Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
File: Rii90MjhtQTSlPijkEyNV65jg_Q.mft (raw, json)
Hash identifier: svwyoBXFgDdvbBx+W/sRSahHyUlDgqe1X8A3cc/nbRM=
Subject key identifier: 35:2A:97:BD:F0:CB:6E:E9:A8:6D:E7:2A:CF:73:28:18:13:94:F1:F6
Authority key identifier: 46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4
Certificate issuer: /CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4
Certificate serial: 01984B54ABE1AC189CDBCCBAE439077062AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 10:01:36 +0000
Manifest this update: Sun 27 Jul 2025 10:01:36 +0000
Manifest next update: Mon 28 Jul 2025 10:01:36 +0000
Files and hashes: 1: Rii90MjhtQTSlPijkEyNV65jg_Q.crl (hash: fR0Eaiha8RS3l0BcjCfj7Ssc87msqeo8w3DbvGszCas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:ab:e1:ac:18:9c:db:cc:ba:e4:39:07:70:62:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4
Validity
Not Before: Jul 27 10:01:36 2025 GMT
Not After : Jul 28 10:01:36 2025 GMT
Subject: CN=352a97bdf0cb6ee9a86de72acf7328181394f1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6f:50:57:33:bb:a7:2b:44:48:af:3a:4b:f7:
0e:63:34:77:5f:35:66:d9:7b:fc:13:7b:ce:8f:60:
e9:da:61:44:c5:9d:64:5b:5e:c9:1b:25:92:ee:d3:
38:a7:0d:3b:51:09:ce:10:29:38:1b:56:e0:69:d0:
f5:9a:bb:6d:a9:c5:06:3c:dc:ca:46:d5:38:b8:5d:
a6:72:bd:d1:7e:00:09:69:a1:e0:d1:00:68:48:d9:
2e:be:3a:ba:59:13:84:a7:7b:0b:73:54:7d:4b:38:
5b:e1:5a:3d:b4:78:f9:9a:c2:99:de:77:02:53:99:
85:37:3d:18:b1:2a:01:bd:35:d6:8e:0c:f9:25:95:
03:a0:a4:50:a5:d8:cc:8f:ba:74:a1:de:ee:2f:ee:
02:7d:7a:a4:7e:41:45:e1:10:30:10:b6:20:01:fd:
8d:d9:52:e9:ea:40:d5:e4:db:c7:ac:ff:92:04:f5:
c7:6a:af:cc:b3:be:1a:d8:25:c6:6b:74:1c:0f:d1:
e6:c9:fd:f7:ad:45:5e:e4:9e:f5:2e:21:10:9b:b7:
a8:3b:b1:31:d9:70:4e:8c:1a:7d:8c:69:f9:74:1a:
29:77:c9:3f:8f:1a:8a:34:30:32:7a:d3:d1:ca:ee:
a5:94:28:42:75:d2:a0:97:51:95:f6:2c:94:d0:12:
53:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2A:97:BD:F0:CB:6E:E9:A8:6D:E7:2A:CF:73:28:18:13:94:F1:F6
X509v3 Authority Key Identifier:
keyid:46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:15:1b:2a:00:39:c7:b5:08:c4:8e:7f:f8:48:8b:cb:f0:2e:
91:c9:d5:f6:9f:5f:a9:9a:ef:da:6d:ad:6e:72:30:37:f7:ae:
33:86:39:bf:8c:bc:f8:06:d2:34:cc:c5:8c:81:7f:ff:7e:04:
a5:df:48:7c:44:1f:0b:3d:79:3a:5b:4b:09:b5:06:7f:33:a3:
15:d8:32:7d:e9:3b:91:72:74:0f:b9:f5:6c:2f:37:ce:15:c4:
26:60:fa:51:25:a9:b8:e5:ee:1e:5f:da:e3:c4:74:bb:4b:7d:
0d:42:37:cc:37:ef:de:f4:6d:69:3f:c3:79:09:17:71:83:1d:
24:d1:92:91:d1:cd:da:3b:74:cd:e5:33:be:fc:55:21:33:0e:
fe:ed:ed:d4:30:6f:7c:06:6a:3a:e8:1c:5a:38:93:63:8b:f0:
2e:9e:18:8b:5a:b5:d5:c7:90:dc:e0:57:89:64:ed:de:5e:62:
f3:2c:c4:44:7e:98:2e:76:8c:99:72:01:3d:35:ae:7c:6c:72:
bd:81:38:f5:d6:81:66:cd:9e:93:18:be:8e:5c:dd:3d:12:66:
68:89:1b:ce:01:a9:68:f9:28:99:a0:02:f1:0a:c3:f0:73:b3:
40:f2:c3:d7:71:6f:db:f6:70:31:dd:13:59:d9:e2:5f:2e:ec:
84:da:f5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:44:42 2025 by rpki-client