Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
File: pr640lzi1AsMuuWcEeKSvTcXDfo.mft (raw, json)
Hash identifier: vFD/k/5FpFpWXiobZ/4hAOP/cUPk6f70i/AOinVMfaE=
Subject key identifier: 82:9B:04:DE:AC:55:4A:78:C4:23:36:DB:9C:81:F9:86:7A:70:07:A7
Authority key identifier: A6:BE:B8:D2:5C:E2:D4:0B:0C:BA:E5:9C:11:E2:92:BD:37:17:0D:FA
Certificate issuer: /CN=a6beb8d25ce2d40b0cbae59c11e292bd37170dfa
Certificate serial: 019771F6790A6C3B083BFFA18ECE40159131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
Manifest number: 0F89
Signing time: Sun 15 Jun 2025 05:01:07 +0000
Manifest this update: Sun 15 Jun 2025 05:01:07 +0000
Manifest next update: Mon 16 Jun 2025 05:01:07 +0000
Files and hashes: 1: pr640lzi1AsMuuWcEeKSvTcXDfo.crl (hash: QIkUZwk2nUKgeVuo0sytNgAWGKSjiuk/rafkJl2IvUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:79:0a:6c:3b:08:3b:ff:a1:8e:ce:40:15:91:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6beb8d25ce2d40b0cbae59c11e292bd37170dfa
Validity
Not Before: Jun 15 05:01:07 2025 GMT
Not After : Jun 16 05:01:07 2025 GMT
Subject: CN=829b04deac554a78c42336db9c81f9867a7007a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:a9:94:94:ff:e6:d9:73:a0:bf:47:48:b2:
78:1d:29:a3:ac:95:be:23:2e:f5:26:ab:b8:34:15:
ad:22:a2:2f:48:0e:0e:18:ae:ad:c8:0f:6b:11:05:
d0:81:1f:bd:d9:56:0d:48:4d:b8:99:07:4e:f5:73:
25:55:dc:d7:e8:c6:70:99:3e:af:fe:8f:2b:48:d4:
7c:15:50:28:bf:64:71:29:fd:e1:37:25:5d:b5:46:
24:a0:75:c9:c8:c5:17:94:17:cf:85:47:16:f6:cb:
ce:23:80:67:e6:73:9b:13:23:9c:a0:1d:4c:d1:99:
43:7f:aa:22:77:60:04:a2:f6:02:77:74:6a:50:b6:
c8:a1:26:85:4a:b5:54:d5:0d:cf:b4:f3:c6:22:38:
e6:90:10:0e:98:0b:1f:96:0e:fe:f2:40:ff:c9:cd:
c2:9d:56:a0:da:e2:9e:bd:5b:8e:21:1b:73:5a:f9:
0e:ec:c8:c8:e9:6d:6e:d9:fb:13:d6:9d:9b:97:2e:
f1:fd:5c:df:af:fb:61:d2:46:16:e6:6e:47:7d:44:
12:6b:5d:7a:ab:93:1e:04:55:5d:00:fc:30:77:e3:
1b:a3:01:86:64:b0:2a:63:67:96:d7:52:2e:fb:a2:
6b:41:d5:c7:4d:36:7a:ff:58:22:91:91:aa:5c:46:
9e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9B:04:DE:AC:55:4A:78:C4:23:36:DB:9C:81:F9:86:7A:70:07:A7
X509v3 Authority Key Identifier:
keyid:A6:BE:B8:D2:5C:E2:D4:0B:0C:BA:E5:9C:11:E2:92:BD:37:17:0D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e4:19:17:3c:af:4e:31:e1:2e:13:f0:7a:ac:0b:00:0e:4e:
ce:e3:83:95:ed:bd:9b:28:4f:a8:d7:f8:27:87:70:2a:b9:d1:
b7:f9:36:ee:9e:e8:96:aa:c4:ec:05:95:5e:25:8d:20:2d:0d:
98:c9:3f:a0:44:99:64:32:61:dd:a3:82:3a:09:bf:49:6c:2f:
5d:e9:7b:b9:c7:4d:c1:d1:bf:cc:8f:ca:f4:a0:30:02:f2:99:
fb:89:2b:8d:19:25:15:bb:64:40:82:2f:35:11:13:f9:24:50:
2f:34:2f:48:60:a0:b1:96:f6:01:72:e0:12:be:8b:10:1c:a3:
64:75:2a:ed:38:49:3e:fc:ba:6e:7d:89:b3:df:3f:c1:30:36:
e8:62:a5:1e:d1:c7:49:8a:15:2d:6c:85:db:42:ed:e4:92:80:
68:d4:56:e7:f8:31:2d:5e:ee:ab:99:d4:3e:f2:c2:63:8f:84:
e0:81:12:e4:ce:a7:91:19:98:95:84:86:49:ea:2f:f3:3b:7f:
5d:47:0b:30:be:a1:b0:c1:b9:5c:e0:5b:ba:d3:2e:bb:b4:50:
cc:da:f0:ef:8e:b8:ba:e5:2b:bb:8d:5f:41:69:68:ec:5b:21:
aa:c9:c5:8d:73:eb:4b:ab:ed:34:75:4a:79:ee:20:7a:16:ea:
d6:56:da:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:14:36 2025 by rpki-client