Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
File: d11030Q8uAUXzkFQ3OImYpQPHXw.mft (raw, json)
Hash identifier: Ut8qoCL2F/5XP5uBsxS67GY/SsVAnL6L8qhLgpymhbo=
Subject key identifier: 65:DC:3A:D8:AA:55:FC:A2:C9:8F:0B:04:2A:C0:05:A7:8A:75:7A:D1
Authority key identifier: 77:5D:74:DF:44:3C:B8:05:17:CE:41:50:DC:E2:26:62:94:0F:1D:7C
Certificate issuer: /CN=775d74df443cb80517ce4150dce22662940f1d7c
Certificate serial: 01977564E42BE902E87D08AFFAE193331194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
Manifest number: 09CE
Signing time: Sun 15 Jun 2025 21:00:35 +0000
Manifest this update: Sun 15 Jun 2025 21:00:35 +0000
Manifest next update: Mon 16 Jun 2025 21:00:35 +0000
Files and hashes: 1: d11030Q8uAUXzkFQ3OImYpQPHXw.crl (hash: Amh2A/wnNlLci0b2y3Cmn4gUaAlL72tcz9E8MDAisFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:64:e4:2b:e9:02:e8:7d:08:af:fa:e1:93:33:11:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775d74df443cb80517ce4150dce22662940f1d7c
Validity
Not Before: Jun 15 21:00:35 2025 GMT
Not After : Jun 16 21:00:35 2025 GMT
Subject: CN=65dc3ad8aa55fca2c98f0b042ac005a78a757ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e3:31:9b:b1:d7:ef:d2:67:22:d2:20:d3:bb:
09:db:24:23:2d:bd:75:8f:0c:a6:3f:06:e2:73:f7:
25:4f:f0:b2:d4:8f:88:49:d9:a9:f8:0f:bd:13:ef:
ee:f8:82:ff:f1:d4:25:6f:bd:bd:cc:d1:63:e9:3b:
19:7a:5d:19:dc:46:af:f1:27:a6:4c:36:62:de:86:
f4:bd:ed:ad:65:d0:3b:69:36:50:a2:3b:a0:3e:84:
7b:fd:16:9a:f9:ea:9f:cf:49:49:44:7b:6f:09:92:
67:85:1b:16:ec:43:8d:4b:55:c6:45:0a:cc:dc:78:
6d:86:10:2e:23:93:8e:e4:36:07:2a:11:a0:33:b5:
7e:99:5a:31:24:d5:39:08:99:d5:04:45:2a:69:7b:
e4:24:33:da:a8:e9:64:46:62:f2:98:f9:8f:05:f4:
eb:31:64:50:bd:f8:46:c8:6a:7a:99:c1:16:d2:fd:
1c:f5:46:03:11:cd:03:9f:4b:30:fa:f1:d7:81:f7:
36:32:f4:6d:04:bf:38:1b:18:ea:e5:bb:55:0a:99:
bf:27:e6:f4:db:c3:8d:11:d9:80:fb:d4:28:91:c3:
3e:67:e0:05:5d:7e:30:04:7f:c8:59:57:21:dd:70:
ee:f4:a8:5a:1b:b7:54:1c:d8:05:67:b2:f4:2e:d7:
69:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DC:3A:D8:AA:55:FC:A2:C9:8F:0B:04:2A:C0:05:A7:8A:75:7A:D1
X509v3 Authority Key Identifier:
keyid:77:5D:74:DF:44:3C:B8:05:17:CE:41:50:DC:E2:26:62:94:0F:1D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2f:89:16:af:5a:d4:64:b4:d1:40:bb:28:fa:95:18:3c:d7:
c4:3f:32:0b:ac:c2:cf:2d:44:49:ff:5e:c6:4a:52:79:26:88:
ee:e1:82:e9:7b:f3:a8:4e:2c:f4:bd:db:23:9c:a9:57:76:35:
cb:88:a3:35:dc:96:10:e1:04:53:d5:39:1a:e7:64:4c:74:42:
20:2d:9f:35:56:e9:d5:9a:d5:e9:de:dc:d2:6c:09:ab:d3:47:
14:e7:21:30:f3:cb:88:4d:08:07:b6:ab:d6:c7:1e:b2:a2:f8:
78:82:05:ec:af:9e:49:8c:cb:2e:3a:4c:9c:f9:f2:a3:3f:eb:
8e:94:af:41:e1:ba:06:7f:57:2f:3d:7a:61:c8:a9:99:da:2d:
36:71:c3:cb:72:b2:da:2b:3d:bd:dd:f7:02:ac:26:4b:87:6e:
a9:73:20:36:ef:4e:34:40:81:91:9e:3f:45:22:2c:23:19:de:
9b:e1:b0:42:50:b8:40:84:5d:f9:bf:0b:46:b8:cd:91:23:99:
5a:d3:83:1a:01:76:13:33:86:b1:d5:a0:c6:fe:2f:6b:87:d6:
84:71:a0:36:ed:2f:f3:d8:3b:6a:47:81:80:95:94:77:88:7c:
34:fa:51:fe:8c:49:17:08:ae:89:3d:24:94:73:b8:d9:bf:5a:
33:8f:b5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:40:25 2025 by rpki-client