Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
File: mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft (raw, json)
Hash identifier: KqjInX5iEMbVB/o8IAS+wPSo8lZ/96KzvHQFo4LGim8=
Subject key identifier: 10:03:81:C1:D0:21:45:5D:EA:56:E5:58:4F:8D:0B:2A:D1:AB:F9:77
Authority key identifier: 98:24:1A:AC:9E:DA:7B:EF:69:08:9F:64:7B:5D:8F:77:4F:F4:3A:26
Certificate issuer: /CN=98241aac9eda7bef69089f647b5d8f774ff43a26
Certificate serial: 01977075A56621BF1023E5D19CE189C9CB8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
Manifest number: 0CC5
Signing time: Sat 14 Jun 2025 22:00:47 +0000
Manifest this update: Sat 14 Jun 2025 22:00:47 +0000
Manifest next update: Sun 15 Jun 2025 22:00:47 +0000
Files and hashes: 1: mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl (hash: H9BBOcF3cTA0naQKoSjVSBxtffdULpyGdpA9AtIy7AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:a5:66:21:bf:10:23:e5:d1:9c:e1:89:c9:cb:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98241aac9eda7bef69089f647b5d8f774ff43a26
Validity
Not Before: Jun 14 22:00:47 2025 GMT
Not After : Jun 15 22:00:47 2025 GMT
Subject: CN=100381c1d021455dea56e5584f8d0b2ad1abf977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:3c:88:00:64:9f:2c:c7:a6:d6:33:1e:c7:
28:02:1d:b0:aa:d8:44:d3:ca:6d:2d:44:8e:52:0a:
10:63:61:b9:83:20:52:58:e8:a4:ef:02:8e:90:5f:
2e:cd:df:8f:ae:8a:6d:99:a5:b3:15:06:d8:a2:89:
34:64:fa:52:10:f3:9d:54:d8:8a:df:fd:43:30:53:
66:f8:4e:78:55:e1:a9:df:87:97:ae:b0:ca:7f:56:
76:61:72:82:25:3b:6a:ac:ef:81:ec:09:5e:77:a1:
bb:48:84:f0:cd:4f:c8:4c:83:e9:2b:11:53:97:e9:
a8:d5:19:96:e3:04:d0:31:d7:f8:f1:ae:7e:a2:03:
b7:fc:db:40:a6:89:35:c9:a8:5b:05:3b:3d:e8:8b:
a9:4e:1d:36:39:ad:3f:a6:aa:7c:e1:34:e1:ba:ad:
4c:39:ad:34:ee:f7:a2:8a:9c:47:a7:d2:e1:f4:b8:
eb:dd:3b:64:f9:bb:eb:4a:66:88:9c:58:c4:68:a6:
25:53:61:1c:2a:26:44:95:af:05:bf:00:b2:cf:ea:
f1:1e:fb:19:f2:af:50:30:27:a3:10:25:f1:5c:3a:
d4:11:d5:ec:44:b5:2e:92:9e:46:04:65:9c:1e:8f:
18:56:24:5e:c8:5b:c9:7d:cb:53:8c:7c:58:ea:05:
86:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:03:81:C1:D0:21:45:5D:EA:56:E5:58:4F:8D:0B:2A:D1:AB:F9:77
X509v3 Authority Key Identifier:
keyid:98:24:1A:AC:9E:DA:7B:EF:69:08:9F:64:7B:5D:8F:77:4F:F4:3A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ca:62:ef:30:9b:f6:dc:3c:6f:ea:88:90:f2:e0:29:a3:8b:
7f:1f:7c:8f:ce:1a:77:b5:9a:56:aa:ca:4d:a0:55:7b:57:c8:
20:92:44:ae:56:91:75:e9:8d:d2:17:79:c4:d2:a2:88:75:4d:
bb:ac:58:93:ff:89:f1:fb:fe:24:28:e7:7b:17:ab:1d:35:ab:
b0:ad:f8:37:71:bb:2c:69:12:dc:ac:b4:1a:eb:29:00:7f:19:
49:78:c9:d9:b1:a3:a2:b3:09:d2:43:0f:74:82:69:40:75:e7:
90:64:bf:4b:e7:ce:e4:31:3b:5c:cf:4e:d6:63:17:9d:1a:f1:
7b:91:3c:ee:c0:19:29:69:93:3b:0f:49:5b:4a:29:40:27:0d:
62:56:f8:12:30:a6:44:e6:19:6f:90:15:b0:4e:d4:12:49:04:
23:8a:d8:8b:9b:d3:8f:9c:7e:cf:0f:1e:5a:db:85:c1:76:4f:
21:03:1e:b9:03:83:28:e0:04:87:ae:0e:21:9d:68:46:22:bf:
d6:20:33:b5:e4:3b:4e:36:43:c2:db:58:81:29:91:fa:a8:7c:
a9:00:d5:1f:f5:b6:7a:64:45:02:eb:2f:4c:0c:d0:0e:a6:c1:
60:7e:bb:6f:50:4c:38:d2:dd:50:39:f4:6d:93:29:06:a1:04:
7b:48:cd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:58:28 2025 by rpki-client