Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft
File: cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft (raw, json)
Hash identifier: wFIEbCTs3KqyGX6skY6HIPy9cpAnRmuSdkKcGXlRX44=
Subject key identifier: 46:26:0D:1F:07:3D:2D:38:6C:28:D5:FF:5C:36:26:5D:4A:DB:1D:B7
Authority key identifier: 70:CE:E6:2B:79:47:2D:CA:E5:1E:AD:4D:8E:A0:69:23:87:0F:51:97
Certificate issuer: /CN=70cee62b79472dcae51ead4d8ea06923870f5197
Certificate serial: 0197718889EDA13689BFF33246CA76E73645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cM7mK3lHLcrlHq1NjqBpI4cPUZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft
Manifest number: 158D
Signing time: Sun 15 Jun 2025 03:01:02 +0000
Manifest this update: Sun 15 Jun 2025 03:01:02 +0000
Manifest next update: Mon 16 Jun 2025 03:01:02 +0000
Files and hashes: 1: cM7mK3lHLcrlHq1NjqBpI4cPUZc.crl (hash: 6iwBioU5a+lQ/gRwWgn8nhtAAAjAR3yJZZ6jTtBxB/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cM7mK3lHLcrlHq1NjqBpI4cPUZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:89:ed:a1:36:89:bf:f3:32:46:ca:76:e7:36:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cee62b79472dcae51ead4d8ea06923870f5197
Validity
Not Before: Jun 15 03:01:02 2025 GMT
Not After : Jun 16 03:01:02 2025 GMT
Subject: CN=46260d1f073d2d386c28d5ff5c36265d4adb1db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:3b:51:56:cd:a2:29:dd:30:f6:71:dc:c1:
a6:1f:12:d4:93:9c:d9:eb:83:42:57:a3:ce:09:f6:
41:2d:69:5e:cf:86:01:f0:88:07:96:7d:85:de:69:
a1:1b:fa:ba:28:67:5c:e4:e3:44:5d:47:29:10:c3:
f1:71:12:37:4f:40:a3:fa:60:ae:ad:cc:1e:4a:e3:
e0:a5:8d:a6:24:0a:20:ea:20:07:ec:59:3e:b6:42:
f5:df:c5:28:a9:10:d2:2a:54:5b:91:9f:89:78:45:
4a:1e:6f:7c:69:fe:ea:56:8f:f2:dc:f7:64:65:5a:
a3:9d:f1:e7:e2:a9:4a:b3:28:9f:73:0f:96:c4:04:
55:b3:54:c2:a1:c4:e8:49:df:da:83:5d:9e:14:77:
76:9b:43:b4:6b:cd:d1:ca:4d:11:9b:78:dc:3b:94:
fd:9c:c1:5d:e6:dd:0f:61:53:5f:cc:c5:af:82:89:
d5:29:1a:b7:5e:13:3b:fb:09:29:b6:3a:83:06:f3:
44:ac:6a:d4:f1:d2:a8:61:a8:2a:07:f4:1a:10:f2:
d8:47:7d:cb:32:42:f8:3a:33:66:96:1b:12:d4:31:
c4:e3:4f:c3:e9:57:03:37:01:88:ab:92:0e:45:74:
de:97:2c:36:08:e4:19:b7:51:17:42:0a:2c:42:d5:
b0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:26:0D:1F:07:3D:2D:38:6C:28:D5:FF:5C:36:26:5D:4A:DB:1D:B7
X509v3 Authority Key Identifier:
keyid:70:CE:E6:2B:79:47:2D:CA:E5:1E:AD:4D:8E:A0:69:23:87:0F:51:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cM7mK3lHLcrlHq1NjqBpI4cPUZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:85:5b:42:e8:4f:7d:34:2d:1b:84:93:b2:19:ee:8a:ca:25:
75:c4:57:6b:dd:96:56:ea:fb:18:0e:0f:b5:66:35:11:43:4b:
52:1b:5f:e8:ba:03:83:92:2d:24:ae:98:ce:cf:1b:72:65:79:
fc:4b:90:59:49:f7:a4:ca:a1:99:89:fa:93:a9:d6:68:b2:ff:
da:85:21:2c:7c:ef:97:80:4b:77:92:3a:3e:51:f6:3e:56:9d:
7c:fa:0f:0c:ad:1d:5a:4a:82:36:03:0d:68:5a:0b:c7:28:5c:
8b:2d:25:08:47:0b:67:71:17:35:98:29:be:e7:84:47:3c:bc:
08:1a:eb:d9:ad:5c:25:95:60:96:00:42:12:9f:e3:1d:8a:a2:
f6:89:d8:8f:f3:b3:98:04:7e:0c:a8:b8:ca:eb:4e:90:9d:7d:
77:d1:75:1b:1b:92:39:b2:45:1d:2c:4a:ec:de:3b:d7:5d:c4:
bc:fb:55:04:e5:f9:ae:90:03:a5:25:9f:05:24:96:31:0f:36:
e8:47:43:0e:ed:60:7d:b9:f4:38:32:fe:51:68:0e:6e:62:df:
55:e7:15:8f:08:32:5c:af:e2:94:bc:61:5e:05:ae:cf:0f:21:
5c:2b:ae:e1:7c:f8:46:fb:91:12:d9:db:d5:05:21:a3:04:50:
ef:82:1d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:46:07 2025 by rpki-client