Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
File: rK67C7Ozijz0QMgf97PhaTMqpm0.mft (raw, json)
Hash identifier: ymK2ekDKi0MnhPBPya+yBABCce3U4gfrzpPIQEzsIgE=
Subject key identifier: 45:A6:E2:43:1C:43:C9:7F:AD:7A:00:95:A0:3C:CE:22:DE:30:82:3C
Authority key identifier: AC:AE:BB:0B:B3:B3:8A:3C:F4:40:C8:1F:F7:B3:E1:69:33:2A:A6:6D
Certificate issuer: /CN=acaebb0bb3b38a3cf440c81ff7b3e169332aa66d
Certificate serial: 0197711B391D717C764C0C4102A050EDD762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
Manifest number: 1198
Signing time: Sun 15 Jun 2025 01:01:38 +0000
Manifest this update: Sun 15 Jun 2025 01:01:38 +0000
Manifest next update: Mon 16 Jun 2025 01:01:38 +0000
Files and hashes: 1: rK67C7Ozijz0QMgf97PhaTMqpm0.crl (hash: MAReZI0ZKNIfvh22r8Z1H6XC9u/6IuKmpSiKS6eEHM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:39:1d:71:7c:76:4c:0c:41:02:a0:50:ed:d7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaebb0bb3b38a3cf440c81ff7b3e169332aa66d
Validity
Not Before: Jun 15 01:01:38 2025 GMT
Not After : Jun 16 01:01:38 2025 GMT
Subject: CN=45a6e2431c43c97fad7a0095a03cce22de30823c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8a:1a:cd:81:d7:95:55:ac:05:fd:7d:78:a8:
9d:c6:5c:1c:db:d4:49:91:6e:72:e3:0e:42:11:5e:
1e:ab:8b:a6:91:21:ca:46:e6:09:80:05:61:be:5a:
ab:09:3d:29:96:e4:9a:12:18:6a:2c:46:b5:f9:95:
42:05:cf:b0:0f:3b:7d:8c:54:32:08:50:43:cb:cc:
ee:76:30:6b:11:6d:90:3e:52:cf:c9:7a:28:1c:1a:
0c:b0:30:ac:a6:6a:08:35:12:5a:e9:7b:1b:c0:8b:
7f:36:c5:dd:ae:d2:90:39:51:9b:ab:8d:b3:c2:9b:
ae:3c:fb:b5:6d:61:69:c3:cb:21:7c:55:fd:fb:22:
11:f5:58:b8:86:ed:c5:0f:8c:b0:4a:3b:4b:60:2f:
ed:9a:de:29:86:a1:d8:13:e3:cd:12:65:de:41:ff:
63:71:6d:8e:c0:63:d9:0c:eb:47:75:66:90:8b:7a:
cd:0f:eb:94:ac:af:f6:81:9f:85:78:6e:d0:10:e9:
3a:8a:fa:92:e3:79:f6:4d:42:5f:e6:74:1f:3d:00:
71:41:9b:96:44:c7:14:8d:b4:b8:ef:dd:10:37:28:
39:e6:f1:fe:9b:9b:c8:66:65:62:34:3b:98:ea:d3:
6a:b6:d2:69:97:50:eb:00:c4:7a:3a:4a:6b:0f:13:
88:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A6:E2:43:1C:43:C9:7F:AD:7A:00:95:A0:3C:CE:22:DE:30:82:3C
X509v3 Authority Key Identifier:
keyid:AC:AE:BB:0B:B3:B3:8A:3C:F4:40:C8:1F:F7:B3:E1:69:33:2A:A6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:66:f4:b9:60:2a:c0:2c:ad:e2:dc:41:5e:c5:e0:b5:6b:d1:
48:a0:1f:32:35:5b:0e:98:66:93:84:e6:ec:34:db:e3:7c:56:
27:b1:6b:d4:8a:54:20:39:bb:74:24:df:23:c7:90:48:05:3c:
1d:1d:7c:06:1e:68:10:f7:79:f7:37:17:17:9b:80:6c:cf:fb:
45:8e:98:76:41:39:d6:b9:c5:61:be:2a:6a:28:74:eb:29:94:
eb:27:ba:9b:2e:3d:e7:57:b0:cb:ec:aa:62:0b:5c:b2:61:82:
2a:1d:33:d3:56:5f:60:81:78:b2:4e:08:0f:a3:b6:eb:11:0f:
8f:be:20:f2:1c:f1:da:c5:a9:d3:bc:ca:6b:f2:5e:a7:d9:11:
98:a1:a6:88:0b:41:42:d6:b3:20:60:0a:1d:9c:7f:45:4b:af:
d0:bb:1b:a8:27:df:4d:02:0b:04:3e:da:ae:d3:f9:64:7f:7c:
a7:b0:4a:88:08:6a:5e:c3:70:22:b9:c5:65:ad:b8:13:23:7a:
7c:1f:64:f9:ba:6c:3e:b9:a5:9f:09:be:ed:60:a0:bf:e6:ca:
08:3c:45:9c:7f:1d:8d:98:be:b8:ef:01:40:ed:71:82:ad:b4:
ad:e0:ee:ad:82:ce:dd:ce:d6:23:6e:b9:40:26:92:2e:f3:ec:
a2:c0:5f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:52 2025 by rpki-client