Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
File: eY97H9gCs9xqvXpc2nhqYxHh1j0.mft (raw, json)
Hash identifier: +39cjMYCxmxDx1aZaeoKWsWHukWUja5zQNMpIMjj7hk=
Subject key identifier: AA:B4:83:46:81:9C:66:75:D5:24:CD:BF:9D:2D:20:CE:48:F7:92:97
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 0197684E4313E418CC77F283749B612D88BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
Manifest number: 0DD2
Signing time: Fri 13 Jun 2025 08:00:48 +0000
Manifest this update: Fri 13 Jun 2025 08:00:48 +0000
Manifest next update: Sat 14 Jun 2025 08:00:48 +0000
Files and hashes: 1: eY97H9gCs9xqvXpc2nhqYxHh1j0.crl (hash: Y9i1N4rwoXefKZcz/O8KIsFYEESENVqGJBkiZhBgDqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:43:13:e4:18:cc:77:f2:83:74:9b:61:2d:88:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jun 13 08:00:48 2025 GMT
Not After : Jun 14 08:00:48 2025 GMT
Subject: CN=aab48346819c6675d524cdbf9d2d20ce48f79297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:35:bc:63:46:a4:24:82:9b:96:c8:bc:72:
9d:67:3d:a2:b7:96:0b:c1:7a:89:fe:3d:6a:65:eb:
a6:c3:7b:3c:0d:5e:3c:9a:12:7a:9a:52:9b:16:8c:
a4:78:c8:53:eb:89:6c:2a:7a:f7:21:c3:5a:23:16:
11:1a:e1:e0:9e:f8:d0:43:c7:19:8c:76:8a:e4:cc:
68:7e:c6:03:c9:62:7a:5f:9d:7c:07:a5:49:0f:92:
60:91:49:fd:d1:ea:98:ce:fa:8c:7d:90:7b:09:de:
c0:91:d5:5c:fe:be:3c:48:e2:d9:d8:e0:bb:42:a8:
1e:1a:c1:e8:82:b1:a6:a7:8b:1c:49:93:05:25:05:
52:de:84:f2:4f:0d:20:bf:34:99:fb:c0:c9:3f:b3:
b5:0d:a1:93:5f:90:f1:6f:19:a8:2d:e3:ce:37:ed:
c5:8e:ef:a9:e4:2b:57:21:ae:50:94:d5:6b:c0:e8:
32:41:b7:49:70:99:49:12:cd:64:9d:c7:fb:59:4e:
ec:b0:79:ec:ec:0d:8b:ae:fd:32:45:96:4b:3e:c4:
08:2c:ed:59:e1:2a:8d:c7:8d:f9:68:b6:96:46:74:
a2:94:b6:e7:16:5e:93:b3:41:05:cd:7c:b1:53:81:
d2:ac:3b:ad:dc:12:a9:21:00:39:df:67:60:3a:ff:
95:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B4:83:46:81:9C:66:75:D5:24:CD:BF:9D:2D:20:CE:48:F7:92:97
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:31:ef:7a:1f:c1:ff:65:21:b6:ec:eb:1f:bb:80:83:2e:20:
41:d9:34:6c:1f:b9:5e:07:6d:1a:fa:0f:af:02:91:91:2e:cc:
c5:4b:3c:00:6b:1d:4c:94:1a:7d:13:f1:24:01:b6:40:93:39:
83:04:a1:2e:f1:ac:3a:d3:10:ba:e3:66:18:a6:7f:db:9a:e9:
bd:b2:d0:61:d5:75:c0:ad:97:ac:c8:6b:24:eb:52:8d:fc:82:
ec:d0:ba:67:5c:36:fd:dc:a7:0c:46:9b:51:db:16:26:d0:f1:
d2:79:67:df:15:22:f2:14:54:49:da:e8:a8:c9:aa:e4:65:16:
af:28:7e:f3:06:ee:1d:fb:8c:3f:51:c0:55:48:59:2f:c0:89:
12:98:75:d5:07:fe:d7:be:d6:1c:b8:07:a4:e7:9b:d8:d8:14:
70:eb:8c:d0:01:ee:4c:17:a4:4b:ca:94:80:59:19:e7:f0:f8:
53:fc:bf:41:a5:23:66:96:b0:0b:ea:8f:3b:c9:b9:54:2e:a5:
8d:16:b8:49:b1:50:26:46:fe:53:ca:6a:62:49:74:03:76:82:
73:88:ed:76:1c:5e:12:c6:13:c4:7d:bb:74:cf:e5:2d:5e:bc:
b5:d6:d1:48:ea:1c:e2:24:b9:b9:71:6a:ff:ad:b1:81:a0:7d:
bd:57:93:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:48 2025 by rpki-client