Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
File: 94hH4ENTVu5e8IbBIEhAigQZG3g.mft (raw, json)
Hash identifier: 6b6AKjvZcVyRKsxizU2VyjkABoTVzUGadhGA3stT3no=
Subject key identifier: C7:B5:5C:72:31:26:B5:FB:D6:F7:D5:D0:0C:14:68:5D:53:A0:55:09
Authority key identifier: F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
Certificate issuer: /CN=f78847e0435356ee5ef086c12048408a04191b78
Certificate serial: 01976F9A36E6F77829F8D6F8DEA2AF89B8BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 18:01:06 +0000
Manifest this update: Sat 14 Jun 2025 18:01:06 +0000
Manifest next update: Sun 15 Jun 2025 18:01:06 +0000
Files and hashes: 1: 94hH4ENTVu5e8IbBIEhAigQZG3g.crl (hash: FGGaoatTEprBBdyopsS0xZcFhNlw/3uK8Bq+sDlaQxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:36:e6:f7:78:29:f8:d6:f8:de:a2:af:89:b8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78847e0435356ee5ef086c12048408a04191b78
Validity
Not Before: Jun 14 18:01:06 2025 GMT
Not After : Jun 15 18:01:06 2025 GMT
Subject: CN=c7b55c723126b5fbd6f7d5d00c14685d53a05509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:17:3b:81:da:69:64:79:65:1b:b5:00:5a:
99:3f:ab:f3:f2:15:7d:2d:a0:76:64:e7:6f:5d:6e:
d4:54:ed:6e:f2:08:ed:da:09:cf:e3:90:b3:50:32:
dc:c2:47:6f:e1:03:e3:e4:2b:0b:69:d9:6b:90:f2:
6b:71:b4:c0:96:c8:ef:72:0f:f7:d5:75:04:eb:20:
15:27:5b:b7:a3:b1:1a:91:22:27:b0:63:68:f9:5d:
f0:44:a5:a2:99:3a:2f:52:25:68:25:12:0c:b7:fb:
ab:d8:6f:99:21:03:70:ce:8c:93:7f:ef:6d:aa:ef:
59:24:e0:4c:f7:8e:91:b1:7d:3d:a8:3a:65:91:3f:
bb:48:03:ee:97:9a:a0:5e:e2:be:98:a0:91:d3:78:
3c:e9:11:c9:dc:fd:64:37:b7:56:94:1c:32:cf:de:
dc:e2:45:78:dd:fc:13:0b:68:b7:d9:1d:d7:84:6e:
9a:52:81:f5:66:aa:bb:02:ea:c8:20:36:cf:47:f5:
13:45:7d:e1:29:0f:d4:52:41:89:26:f0:4b:ac:fb:
1d:39:a6:c4:aa:0a:33:4e:f8:66:a4:29:1b:83:65:
82:f6:57:aa:16:c8:9b:73:40:4c:5f:e8:85:37:ef:
19:a6:bd:4b:a6:87:e0:72:09:8a:26:85:87:7a:d4:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B5:5C:72:31:26:B5:FB:D6:F7:D5:D0:0C:14:68:5D:53:A0:55:09
X509v3 Authority Key Identifier:
keyid:F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ac:3f:84:93:8f:ce:22:41:3f:67:bc:b5:f6:38:19:21:df:
78:4a:f8:4c:98:c5:58:3a:f9:52:f2:9b:af:dd:29:df:50:4e:
96:7e:4c:d6:38:eb:35:eb:64:6a:c7:dd:f5:08:66:4d:1b:05:
f1:76:f0:3d:26:f2:66:ad:24:d1:60:54:44:57:4d:92:75:43:
36:59:ee:de:d0:e3:c4:dd:4a:c6:f7:b2:e1:31:53:bf:03:e6:
63:b0:6d:24:3d:53:c8:aa:4d:ea:d3:47:aa:cc:ad:67:d1:31:
2d:21:1f:25:04:1b:a7:b2:51:b6:3d:fe:e9:3b:7c:21:11:ed:
be:3c:d0:3a:3c:db:7d:fd:22:60:44:7a:e0:cf:8d:d2:63:df:
9c:24:52:87:fd:cd:34:65:5f:73:5c:37:2c:6d:ad:3c:f9:fd:
38:67:1d:0f:e2:c0:bf:3b:3d:bf:e0:b5:03:a8:27:3e:09:c3:
7b:e8:7d:aa:5a:ef:53:4d:f3:21:4a:28:47:db:4c:1d:e2:c1:
98:f4:67:4f:c7:c6:83:9e:98:49:a8:9e:e3:b3:cf:60:57:a0:
36:54:2e:98:45:9a:26:de:1c:42:fa:22:dd:15:2f:3b:c4:49:
11:41:75:72:c0:a5:ea:29:cc:58:d2:e5:ba:28:b1:22:bc:08:
3d:f6:a8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:42:12 2025 by rpki-client