Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
File: d1xabqkPXz0AfBDkROO5Y7bTDMU.mft (raw, json)
Hash identifier: yZDA1J9fcc8hFCBYLgVlZVmCtfFp3A0SxrjO9wKtuPs=
Subject key identifier: B4:69:63:A0:F4:A8:C7:DF:A4:4D:08:FD:44:28:47:57:52:3C:83:7E
Authority key identifier: 77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5
Certificate issuer: /CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5
Certificate serial: 01984A4142EA8213EA1DB9AA22E75DF565B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
Manifest number: 03DB
Signing time: Sun 27 Jul 2025 05:00:47 +0000
Manifest this update: Sun 27 Jul 2025 05:00:47 +0000
Manifest next update: Mon 28 Jul 2025 05:00:47 +0000
Files and hashes: 1: d1xabqkPXz0AfBDkROO5Y7bTDMU.crl (hash: dFYtMH34FwNDunC1mAA9TXmOChGNPorEKiDElBakR+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:42:ea:82:13:ea:1d:b9:aa:22:e7:5d:f5:65:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5
Validity
Not Before: Jul 27 05:00:47 2025 GMT
Not After : Jul 28 05:00:47 2025 GMT
Subject: CN=b46963a0f4a8c7dfa44d08fd44284757523c837e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:55:b9:58:c3:c3:e2:27:4b:87:ec:50:48:a6:
49:d1:43:2c:81:02:d7:7e:44:c5:ea:c7:5f:af:9d:
1c:a9:74:f8:96:2f:c0:d9:c5:25:3d:75:02:d2:a0:
21:30:d2:77:9d:d3:58:c2:aa:e3:f7:99:44:d7:70:
fb:08:f0:e5:12:65:d5:04:99:83:01:13:8d:fd:6a:
e5:d9:a5:06:d6:34:0b:99:74:0e:19:13:16:41:76:
07:ed:8b:3f:a7:27:a9:0c:5c:7d:d5:af:1d:64:a0:
e9:32:6b:7b:b2:f8:3f:04:e4:91:46:2a:c3:a5:af:
81:d0:58:64:d0:0a:93:d5:27:85:12:c2:f1:bd:dd:
1c:25:8e:92:5c:df:cd:70:7b:18:66:81:3e:e5:46:
09:bf:db:57:21:69:dd:a6:f8:39:4d:9f:d6:a7:86:
7d:91:34:f4:6d:98:ce:84:c2:70:83:d1:4a:cc:00:
c4:65:26:5f:30:62:0a:ca:3b:e9:31:56:34:29:3a:
c1:d2:52:7e:ac:92:55:9e:66:7c:5c:1b:97:9e:d7:
8c:b1:9b:2f:ac:9c:9a:04:3b:3a:8c:9e:24:72:45:
37:f9:61:8a:7b:08:99:56:2a:ca:47:ca:d0:1b:b9:
cc:0c:e5:7c:b6:eb:a3:e3:4e:e2:24:f5:fd:12:11:
1b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:69:63:A0:F4:A8:C7:DF:A4:4D:08:FD:44:28:47:57:52:3C:83:7E
X509v3 Authority Key Identifier:
keyid:77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bc:88:12:16:ea:34:df:68:3f:f1:84:28:1b:3c:65:ff:55:
74:e6:08:4d:7f:4e:af:6c:b5:61:78:f9:a4:34:f9:da:c9:db:
36:ec:6d:09:dd:fc:74:04:cd:c4:2e:e3:c2:e0:39:30:b3:91:
9b:d5:9b:f4:66:a9:e2:48:a8:f8:4d:f1:52:8c:d1:13:79:a3:
31:4f:4b:11:a6:9f:26:e3:6f:c8:c9:cd:ad:12:00:a9:f7:c0:
f6:3c:99:8d:65:5a:cd:c9:e1:3d:ac:05:46:8f:ca:07:a8:d4:
1b:30:4b:66:bf:2c:67:2b:89:58:3c:64:57:8d:48:52:56:0a:
a5:be:b5:80:59:12:84:be:35:8c:35:70:ef:4a:d6:1d:7d:02:
e7:52:cb:ae:13:fa:0a:2e:91:4e:c4:ea:61:33:fc:0f:fa:44:
79:ce:41:b3:1f:5d:9b:b6:a5:f3:79:fa:10:b8:b5:47:4b:2f:
ef:a1:b8:f7:db:41:87:48:a4:bd:67:ed:ec:c8:33:c7:20:3d:
4e:67:18:7a:b2:e2:89:b2:51:c6:05:5d:ce:b8:e0:34:23:e4:
94:5b:61:a5:ec:4d:0b:1f:42:d0:f5:fa:65:92:b1:95:48:ce:
36:18:17:0d:ec:e6:29:44:68:74:ba:26:13:ea:b0:87:59:3b:
c0:e4:c1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:56:59 2025 by rpki-client