Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c42df5-4f92-447d-bd25-86d6e2f46642/1/s_sdIFBvVM-5oflFH6EKiP87L2Q.mft
File: s_sdIFBvVM-5oflFH6EKiP87L2Q.mft (raw, json)
Hash identifier: Ad4szrUqILidPzIQfqDfeBdA6GOxp5BHRjpTYr8B8BY=
Subject key identifier: B0:AB:DC:5A:A6:00:6E:E4:81:8C:67:3B:91:F3:95:F9:D5:C0:47:59
Authority key identifier: B3:FB:1D:20:50:6F:54:CF:B9:A1:F9:45:1F:A1:0A:88:FF:3B:2F:64
Certificate issuer: /CN=b3fb1d20506f54cfb9a1f9451fa10a88ff3b2f64
Certificate serial: 019849D30A5349DD81AAF58D79B7925E99FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_sdIFBvVM-5oflFH6EKiP87L2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c42df5-4f92-447d-bd25-86d6e2f46642/1/s_sdIFBvVM-5oflFH6EKiP87L2Q.mft
Manifest number: 0CA6
Signing time: Sun 27 Jul 2025 03:00:24 +0000
Manifest this update: Sun 27 Jul 2025 03:00:24 +0000
Manifest next update: Mon 28 Jul 2025 03:00:24 +0000
Files and hashes: 1: s_sdIFBvVM-5oflFH6EKiP87L2Q.crl (hash: j0ilFGKFFjV3McRFU3PQwzH4gaeBRCwBqELXRTFoT4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c42df5-4f92-447d-bd25-86d6e2f46642/1/s_sdIFBvVM-5oflFH6EKiP87L2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c42df5-4f92-447d-bd25-86d6e2f46642/1/s_sdIFBvVM-5oflFH6EKiP87L2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/s_sdIFBvVM-5oflFH6EKiP87L2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:0a:53:49:dd:81:aa:f5:8d:79:b7:92:5e:99:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fb1d20506f54cfb9a1f9451fa10a88ff3b2f64
Validity
Not Before: Jul 27 03:00:24 2025 GMT
Not After : Jul 28 03:00:24 2025 GMT
Subject: CN=b0abdc5aa6006ee4818c673b91f395f9d5c04759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:dd:99:18:39:e4:73:d7:b1:3e:dd:37:ce:
a8:b2:f2:f3:73:c4:ff:71:f8:4b:d8:94:56:47:4e:
61:dc:f3:29:cc:29:2b:26:49:15:80:94:e9:8e:d3:
c2:2f:db:e4:22:a9:79:0a:2e:1e:6c:82:68:b1:65:
2b:d7:e5:13:2a:f9:32:af:16:f7:0f:0f:a5:f4:a6:
b6:dc:c7:b5:98:32:fb:eb:dd:94:9d:9e:77:c9:42:
4f:12:a8:6c:2e:64:14:da:2e:14:54:9e:fb:9c:8d:
b4:4a:fa:67:1a:55:21:c7:af:2b:0e:6a:b0:07:12:
2e:50:4c:c9:0a:1f:ab:d6:c6:bf:1a:3e:30:25:e1:
04:f3:d7:db:08:9a:fd:4d:1a:97:1f:28:c5:60:78:
d9:e2:52:ff:05:e6:c4:ae:0b:0f:11:82:7c:58:5d:
a6:53:fd:fe:fa:ab:ff:a7:6a:00:02:cd:79:50:1b:
c7:04:47:8d:7f:79:3b:3e:1c:ea:bf:3e:09:54:ce:
fb:2d:80:28:ba:61:d2:8e:c0:47:74:65:29:a1:48:
78:c2:65:8e:e6:9f:c6:11:69:05:f2:58:04:ce:6a:
c2:54:e9:37:7b:cd:b5:ea:93:f2:01:8b:e9:26:91:
4d:31:23:7d:b3:e1:af:72:33:bb:41:a0:c5:15:cc:
1f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AB:DC:5A:A6:00:6E:E4:81:8C:67:3B:91:F3:95:F9:D5:C0:47:59
X509v3 Authority Key Identifier:
keyid:B3:FB:1D:20:50:6F:54:CF:B9:A1:F9:45:1F:A1:0A:88:FF:3B:2F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_sdIFBvVM-5oflFH6EKiP87L2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c42df5-4f92-447d-bd25-86d6e2f46642/1/s_sdIFBvVM-5oflFH6EKiP87L2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c42df5-4f92-447d-bd25-86d6e2f46642/1/s_sdIFBvVM-5oflFH6EKiP87L2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:07:9a:c0:71:f0:29:ed:c0:d6:85:56:a9:95:a8:48:64:55:
f3:a2:4b:b1:9e:00:78:03:78:58:78:06:cb:cb:b1:7f:1a:27:
db:30:42:57:4d:e9:a8:ca:c5:8e:bd:ba:45:fe:ff:96:89:ee:
4d:ab:15:3e:7d:e6:a8:69:dc:0d:6e:ef:9f:05:54:80:4f:e0:
0d:89:5e:5e:2a:98:75:86:16:75:ba:06:59:b8:52:fe:dd:14:
f4:1c:27:ee:62:f9:01:3f:40:02:d2:14:3b:07:30:14:5d:3d:
b1:33:06:64:e0:cb:ba:aa:17:83:19:08:53:7c:cf:6c:f9:b0:
34:31:be:7f:5f:4c:d6:60:ad:de:72:4f:9c:24:a5:a8:27:cc:
ef:73:d1:45:0d:2d:a7:4e:bf:5a:52:20:26:66:7e:1c:b4:e9:
f3:86:81:9e:85:d7:42:fe:5e:07:71:19:b7:21:e5:d3:41:ac:
16:f1:63:bc:30:d7:a4:25:4c:9a:6f:d7:ec:30:65:b0:37:80:
a2:e0:6c:23:e3:ac:0f:17:27:13:42:e2:c8:bc:9f:de:c9:50:
3b:50:44:52:d1:8d:70:7e:ae:9d:2d:0c:5e:18:c3:78:10:05:
b9:66:af:aa:f9:db:a1:72:e8:64:6b:32:32:40:7b:71:0a:ca:
74:4b:e8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:17:53 2025 by rpki-client