Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
File: 1T5Pyhar83QtTaK_nD2abpHpbuU.mft (raw, json)
Hash identifier: /ldbMqt7GW4LS+LkxdmQfk+cqPnR0keEzbJYiAZ2Zks=
Subject key identifier: E8:65:1C:3B:49:3E:D8:B8:8C:E9:13:3D:AB:7E:06:59:A3:1C:13:07
Authority key identifier: D5:3E:4F:CA:16:AB:F3:74:2D:4D:A2:BF:9C:3D:9A:6E:91:E9:6E:E5
Certificate issuer: /CN=d53e4fca16abf3742d4da2bf9c3d9a6e91e96ee5
Certificate serial: 0197684E72527B462DA63636A5DC55904864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
Manifest number: 129F
Signing time: Fri 13 Jun 2025 08:01:00 +0000
Manifest this update: Fri 13 Jun 2025 08:01:00 +0000
Manifest next update: Sat 14 Jun 2025 08:01:00 +0000
Files and hashes: 1: 1T5Pyhar83QtTaK_nD2abpHpbuU.crl (hash: Q3zGP8rPVdwp9SABex+bsMdJpS0R+CzsVvq7A4lnxEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:72:52:7b:46:2d:a6:36:36:a5:dc:55:90:48:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53e4fca16abf3742d4da2bf9c3d9a6e91e96ee5
Validity
Not Before: Jun 13 08:01:00 2025 GMT
Not After : Jun 14 08:01:00 2025 GMT
Subject: CN=e8651c3b493ed8b88ce9133dab7e0659a31c1307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:8c:6a:f7:a3:de:59:f7:a9:85:14:8e:3b:
ed:d1:ae:c9:b7:b2:88:02:31:09:52:d8:b0:f5:b8:
5b:74:b2:68:01:e3:09:64:63:cf:10:be:cc:2a:ba:
6d:fe:62:d8:2b:db:2d:e1:60:ae:f6:69:4a:e5:43:
6b:1d:d2:27:87:2b:8c:c0:ab:21:3d:9e:a3:ca:3e:
a7:fe:21:6b:65:af:06:19:39:04:19:3f:dc:8f:da:
dc:f3:c6:93:c1:07:3d:04:f1:38:0c:31:85:87:e0:
7c:6e:a4:a2:60:53:96:a8:26:af:a3:37:fa:2f:0a:
a8:e6:6d:8c:98:92:f8:f1:b6:72:20:c0:24:6c:37:
33:65:a4:ca:53:e2:55:b5:68:2d:16:24:7c:20:73:
32:7a:f8:e0:4d:0d:29:f0:20:59:7b:bd:7c:19:51:
17:09:29:8a:19:32:aa:85:22:83:13:b6:18:7c:73:
dc:a9:a9:e4:60:2d:99:6f:21:f8:52:ea:26:e5:ff:
f5:df:70:ef:ac:0f:b3:08:1d:7b:29:46:3e:dc:e9:
23:25:7d:06:5f:50:ca:5a:63:ec:55:a1:72:86:2d:
07:02:cb:07:bc:96:5c:87:13:72:94:92:a8:c5:2c:
cd:8d:2c:32:46:bb:e0:3e:aa:fb:76:57:10:b8:cd:
e9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:65:1C:3B:49:3E:D8:B8:8C:E9:13:3D:AB:7E:06:59:A3:1C:13:07
X509v3 Authority Key Identifier:
keyid:D5:3E:4F:CA:16:AB:F3:74:2D:4D:A2:BF:9C:3D:9A:6E:91:E9:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:41:36:2a:d1:84:01:6e:87:56:6a:46:0d:0f:f6:12:2a:2e:
cc:98:ef:e1:62:a8:6a:06:eb:6c:54:43:a8:fd:87:bd:14:99:
13:08:5d:7c:94:38:bd:85:70:09:d0:52:87:64:d8:de:84:bc:
ed:8d:df:a0:12:d9:11:1c:fb:49:7c:33:59:9f:83:14:b0:6c:
13:50:7e:52:4d:9e:54:b9:b9:46:3e:c5:76:39:14:63:de:ea:
ed:ad:e8:19:6e:8e:ab:37:85:3d:4e:4a:ff:91:13:3e:19:56:
31:4b:4b:88:82:be:29:37:cc:ef:a1:39:e6:9c:57:7d:4e:02:
b8:52:62:0c:4a:c8:fa:2b:f8:76:5e:3d:87:65:48:c0:69:b1:
c6:3d:22:90:e4:12:96:ef:e9:1c:c9:9c:81:75:58:d4:39:e2:
d6:fe:7d:21:25:ac:a4:d9:60:94:4b:78:53:1d:08:ae:50:57:
32:19:dc:92:dd:8b:ce:2b:82:89:4c:62:c4:36:72:5e:cf:12:
23:f7:5a:a8:79:25:c0:ca:55:da:3d:70:f6:f8:f1:9a:c4:3e:
21:e0:90:00:4d:72:f0:9d:62:06:97:1d:70:d8:f5:66:3f:a6:
cc:66:77:ab:33:87:e9:b7:61:75:36:23:2e:12:be:6d:74:34:
63:fd:b6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:18 2025 by rpki-client