Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
File: sKVpmgjHv9cHz7BtMhP1ysvyglc.mft (raw, json)
Hash identifier: QWtN4f5i+r7TAiwIg6X8dtTzEfLrmlss6F1jnZuSyBQ=
Subject key identifier: 41:DB:3E:94:9E:3F:91:14:7D:02:97:26:40:D4:6D:27:FC:EF:98:75
Authority key identifier: B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57
Certificate issuer: /CN=b0a5699a08c7bfd707cfb06d3213f5cacbf28257
Certificate serial: 019848F75E8EF30C2713D52C908EF69A4B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
Manifest number: 0630
Signing time: Sat 26 Jul 2025 23:00:27 +0000
Manifest this update: Sat 26 Jul 2025 23:00:27 +0000
Manifest next update: Sun 27 Jul 2025 23:00:27 +0000
Files and hashes: 1: sKVpmgjHv9cHz7BtMhP1ysvyglc.crl (hash: z/B2kcQ9Urcq8x4t+joRfOotEvB8c3vSFnThJiyG5Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:5e:8e:f3:0c:27:13:d5:2c:90:8e:f6:9a:4b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a5699a08c7bfd707cfb06d3213f5cacbf28257
Validity
Not Before: Jul 26 23:00:27 2025 GMT
Not After : Jul 27 23:00:27 2025 GMT
Subject: CN=41db3e949e3f91147d02972640d46d27fcef9875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:29:2d:ab:ba:bd:73:86:92:84:fb:e5:e3:
0c:01:15:0a:ba:05:0d:53:34:2a:58:ab:45:95:14:
56:f6:fd:6b:e0:db:83:65:1d:d7:be:ce:ee:78:75:
98:a0:da:a7:a9:7f:ca:f6:80:90:6b:0e:2c:c9:dc:
91:fd:08:22:1b:05:c4:44:70:87:5d:ae:03:c4:ab:
16:3c:2b:ec:75:56:f7:c9:ea:32:b6:f1:5a:5b:82:
a0:0b:49:f4:b8:41:9d:dd:dc:c9:84:0a:1c:0f:1c:
0d:26:02:8d:66:20:bf:e3:43:1f:a6:23:b9:dd:b0:
e1:d3:36:d0:01:83:c8:31:c7:20:41:3b:6b:94:9c:
9f:07:8e:dd:c1:36:f7:41:fc:8b:ec:5e:d8:1b:a3:
13:55:35:d2:ef:cd:ef:03:48:4f:04:41:ff:f1:dc:
71:5e:06:8c:ed:50:db:ed:e5:49:44:c5:2b:08:ef:
c5:66:83:50:82:80:82:72:33:d4:a4:33:69:d2:23:
46:68:07:18:26:2d:91:8a:c3:1d:74:9f:92:40:7d:
1d:c1:10:c3:53:14:e6:cc:76:95:cd:20:26:37:31:
ea:73:7b:ed:b7:e9:81:76:7c:54:9a:df:57:f0:20:
f0:a1:d6:7d:68:a4:1c:b2:50:a5:ba:77:00:75:9b:
65:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DB:3E:94:9E:3F:91:14:7D:02:97:26:40:D4:6D:27:FC:EF:98:75
X509v3 Authority Key Identifier:
keyid:B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4d:a0:07:2c:7a:1a:c3:ec:95:ce:bc:f3:96:5e:de:d4:a0:
28:50:3e:98:ba:69:a7:9c:44:8b:e4:fa:81:6c:ed:71:66:83:
bc:9f:2d:b3:67:4d:a5:4b:72:21:ba:37:76:77:5c:e1:52:8e:
92:a2:b8:4e:19:66:b1:0e:86:58:2a:18:64:54:f2:04:31:d0:
04:cb:2b:77:15:7c:ea:c5:b0:80:76:85:f4:70:d2:11:12:5f:
47:70:86:3b:73:1c:f6:18:56:91:8e:1e:3b:e3:56:e7:3c:69:
a9:d9:01:3a:1a:72:aa:f6:42:2c:d6:a9:fd:55:1f:2d:ca:88:
20:2e:4d:6d:f2:e2:d2:23:b3:46:03:03:ec:8c:d7:f0:e9:27:
90:01:c2:d5:6a:67:ec:11:b4:44:db:35:ba:d5:4d:74:a2:e3:
6f:87:46:c2:20:17:9f:16:cb:06:c0:42:1f:8b:b6:bf:fb:cf:
8a:d5:36:1b:22:b5:e8:ec:0d:17:61:d7:f9:19:be:f9:ec:70:
9e:d1:99:03:f0:46:eb:b2:ed:31:64:e4:bb:eb:c0:be:1d:ed:
47:cf:06:14:83:1b:9e:d5:62:1c:c1:8c:c7:9e:a4:01:a5:23:
e9:5d:00:1e:9e:72:b5:ce:e7:9b:9c:62:59:a0:22:ea:50:75:
89:7d:59:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:15:10 2025 by rpki-client