Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
File: Df5SSMH7abOKMYjflHLozbyFwZM.mft (raw, json)
Hash identifier: S3IbjNqCG9Qdjr8n15T3kAs0x5sFwSkbjEtUc9m/92I=
Subject key identifier: 13:CB:20:61:27:B2:42:14:FE:08:82:A4:45:B1:6B:04:19:F2:29:22
Authority key identifier: 0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
Certificate issuer: /CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Certificate serial: 0198548DCAD7C56F0459598D4FB647A8EC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
Manifest number: 04E6
Signing time: Tue 29 Jul 2025 05:00:35 +0000
Manifest this update: Tue 29 Jul 2025 05:00:35 +0000
Manifest next update: Wed 30 Jul 2025 05:00:35 +0000
Files and hashes: 1: Df5SSMH7abOKMYjflHLozbyFwZM.crl (hash: kELqGtKhFziIf4IXkdQTOoRlPukJNTFkICygvxXgsKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:ca:d7:c5:6f:04:59:59:8d:4f:b6:47:a8:ec:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Validity
Not Before: Jul 29 05:00:35 2025 GMT
Not After : Jul 30 05:00:35 2025 GMT
Subject: CN=13cb206127b24214fe0882a445b16b0419f22922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:7c:64:84:1d:7f:16:22:9e:f9:b7:9f:c6:
48:6c:2e:d5:c5:49:ff:19:78:d2:66:d4:90:0d:9e:
6a:50:a0:26:00:d8:24:1a:31:9f:90:f3:9e:76:c3:
5a:19:72:c1:f9:2a:2f:78:c0:65:17:4e:ee:47:90:
95:39:8a:c8:85:bb:e5:55:34:53:16:a3:e9:29:8e:
5c:c0:d6:95:2f:74:76:97:50:d2:9d:04:77:a7:70:
d2:64:3e:05:dd:dc:98:69:34:27:26:6d:5d:78:de:
20:a1:2b:a3:54:45:7b:28:d6:8b:28:3c:3e:2e:5e:
c6:35:9c:12:26:2b:b2:c4:c4:4f:65:4f:fa:a5:01:
eb:6d:72:4a:26:22:ad:af:3e:88:6c:5f:2b:44:7e:
d4:7e:3a:6c:d0:99:a8:bd:e4:46:33:1b:4b:56:0c:
5f:f8:f9:f7:b5:8b:42:b5:3c:a5:f0:0c:96:58:93:
15:a5:fc:6c:b5:1d:de:17:9b:57:20:9d:3b:24:4d:
82:72:ab:6f:e8:51:d4:4d:de:bd:79:91:6a:2e:1c:
f2:05:6d:10:01:02:13:e9:bd:5c:40:1d:a4:b1:a3:
a8:03:a8:28:02:d1:b6:5f:69:1e:c5:95:35:30:b0:
51:97:a9:1d:14:fb:cf:91:97:a8:df:d3:1d:b8:af:
ae:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CB:20:61:27:B2:42:14:FE:08:82:A4:45:B1:6B:04:19:F2:29:22
X509v3 Authority Key Identifier:
keyid:0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5f:79:69:28:54:e8:36:cd:b0:c0:93:2b:e0:dd:70:7b:1a:
ac:ed:54:41:e3:25:c4:ae:ba:19:cf:58:f5:fa:01:42:d7:42:
17:42:48:19:28:e8:74:b7:0a:8d:de:f0:eb:b6:71:59:32:98:
be:80:a7:f0:e0:32:8f:d7:e7:3a:09:b9:ac:67:c3:67:20:e1:
d5:2a:61:12:73:ac:41:6f:3c:33:e2:65:7d:f1:1f:10:cd:49:
26:d8:79:27:85:94:da:b7:e6:04:f1:ad:bd:b0:81:6e:62:ff:
6d:a8:4f:e1:01:52:0c:2f:1e:4b:55:8e:fa:74:54:78:07:ef:
17:5a:ad:59:69:e7:ed:d0:94:03:42:6d:38:f2:2a:a6:45:99:
b8:02:0c:39:54:e1:c3:62:de:70:1d:8f:63:8a:25:5d:9c:69:
ab:bf:44:b5:75:70:26:c2:a7:3a:b2:70:20:33:01:87:7f:c9:
48:81:1f:12:f8:5e:2d:c4:0a:dd:cf:44:f3:87:a1:44:3a:ea:
32:3a:cf:a9:f9:b4:70:eb:01:f7:08:6a:b9:79:00:16:83:8f:
76:20:cc:2e:e9:f6:71:58:6a:a9:78:98:73:4c:2b:75:04:ff:
49:fd:61:94:06:b2:76:30:2f:86:cb:c5:95:4e:22:48:e9:9a:
29:10:34:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:33:01 2025 by rpki-client