30:2a:98:92:
a7:b5:be:f2:8d:e1:78:05:a0:f7:da:b9:2b:eb:d4:
b1:f2:45:b2:14:c8:76:33:90:e3:74:56:7f:f7:01:
ed:c9:96:a5:c0:ae:41:8d:b4:43:93:be:60:1f:92:
bb:8f:45:d0:14:6d:40:09:bf:5c:60:47:72:25:d5:
84:2e:18:08:99:00:c0:30:c8:ac:fe:87:a0:49:18:
ad:9a:18:76:50:c8:02:4b:0e:7a:35:a5:60:1c:f6:
9e:73:53:52:ba:73:41:40:20:59:17:0c:2d:53:f5:
a0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:29:07:78:28:94:34:61:90:F0:F7:38:27:DE:69:58:44:B5:F5:72
X509v3 Authority Key Identifier:
keyid:0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:97:5e:25:46:f2:9c:06:61:41:43:fb:bf:25:19:11:24:05:
37:c5:62:39:cc:8f:3f:e6:c3:7f:07:7b:11:6b:30:df:5e:f2:
95:a5:7f:96:4e:f8:a5:d3:86:82:93:3b:94:e4:31:31:d1:15:
ff:1b:e3:ef:1f:67:ff:c4:8b:61:14:16:4f:ae:b4:17:52:b6:
1f:a3:e3:41:03:53:d2:38:00:ef:d9:ac:0c:c1:85:bd:dc:b2:
38:e4:6a:ae:03:0d:82:f8:38:1e:65:c9:f4:eb:6a:a2:9c:23:
ca:a5:f9:91:ee:1f:6c:d7:2f:6b:32:c4:fa:d6:5b:f9:9d:7d:
3a:b3:0d:b2:44:2f:ef:3d:24:83:df:39:62:8d:00:21:0e:03:
51:9c:e6:56:65:df:e4:7b:67:94:40:0b:4c:8a:92:96:f7:ad:
23:1d:6d:0c:47:e3:fe:67:93:7e:e1:b3:2a:80:d4:21:de:6a:
9b:41:26:d1:70:11:a8:a2:23:e4:be:99:2a:89:78:d7:a0:2e:
41:f2:94:08:77:bf:99:16:7c:a0:18:0e:85:99:45:bc:79:04:
fb:de:c6:57:96:aa:6c:3b:93:ae:c2:a5:03:f0:77:ff:8e:77:
59:4e:5d:2f:9f:35:21:c6:24:17:47:2e:1f:4e:a0:e2:3e:fb:
c1:2b:1e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:43:31 2025 by rpki-client