Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
File: Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft (raw, json)
Hash identifier: RhIz9hBvcSX/vtxb4ge0FgEMHM3c+SsiNkH+Hx/BJzQ=
Subject key identifier: F6:D8:F4:2B:A4:AC:EB:7B:17:D1:E6:EA:CE:B6:71:21:9F:BB:23:14
Authority key identifier: 31:FD:40:17:41:E6:69:E9:20:B0:3C:6C:76:AA:3A:78:71:40:3F:54
Certificate issuer: /CN=31fd401741e669e920b03c6c76aa3a7871403f54
Certificate serial: 019849657CA20DC098BC9FE60B086CC6364E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
Manifest number: 0468
Signing time: Sun 27 Jul 2025 01:00:44 +0000
Manifest this update: Sun 27 Jul 2025 01:00:44 +0000
Manifest next update: Mon 28 Jul 2025 01:00:44 +0000
Files and hashes: 1: Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl (hash: gX8doqF8afkuOFIDzUpAXa2tgQ99tSrf6FCMqoRjRi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:7c:a2:0d:c0:98:bc:9f:e6:0b:08:6c:c6:36:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31fd401741e669e920b03c6c76aa3a7871403f54
Validity
Not Before: Jul 27 01:00:44 2025 GMT
Not After : Jul 28 01:00:44 2025 GMT
Subject: CN=f6d8f42ba4aceb7b17d1e6eaceb671219fbb2314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3d:85:d6:43:ba:29:12:03:77:72:ab:8f:6d:
13:b3:47:e2:37:18:ff:83:c1:d9:c6:f7:40:c0:5e:
71:11:33:6b:e5:94:db:d1:de:23:dd:6d:70:cd:25:
c6:d0:06:b4:6b:44:de:d0:c8:df:e1:f7:fe:72:c8:
ba:13:fc:c5:14:ac:aa:93:90:89:3a:f1:53:43:33:
49:39:48:32:fb:eb:7f:a9:51:47:f6:48:14:e6:a1:
95:10:eb:72:24:b3:5e:7b:8f:53:d4:87:19:8c:1e:
5b:71:8a:58:6a:ae:c5:d5:03:de:cd:37:ec:3e:c9:
34:30:72:28:73:57:56:03:e7:d8:c8:d7:c7:d9:69:
93:8e:a8:ff:93:6d:45:d2:05:ce:5c:9f:0e:28:f1:
44:29:e4:a6:ef:81:ea:52:1c:99:fa:59:09:63:62:
09:6a:16:4e:97:47:d0:a7:74:a9:b0:aa:4a:3e:80:
e8:76:1b:0d:7e:ea:ea:c4:6a:21:98:e9:d6:c8:44:
6a:f8:2f:91:d6:a7:8b:25:45:37:a1:b0:58:91:16:
34:d9:6c:3f:67:32:8a:53:c4:64:7f:5f:b5:e6:b4:
8f:24:90:81:1f:b2:18:0e:6f:42:96:48:24:bf:ac:
03:d8:72:06:e2:f6:65:4d:38:b5:7a:cc:5c:8f:df:
a4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D8:F4:2B:A4:AC:EB:7B:17:D1:E6:EA:CE:B6:71:21:9F:BB:23:14
X509v3 Authority Key Identifier:
keyid:31:FD:40:17:41:E6:69:E9:20:B0:3C:6C:76:AA:3A:78:71:40:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8f:61:42:01:24:81:e5:d6:54:8a:ca:f0:70:ed:c9:e4:a2:
5a:64:2c:99:af:92:e5:b2:20:cd:a3:49:52:c8:f7:9a:79:77:
ea:47:a2:b4:93:35:aa:93:52:a7:f4:67:4a:89:1d:d6:e2:6b:
e8:b4:73:a4:ae:1a:93:95:82:b4:88:13:8c:e6:01:a7:e7:39:
e3:d4:d5:be:51:7d:2c:5a:37:83:91:40:f5:ea:bd:c5:f7:91:
1c:c5:76:16:19:52:9c:45:96:25:2e:98:ac:81:ed:7f:a4:f5:
e5:65:e1:c9:43:4f:51:a8:f1:5f:b3:2c:b0:69:ee:92:e5:d7:
79:dd:58:23:f2:9e:a1:fb:5f:fd:81:d5:57:65:d7:74:d3:7b:
72:4d:aa:46:32:54:cf:4f:15:8b:c5:4e:1e:f7:a2:22:46:ca:
63:ae:31:38:18:17:6c:58:12:e3:cb:fc:11:3b:03:82:b8:2c:
4f:44:3d:4c:30:b4:a2:e2:2e:b2:75:dd:c0:7a:9e:50:89:42:
aa:35:6b:8f:5e:4b:47:fc:01:3d:c7:55:d0:4a:a7:dd:d8:9b:
26:ea:9e:aa:48:18:84:aa:45:b6:d3:8c:3e:d8:6d:a2:27:1e:
48:72:98:98:8a:b0:1a:dc:e2:cc:47:62:b2:51:87:e9:4e:16:
52:f0:28:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:20:19 2025 by rpki-client