Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
File: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft (raw, json)
Hash identifier: EZ6KUBo9lyqrJMN1HKBF0VYYPbWKwBxDwrZ61KJbHjg=
Subject key identifier: 77:A8:2B:B6:A3:4A:09:98:42:3E:5C:26:21:A3:86:F8:D7:22:A6:FB
Authority key identifier: D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
Certificate issuer: /CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Certificate serial: 01976D3E62EBEBB35319C76EDC7071DA5D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
Manifest number: 108D
Signing time: Sat 14 Jun 2025 07:01:34 +0000
Manifest this update: Sat 14 Jun 2025 07:01:34 +0000
Manifest next update: Sun 15 Jun 2025 07:01:34 +0000
Files and hashes: 1: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl (hash: G+is9fLV1HQUEraUi6dqMdgHPWtH3lypmVrVitXLSk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:62:eb:eb:b3:53:19:c7:6e:dc:70:71:da:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Validity
Not Before: Jun 14 07:01:34 2025 GMT
Not After : Jun 15 07:01:34 2025 GMT
Subject: CN=77a82bb6a34a0998423e5c2621a386f8d722a6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7c:0f:70:b7:a9:c6:61:1a:b7:de:bf:1d:79:
45:a5:10:62:47:c6:f5:0c:31:cb:80:92:5b:97:6b:
23:f9:95:6e:cc:02:27:ce:fd:d7:a3:d9:66:42:0a:
a6:23:c6:d5:0c:84:dd:d4:d1:d0:57:f1:af:41:0a:
f7:1e:30:fc:6e:e4:7a:25:e6:31:14:4e:e2:a9:42:
0a:48:c3:aa:a9:89:44:46:e1:5a:4c:96:35:66:41:
bd:5a:48:59:f0:94:fb:a1:e7:05:93:fe:6d:6b:bc:
42:b6:19:54:76:44:bb:2c:66:36:33:87:02:80:a3:
69:1d:9a:a1:0c:5b:6f:71:af:e6:14:ef:96:9c:6a:
eb:46:f0:45:b9:d8:38:42:9f:09:de:c6:90:bb:cc:
cf:59:65:0d:0f:ee:bb:7a:1a:19:17:d6:40:35:89:
d6:cb:31:35:fc:50:74:a7:4c:d2:e1:84:51:91:a3:
11:38:b9:06:24:3c:7f:89:5f:4c:92:71:69:47:88:
57:5d:9d:df:2b:40:5e:a7:57:cc:b0:79:fe:82:0e:
5a:74:18:ee:1f:01:33:fb:45:65:37:63:1b:2d:27:
db:9d:f5:63:5e:08:61:93:9a:1a:8b:2b:ea:25:5a:
50:99:2c:4d:56:6a:1a:53:c6:5d:35:54:4b:5a:a4:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A8:2B:B6:A3:4A:09:98:42:3E:5C:26:21:A3:86:F8:D7:22:A6:FB
X509v3 Authority Key Identifier:
keyid:D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:12:31:32:f7:e7:be:31:06:6a:42:41:45:42:61:6d:aa:b2:
98:57:ce:4a:a3:fe:56:b1:be:ba:25:e6:5a:ab:85:26:ce:26:
3b:f8:81:98:65:10:6e:59:ba:62:2b:2e:03:40:4c:90:38:93:
c5:70:72:95:60:e5:2c:52:46:18:71:3a:d6:24:09:43:30:22:
68:9c:29:11:1f:a8:10:ab:59:8a:ee:69:6e:a1:be:a4:31:1d:
3a:a5:9d:33:3b:39:32:91:c5:9f:28:cd:f1:22:5e:99:57:a2:
c5:8c:df:9a:27:e6:43:a4:4e:5e:4c:59:be:af:b0:5c:85:a4:
c1:81:fb:f6:b9:d2:97:a9:e1:92:27:be:54:d8:9d:d9:b1:16:
57:f0:1d:1c:0e:df:bd:ed:56:27:16:2d:65:27:53:45:38:1d:
3a:31:68:6e:20:3f:9a:f8:f8:38:61:4e:26:8d:c8:db:55:fa:
fe:8b:9d:11:5a:40:59:52:40:80:a4:3e:ec:d6:27:ab:b9:5a:
4b:01:35:57:4a:37:e3:89:f3:fc:08:28:04:f3:92:35:a3:0a:
80:95:87:43:39:48:c2:59:d6:9a:38:93:ad:31:fa:25:ca:34:
45:a2:7c:49:8e:86:cd:2a:34:cb:80:58:8b:c5:7c:7a:55:fd:
cd:aa:0b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:32:47 2025 by rpki-client