Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
File: E7ur4fopzNr8vU-Utcfk0NH4lH0.mft (raw, json)
Hash identifier: avQtrD81rHaaPnlIIJHri9Rpbyi9b3q6jWRbDkdW5YQ=
Subject key identifier: 32:D1:15:DD:00:8E:66:7D:00:FD:6D:09:E7:18:42:69:E5:0C:EB:30
Authority key identifier: 13:BB:AB:E1:FA:29:CC:DA:FC:BD:4F:94:B5:C7:E4:D0:D1:F8:94:7D
Certificate issuer: /CN=13bbabe1fa29ccdafcbd4f94b5c7e4d0d1f8947d
Certificate serial: 0198541F8D35786290384C6F03B1CCAB328D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
Manifest number: 0192
Signing time: Tue 29 Jul 2025 03:00:10 +0000
Manifest this update: Tue 29 Jul 2025 03:00:10 +0000
Manifest next update: Wed 30 Jul 2025 03:00:10 +0000
Files and hashes: 1: E7ur4fopzNr8vU-Utcfk0NH4lH0.crl (hash: JlDI/R9HhWy0LRLlskANaMhShH+pma7ClacFe8Tq+gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:8d:35:78:62:90:38:4c:6f:03:b1:cc:ab:32:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13bbabe1fa29ccdafcbd4f94b5c7e4d0d1f8947d
Validity
Not Before: Jul 29 03:00:10 2025 GMT
Not After : Jul 30 03:00:10 2025 GMT
Subject: CN=32d115dd008e667d00fd6d09e7184269e50ceb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:21:ba:7a:c5:22:0f:81:64:ea:7e:73:1d:cc:
93:a0:ca:34:dd:0d:34:ff:15:08:83:9a:56:ce:c3:
b4:59:59:68:e9:31:da:99:e5:39:6d:e4:cd:e9:4c:
d7:d0:8e:76:4a:02:98:b7:7a:b4:c4:b0:7c:ad:83:
10:65:f2:52:a2:55:46:c5:db:c5:7b:12:69:4a:f9:
ec:a2:06:d6:ec:0c:ae:36:b1:d9:15:8b:cd:1b:3a:
b9:7a:d2:4c:5b:ef:7d:eb:dd:71:d4:a8:94:41:c1:
1f:3d:f2:0e:dc:e9:93:89:e4:41:9b:6b:bf:3c:17:
66:24:19:4a:b7:89:c9:b2:16:8f:b8:33:72:e0:76:
b2:2a:d7:a8:88:dc:80:79:6e:65:a8:c2:26:a0:b2:
39:2a:18:07:1e:34:17:9f:73:c4:3a:4b:81:d8:d9:
de:b0:ab:2c:85:c1:64:3f:c2:17:08:11:b7:86:3d:
1d:d5:49:8d:88:69:51:ab:9e:f6:ef:4e:83:18:41:
19:54:aa:57:5e:44:2a:7c:54:5f:36:fa:be:e9:dc:
dd:a0:c0:44:a7:82:8a:85:ea:bc:23:e2:3a:83:a9:
10:cd:a9:62:e6:d9:db:b6:cc:3f:3e:49:b5:77:1c:
e1:cd:45:63:c1:c4:1d:3d:b5:e8:46:2b:52:5b:7a:
87:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D1:15:DD:00:8E:66:7D:00:FD:6D:09:E7:18:42:69:E5:0C:EB:30
X509v3 Authority Key Identifier:
keyid:13:BB:AB:E1:FA:29:CC:DA:FC:BD:4F:94:B5:C7:E4:D0:D1:F8:94:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:01:b1:c6:f3:9d:99:c7:b7:7e:0b:4d:d0:c1:9a:0b:b4:3a:
f5:e9:bc:06:e0:47:62:97:fc:fa:44:8e:e9:06:4d:5b:d4:aa:
0c:6b:bf:49:8d:a9:69:5b:e2:f8:9c:ff:d6:85:4b:44:0c:77:
1f:fe:43:c0:21:23:a7:8b:54:73:e7:aa:43:2f:22:71:0a:2b:
03:66:8d:68:c7:a7:5d:12:6f:98:d5:f5:2e:b6:f1:c3:33:10:
46:14:38:50:18:65:e6:6f:7a:1a:5e:71:fe:74:f6:c7:c6:83:
e5:bf:20:1b:31:ce:26:18:bb:ba:d2:a7:e2:ab:6b:e3:da:33:
4c:bf:39:12:24:5c:14:04:22:8b:70:5b:91:14:e5:4b:4d:85:
2e:1a:94:72:88:54:eb:39:13:d0:fa:b2:04:91:fc:b7:06:b1:
cf:12:25:c8:03:00:19:9b:de:b4:08:6e:33:f1:ea:2f:50:8e:
f9:15:9e:08:b9:8e:ae:42:9f:78:7f:44:b4:f2:d3:9a:a2:3c:
41:d8:a1:96:4e:7a:6f:b5:c9:fb:46:1d:c0:5b:57:1b:74:e1:
f0:79:ac:02:99:0e:48:12:07:bd:73:a9:c2:19:8d:6e:5e:7f:
64:89:a0:ff:04:ae:26:5f:96:eb:06:ec:da:38:f3:58:19:67:
df:bb:4a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 05:03:52 2025 by rpki-client