Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
File: D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft (raw, json)
Hash identifier: sVhmVDTFmockwqozPNj6xyyz7SuWUa57oMhiCgfd8Hw=
Subject key identifier: C6:66:44:31:DA:FB:D4:C4:8E:D9:61:F8:A8:F1:69:45:57:03:0A:97
Authority key identifier: 0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
Certificate issuer: /CN=0f79760520b7c15c2e4260308272b849f88ed677
Certificate serial: 01977942779B1F16B95AABD78C035A287899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
Manifest number: 1594
Signing time: Mon 16 Jun 2025 15:01:28 +0000
Manifest this update: Mon 16 Jun 2025 15:01:28 +0000
Manifest next update: Tue 17 Jun 2025 15:01:28 +0000
Files and hashes: 1: D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl (hash: NHQKgZYSkGprpgwuc68w+JgNE2TJvFOzxuZIaneGwsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:42:77:9b:1f:16:b9:5a:ab:d7:8c:03:5a:28:78:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f79760520b7c15c2e4260308272b849f88ed677
Validity
Not Before: Jun 16 15:01:28 2025 GMT
Not After : Jun 17 15:01:28 2025 GMT
Subject: CN=c6664431dafbd4c48ed961f8a8f1694557030a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:73:04:c0:0f:17:49:32:73:78:4b:d6:92:a7:
de:ab:56:63:b6:14:83:00:ad:03:63:26:5c:89:dc:
7a:dc:5d:34:28:1b:5f:60:48:ce:be:e9:35:03:7f:
4f:9b:c9:35:6a:6a:f8:b9:05:0c:03:5d:fb:58:b5:
83:01:71:3a:f5:e0:4c:05:d4:c7:80:0e:b8:42:39:
bf:42:0a:f6:3a:5b:67:33:4e:89:9e:26:87:5d:2a:
d1:92:1d:76:fe:28:e4:ed:d6:73:a4:87:46:7d:24:
44:da:fb:6f:80:7a:c4:3f:e7:87:f1:3e:78:d1:fa:
00:71:9e:b5:ea:f7:b2:d0:9f:58:12:37:28:ff:e7:
95:8c:92:3e:39:dd:71:98:3d:7c:a7:93:1d:a2:e7:
ba:7c:98:e2:de:ca:28:0f:56:27:da:33:70:aa:a3:
72:19:6d:bc:fd:5f:30:75:ce:bf:f8:af:c3:77:69:
45:b8:cf:03:4d:18:6e:e6:3c:9f:82:88:06:7f:e2:
5a:2b:b0:f4:49:34:2a:15:41:3a:7f:2e:7b:39:84:
8e:37:19:02:1c:af:cf:62:1b:ff:f6:f7:8d:90:2c:
f3:45:41:2a:7b:63:df:5b:95:cb:e2:c0:6e:49:97:
60:34:94:c0:9a:68:46:85:5c:c1:1e:4e:12:b3:0b:
67:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:66:44:31:DA:FB:D4:C4:8E:D9:61:F8:A8:F1:69:45:57:03:0A:97
X509v3 Authority Key Identifier:
keyid:0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:15:aa:cb:9d:81:ce:48:0b:c4:79:36:44:15:dc:a2:18:42:
be:8c:47:d1:16:55:ee:ec:48:86:0f:14:da:2b:b2:3c:6b:ab:
71:6b:dd:75:49:f8:76:43:5b:8f:30:70:3c:00:f9:af:26:9c:
2d:cc:a5:6b:49:0a:b8:20:2b:ae:60:00:fe:bc:e0:69:a0:ee:
20:66:12:7f:a4:2b:42:45:66:54:89:b1:6b:35:ef:7c:29:0e:
5a:b2:bd:ed:95:e6:4d:00:8e:36:f3:42:d9:45:62:fc:49:96:
8b:66:bf:79:d4:8b:03:d8:8a:a9:65:5e:16:b2:40:8a:6a:cc:
20:e2:18:d6:ca:29:1f:be:92:16:af:74:46:c2:6f:b3:4b:26:
76:19:36:b3:8b:49:f5:cc:1c:87:ab:31:fd:64:bc:ae:a6:32:
c1:5e:be:d8:9f:f8:ff:32:e8:6f:62:b0:17:2d:46:d5:9f:1b:
e4:dd:87:81:20:23:74:89:e7:33:1a:ed:86:af:bd:45:28:32:
ca:19:de:fd:f1:0a:66:3f:a9:8d:30:db:7d:b5:7c:db:73:87:
e4:34:d1:34:5a:70:14:c4:66:7d:bd:59:4c:5e:b0:4d:bf:3b:
d0:15:c7:9a:95:92:1c:7b:d0:52:20:43:de:04:e8:a9:8c:93:
67:a7:bb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:06:19 2025 by rpki-client