Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
File: h66JOPDgseq2FIgzbSPKORh9bqM.mft (raw, json)
Hash identifier: w4Q5oBmi1tiO7AH615Hw96x7mjRxwozOooFuvFfNhKY=
Subject key identifier: 61:7D:A5:79:1F:92:D7:26:5F:3C:F2:CB:94:A9:77:CC:7A:14:EF:D0
Authority key identifier: 87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
Certificate issuer: /CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Certificate serial: 01976A05C5C3DC82CCF9F7E65AC38CF7DA06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
Manifest number: 04A0
Signing time: Fri 13 Jun 2025 16:00:52 +0000
Manifest this update: Fri 13 Jun 2025 16:00:52 +0000
Manifest next update: Sat 14 Jun 2025 16:00:52 +0000
Files and hashes: 1: h66JOPDgseq2FIgzbSPKORh9bqM.crl (hash: SiFKQ9Pn3xHM1VDgrRFwiP1vXHy0/2+R5dObDFguBL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:c5:c3:dc:82:cc:f9:f7:e6:5a:c3:8c:f7:da:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Validity
Not Before: Jun 13 16:00:52 2025 GMT
Not After : Jun 14 16:00:52 2025 GMT
Subject: CN=617da5791f92d7265f3cf2cb94a977cc7a14efd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:5f:5e:57:1d:4d:bd:08:51:f1:2f:dd:a7:
f4:15:33:00:14:8d:4e:11:00:75:60:bc:b0:36:16:
09:1d:38:ba:74:9d:0f:2f:bc:f8:92:53:ed:6f:e2:
8d:13:94:89:f2:d6:27:64:fc:20:ba:31:e1:cf:92:
db:de:f1:db:b4:96:00:08:91:f7:58:14:cb:79:fb:
2e:69:b6:14:75:14:5e:a7:a7:64:12:a4:f2:d2:8c:
03:24:9f:44:7e:09:de:37:99:57:cc:19:43:2d:36:
4a:02:25:5c:ef:dd:c8:c8:68:8d:55:d7:92:4e:d3:
04:50:a4:d2:cc:e7:dc:af:9a:15:6c:1c:a3:4c:77:
bd:6f:64:70:b0:99:35:94:51:52:51:45:f2:0c:2e:
70:aa:0d:31:7d:a6:dc:fd:5b:11:8c:61:66:08:76:
84:e5:8f:dc:c6:ba:46:91:05:be:2e:97:49:f9:2c:
8d:e2:56:66:76:8e:5f:3f:5c:df:89:58:f2:81:9a:
0d:ec:9a:29:7b:6d:af:fe:1c:7c:e1:55:d3:3b:59:
dc:9c:41:2a:7a:f1:d7:9e:34:83:73:f3:14:e1:c3:
ee:3b:3d:b1:54:65:8d:b8:6c:15:15:2f:32:ee:bc:
24:33:45:45:b4:64:93:42:74:5c:7e:90:66:b6:9f:
ea:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7D:A5:79:1F:92:D7:26:5F:3C:F2:CB:94:A9:77:CC:7A:14:EF:D0
X509v3 Authority Key Identifier:
keyid:87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:6a:9f:b8:27:60:7f:fe:5e:c2:88:f8:65:64:7b:c9:a6:3e:
61:20:6c:19:a9:6f:10:d0:62:f1:f8:5d:f2:60:15:3f:f6:b0:
02:6c:ae:a5:88:10:1c:f7:a9:2b:2b:31:a4:ec:dd:d4:c0:1c:
8e:08:19:11:85:52:a6:2e:97:01:6c:28:2b:bf:64:63:5a:10:
9e:9d:c5:ae:7a:e2:ab:0e:a5:b4:5a:49:8a:71:9b:db:cd:6c:
92:13:c0:80:e8:fd:de:4e:23:c8:74:a7:2a:49:74:ca:31:f0:
a4:80:88:50:cd:35:3b:da:9b:94:d4:af:1d:4a:98:53:1f:43:
9f:a6:1b:f7:45:e8:ad:67:b7:4c:42:ac:eb:b6:d7:c3:29:d6:
90:1e:e6:00:17:21:4c:e7:36:ef:de:48:34:2b:7d:f1:4e:4f:
05:24:53:57:a5:f0:3c:8f:8c:81:a8:d9:bd:72:e1:36:45:f8:
12:89:c8:a0:6e:e4:ea:d5:56:e9:4f:bc:df:2c:a9:2d:44:6c:
fa:2c:cd:a0:5a:05:a0:23:7e:5f:b6:e8:52:82:f8:18:68:af:
5f:60:f8:0e:10:ee:67:a7:94:cb:2e:04:37:f2:5c:ab:fb:05:
b3:2b:92:2c:23:90:09:fd:c7:5f:b9:28:56:f6:c3:d0:fc:64:
b1:d0:a2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:52:31 2025 by rpki-client