Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft
File: in1zAecVR30mgJu6u0zQMr07Vhg.mft (raw, json)
Hash identifier: lJ7sJRGEGlehk6ZzdASnayCSo6vDhQlzyFx+Uxm6gCM=
Subject key identifier: 44:BB:01:E2:02:C0:C6:14:BB:86:6B:D6:FB:B6:4B:61:32:09:06:3B
Authority key identifier: 8A:7D:73:01:E7:15:47:7D:26:80:9B:BA:BB:4C:D0:32:BD:3B:56:18
Certificate issuer: /CN=8a7d7301e715477d26809bbabb4cd032bd3b5618
Certificate serial: 01976C2ACDA1C3B1730FABF282915276D250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/in1zAecVR30mgJu6u0zQMr07Vhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft
Manifest number: 023D
Signing time: Sat 14 Jun 2025 02:00:33 +0000
Manifest this update: Sat 14 Jun 2025 02:00:33 +0000
Manifest next update: Sun 15 Jun 2025 02:00:33 +0000
Files and hashes: 1: in1zAecVR30mgJu6u0zQMr07Vhg.crl (hash: ZPAUzTWW5f+3Sh9DLfrkgus2QTQeSmVmMh9jH3GQQBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/in1zAecVR30mgJu6u0zQMr07Vhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:cd:a1:c3:b1:73:0f:ab:f2:82:91:52:76:d2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7d7301e715477d26809bbabb4cd032bd3b5618
Validity
Not Before: Jun 14 02:00:33 2025 GMT
Not After : Jun 15 02:00:33 2025 GMT
Subject: CN=44bb01e202c0c614bb866bd6fbb64b613209063b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:70:f8:8f:6e:14:45:8e:19:c7:dd:f1:31:
b3:0c:8c:d6:ba:99:c6:27:2e:3c:02:7c:98:86:cb:
98:7b:07:27:29:2b:0e:57:e8:21:88:28:94:30:96:
df:c3:79:2e:21:7a:50:da:ca:e6:f9:7a:66:87:cc:
a9:4c:ae:a7:29:82:ae:62:3b:88:4c:b2:0a:1c:99:
d9:42:6d:5e:ca:7e:d6:8e:86:02:95:e0:19:87:40:
28:4a:90:fa:dc:81:a6:64:bd:40:72:a8:2d:e4:57:
38:f8:ea:52:a6:02:91:85:9a:a9:84:88:d2:98:48:
18:62:6a:63:50:33:76:e9:fa:b9:10:a7:8c:7c:81:
f3:fa:e0:bb:8a:60:9e:f7:3c:fa:a8:93:d2:c9:cd:
4f:97:32:aa:fc:7c:c7:f1:dd:62:b6:25:d2:38:3e:
16:55:41:b2:17:3f:55:df:14:92:a9:d4:3f:05:2d:
63:ea:fc:56:5b:b5:20:12:b7:b4:a3:1a:92:10:b5:
e3:fd:c6:d8:97:38:d5:e0:f8:f9:07:08:47:8b:b7:
da:76:28:8c:44:58:a0:09:2b:40:e5:40:2c:14:91:
f2:45:dd:56:d4:2a:ce:fb:ba:a7:af:53:ad:a3:6f:
66:ec:42:39:ed:15:0d:1f:5f:91:b9:9a:1d:2f:19:
fd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BB:01:E2:02:C0:C6:14:BB:86:6B:D6:FB:B6:4B:61:32:09:06:3B
X509v3 Authority Key Identifier:
keyid:8A:7D:73:01:E7:15:47:7D:26:80:9B:BA:BB:4C:D0:32:BD:3B:56:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/in1zAecVR30mgJu6u0zQMr07Vhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:1d:d5:08:29:b9:83:e5:3e:c1:0c:5a:3b:a9:31:64:ea:72:
1a:83:54:2b:7c:76:1c:f6:53:ea:6c:4e:62:a9:08:a3:29:4c:
7b:09:4c:ee:b9:9b:30:8c:17:6a:19:6c:ce:74:06:c7:13:f4:
2b:80:57:9e:9b:40:0b:e1:1e:a4:bf:2f:e0:87:c1:bf:9c:81:
5e:64:6c:51:9e:f8:5d:2a:a7:b0:39:c6:5c:39:ac:67:20:c9:
44:a6:a3:db:08:27:20:2c:69:a9:a4:9d:cf:01:7d:3e:3a:e1:
19:40:93:05:53:27:20:af:6f:c5:38:ef:3e:e1:95:ee:cd:96:
87:f6:02:61:f4:bc:0f:37:ba:30:10:ef:e9:e7:a2:17:ae:39:
e6:14:b0:41:9b:e5:ac:dd:a0:39:ea:9d:12:8e:d2:63:ad:52:
7b:19:21:3a:8b:e5:37:bf:0c:26:74:2e:ef:9c:77:c2:55:a0:
f9:96:39:6e:41:c5:8d:b8:10:75:61:f7:d6:ea:08:c9:39:7a:
86:cd:03:52:a8:11:c1:90:4b:6b:bf:03:a1:70:8f:92:14:35:
c3:1c:f0:4d:1e:2f:9f:ab:c3:d2:0b:46:53:d9:6f:4b:21:5d:
38:74:cd:c4:99:eb:ef:20:27:11:2f:fb:3d:08:be:96:dc:90:
1a:13:2c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:19:36 2025 by rpki-client