Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
File: elJNrL4CqVkxyh1u4ps8iVek7L4.mft (raw, json)
Hash identifier: AKcCk43o3MNTnpLWnDCxjNP6YRuCaTNS1x1/WZfaQuE=
Subject key identifier: 2D:B4:A7:A5:35:10:7D:C9:6B:59:94:4F:B7:D1:80:E6:AC:3C:65:DB
Authority key identifier: 7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE
Certificate issuer: /CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe
Certificate serial: 01976929FA0B59D0364143C55E80E4A75830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
Manifest number: 039C
Signing time: Fri 13 Jun 2025 12:00:47 +0000
Manifest this update: Fri 13 Jun 2025 12:00:47 +0000
Manifest next update: Sat 14 Jun 2025 12:00:47 +0000
Files and hashes: 1: elJNrL4CqVkxyh1u4ps8iVek7L4.crl (hash: eBcwHnvBOBci9wboSbvseBtvDVZhMicEVw2GiPzHPe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:fa:0b:59:d0:36:41:43:c5:5e:80:e4:a7:58:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe
Validity
Not Before: Jun 13 12:00:47 2025 GMT
Not After : Jun 14 12:00:47 2025 GMT
Subject: CN=2db4a7a535107dc96b59944fb7d180e6ac3c65db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:08:ed:34:e2:cb:9b:98:e3:2a:ef:50:0f:f9:
07:cd:02:09:31:93:c6:0e:b4:5a:f3:3f:f6:3b:25:
4f:9c:59:db:be:45:f3:ee:07:6f:bc:47:85:eb:bc:
b0:1f:28:e8:dc:05:3e:87:f2:91:7b:87:2a:e5:ec:
ca:6d:0f:27:e7:2a:1a:6c:66:97:26:27:f5:e5:99:
96:e0:f4:0d:c8:49:24:d1:d1:ea:bd:b7:0a:a8:ef:
19:38:2b:85:d3:b4:ca:c5:bf:a3:91:3f:d3:44:02:
6c:aa:00:6f:bb:e9:fa:04:9a:59:79:71:96:6a:27:
ca:ed:71:7a:2f:48:56:e3:cf:00:57:ef:ad:6f:23:
fb:99:fb:24:70:7a:bc:d9:1a:36:60:7d:f2:bd:dc:
9e:fb:c5:87:e0:d8:55:c9:cc:a5:94:26:b3:5d:7f:
6c:1c:cb:a0:50:10:45:b4:85:a7:ea:4f:f9:4f:8f:
3a:1a:40:09:38:2a:60:ca:ca:77:c9:f3:2b:b4:9a:
4e:b5:2c:f1:d2:54:82:34:94:b4:90:0a:63:72:43:
01:4b:92:30:79:e2:f0:52:bb:56:14:f7:e1:61:5e:
38:a0:f2:4e:8b:52:2d:43:ff:72:91:48:6b:85:6f:
d0:3c:65:1a:4d:10:c8:3f:9d:21:7f:fd:8f:c8:f9:
52:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B4:A7:A5:35:10:7D:C9:6B:59:94:4F:B7:D1:80:E6:AC:3C:65:DB
X509v3 Authority Key Identifier:
keyid:7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2f:db:fc:26:08:de:49:7e:0c:e9:ca:0b:39:c2:37:f8:42:
98:fc:ee:19:4f:be:ad:5f:ca:1e:b2:b3:15:ad:7a:5a:b7:2b:
53:39:60:90:be:05:a9:13:2e:d6:31:c3:25:d4:50:d5:2f:46:
5f:65:4e:9c:b1:c3:0a:8e:c9:0b:cf:3e:82:99:f6:fc:a7:41:
99:79:ab:0c:c2:95:fa:33:fd:cc:41:87:64:11:3a:5f:b8:05:
8c:81:10:c4:3d:c5:41:44:0e:53:2b:2f:2a:1d:d4:45:ee:7a:
af:4d:9c:76:c7:db:ef:31:46:60:39:a2:5d:7d:fd:96:71:d1:
86:af:e2:dc:f7:75:a8:62:6a:a9:12:0a:54:81:19:3c:00:07:
1c:ec:ae:71:7f:f3:77:3f:cb:68:4d:2e:c1:2b:f8:20:31:ca:
5e:d7:17:f9:64:24:e1:ec:ce:4e:20:77:3c:ed:4c:bd:4b:3b:
e7:aa:70:34:35:ce:24:38:2a:a3:f4:25:7c:2d:8b:9a:6b:13:
df:11:ec:b0:d1:8e:86:7a:e9:01:c6:c9:9a:02:a9:27:09:eb:
10:19:2f:6d:7d:04:bf:77:2f:46:db:46:65:52:8d:2d:b4:10:
26:ea:06:a8:8e:4c:64:63:11:f9:c3:b1:b6:d5:51:16:ad:45:
71:a3:43:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:48 2025 by rpki-client