Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/332f0a-57d1-40d0-a86b-77213f991db9/1/67YrcxkGEIQRy1VV2BvcOj_cbbg.mft
File: 67YrcxkGEIQRy1VV2BvcOj_cbbg.mft (raw, json)
Hash identifier: fDLjz47V5grqXVjZsleDhEb4V0g4/wSsdemoYK2/Yqg=
Subject key identifier: 12:0C:DE:EB:9A:A9:77:67:0A:83:4C:7C:97:A9:1F:7D:7B:2A:C4:93
Authority key identifier: EB:B6:2B:73:19:06:10:84:11:CB:55:55:D8:1B:DC:3A:3F:DC:6D:B8
Certificate issuer: /CN=ebb62b731906108411cb5555d81bdc3a3fdc6db8
Certificate serial: 0197684DEEF89332D336497B046B0522F042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67YrcxkGEIQRy1VV2BvcOj_cbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/332f0a-57d1-40d0-a86b-77213f991db9/1/67YrcxkGEIQRy1VV2BvcOj_cbbg.mft
Manifest number: 39
Signing time: Fri 13 Jun 2025 08:00:27 +0000
Manifest this update: Fri 13 Jun 2025 08:00:27 +0000
Manifest next update: Sat 14 Jun 2025 08:00:27 +0000
Files and hashes: 1: 67YrcxkGEIQRy1VV2BvcOj_cbbg.crl (hash: 6u7bb8RoovgvcQv6UgFZl/dWL10mbR+Hxtc1z4NA7Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/332f0a-57d1-40d0-a86b-77213f991db9/1/67YrcxkGEIQRy1VV2BvcOj_cbbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/332f0a-57d1-40d0-a86b-77213f991db9/1/67YrcxkGEIQRy1VV2BvcOj_cbbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/67YrcxkGEIQRy1VV2BvcOj_cbbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:ee:f8:93:32:d3:36:49:7b:04:6b:05:22:f0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb62b731906108411cb5555d81bdc3a3fdc6db8
Validity
Not Before: Jun 13 08:00:27 2025 GMT
Not After : Jun 14 08:00:27 2025 GMT
Subject: CN=120cdeeb9aa977670a834c7c97a91f7d7b2ac493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:04:a1:3d:a3:39:77:5b:1f:3a:64:7f:b5:
18:25:b3:9a:e4:b9:46:b7:44:5b:f3:d2:78:99:f3:
ae:cf:93:73:30:fd:81:53:83:9d:dc:eb:11:5d:5c:
63:a3:f5:e8:6c:51:7e:ea:9d:9b:7f:8d:bb:38:d3:
95:a0:2d:14:d2:99:5f:4c:17:41:01:01:91:88:aa:
9a:73:ec:54:a2:d8:3f:e1:b1:2e:28:46:d0:68:94:
e3:3b:12:7c:d8:66:48:14:61:c6:df:cd:78:a3:64:
3c:98:5d:e7:02:c5:f6:3c:46:7a:d5:63:80:da:51:
59:80:24:a3:88:24:29:63:a4:78:1e:16:f6:76:5c:
53:01:e3:6d:37:19:2a:3d:ce:c6:32:18:a4:73:b7:
4d:8a:06:4c:d0:a6:9d:e7:a9:ca:22:ff:1e:40:48:
43:dc:1a:d7:58:0a:e4:cd:c9:a0:a2:30:d9:e9:78:
a4:98:c1:f6:b2:dd:4c:3e:d9:eb:48:f5:54:45:e7:
b9:c4:a0:19:27:96:81:b3:92:82:cc:5e:ad:d2:9f:
ff:48:4f:c0:a0:5e:9a:af:7a:29:b7:79:17:d4:75:
83:75:38:1f:f7:df:6f:a7:df:87:53:54:54:3c:62:
a0:0a:b7:a3:b5:b6:fa:ea:89:27:ed:4f:63:53:11:
3a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0C:DE:EB:9A:A9:77:67:0A:83:4C:7C:97:A9:1F:7D:7B:2A:C4:93
X509v3 Authority Key Identifier:
keyid:EB:B6:2B:73:19:06:10:84:11:CB:55:55:D8:1B:DC:3A:3F:DC:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67YrcxkGEIQRy1VV2BvcOj_cbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/332f0a-57d1-40d0-a86b-77213f991db9/1/67YrcxkGEIQRy1VV2BvcOj_cbbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/332f0a-57d1-40d0-a86b-77213f991db9/1/67YrcxkGEIQRy1VV2BvcOj_cbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b9:e5:f0:0a:61:c8:d0:98:27:9d:2c:92:a5:1b:44:11:b2:
37:93:b9:49:fa:fb:af:29:fa:19:69:b6:91:7c:a8:2a:be:f3:
e4:e5:46:51:c6:b5:5a:08:4c:5c:c9:e4:37:d6:cd:a5:ed:a0:
a0:02:a2:c8:71:89:d2:08:66:56:b5:41:f5:46:16:ef:1e:9d:
39:ad:d1:c0:cf:cc:13:78:69:3c:2f:b0:e6:55:91:40:f2:d0:
bc:bb:3d:25:8d:80:a8:18:cb:c5:11:03:97:ed:aa:02:9d:63:
55:bc:5c:33:96:92:64:7d:15:47:e2:6f:70:8c:ab:4e:05:48:
46:ae:aa:ae:7c:2d:29:2c:7f:01:1b:de:30:9e:49:85:8d:ad:
4c:db:47:68:4b:62:b8:b5:ca:c6:14:ce:20:11:80:ed:6e:8c:
ae:04:71:46:99:17:64:92:81:c1:20:dc:77:1c:6b:60:71:0c:
ae:ee:51:30:70:15:d7:5b:6c:f8:96:fd:6e:1c:f5:6f:61:73:
14:55:58:0f:4f:24:0a:a9:2d:5c:ea:75:c5:05:75:19:7d:aa:
9a:8c:48:77:ed:78:c1:4f:1e:4a:79:de:c5:5f:19:45:a4:14:
09:a7:a3:88:04:35:8c:ae:b8:cf:ea:10:dc:49:b7:e1:34:81:
08:6e:1d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:15:38 2025 by rpki-client