Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft
File: geY5cEKnqWRfwS91nQJhldfL_Vg.mft (raw, json)
Hash identifier: rD1YuyNmhToNoFvJtveM40E9nQiIz80XArp3HG8bjvk=
Subject key identifier: 9F:60:3F:DB:37:CF:5E:CC:E6:83:F9:F4:97:1C:2A:70:F1:87:4C:E7
Authority key identifier: 81:E6:39:70:42:A7:A9:64:5F:C1:2F:75:9D:02:61:95:D7:CB:FD:58
Certificate issuer: /CN=81e6397042a7a9645fc12f759d026195d7cbfd58
Certificate serial: 019849D36130763EA71D94EA06062A86A12B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geY5cEKnqWRfwS91nQJhldfL_Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft
Manifest number: 0D0C
Signing time: Sun 27 Jul 2025 03:00:46 +0000
Manifest this update: Sun 27 Jul 2025 03:00:46 +0000
Manifest next update: Mon 28 Jul 2025 03:00:46 +0000
Files and hashes: 1: geY5cEKnqWRfwS91nQJhldfL_Vg.crl (hash: 8sUSS+s1PG1wpzj0do1pVtp+pz0zCn+3HdsK9V7wi0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/geY5cEKnqWRfwS91nQJhldfL_Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:61:30:76:3e:a7:1d:94:ea:06:06:2a:86:a1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e6397042a7a9645fc12f759d026195d7cbfd58
Validity
Not Before: Jul 27 03:00:46 2025 GMT
Not After : Jul 28 03:00:46 2025 GMT
Subject: CN=9f603fdb37cf5ecce683f9f4971c2a70f1874ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:06:26:68:34:54:35:64:9d:c5:89:5c:72:
ba:97:35:1b:73:c5:eb:4d:3f:ce:cc:f0:80:3c:0f:
9f:52:14:76:bd:f0:b2:d6:a2:fb:a6:58:28:6b:58:
aa:3c:a4:88:a8:e4:1b:77:ae:7f:d0:bc:4d:67:ea:
9f:98:27:70:ca:66:8a:e9:b0:e8:3c:a6:75:d8:16:
aa:3a:40:8c:c5:27:dd:4f:9d:16:59:b8:65:3f:53:
6c:f9:59:f8:63:84:ca:5e:42:d4:99:8f:f0:92:e9:
34:fd:cd:31:c9:33:3f:4e:f1:5f:e7:d9:86:4d:69:
c4:12:bb:63:c7:f3:d3:9b:b8:cf:08:f3:a6:18:5c:
6a:a4:56:c0:44:d1:6e:51:91:d0:66:5b:96:eb:2c:
d1:f6:b0:de:83:34:6a:6a:d9:f0:fb:b7:ff:9b:fb:
76:81:ab:b5:99:c1:2e:bc:7d:7c:50:98:3f:2d:19:
a8:8c:e5:c1:42:d3:1a:bc:05:a0:f5:94:de:9b:43:
7c:29:18:c6:52:1e:ee:ff:16:88:6a:1f:4d:31:9a:
8f:9f:3f:5f:0b:9d:48:4b:92:c1:ca:db:ab:fd:5c:
5a:aa:c2:f4:96:44:70:d6:e1:03:a0:87:40:b0:32:
ee:92:42:03:a7:4f:7e:37:a4:0e:46:10:cc:cb:6d:
b3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:60:3F:DB:37:CF:5E:CC:E6:83:F9:F4:97:1C:2A:70:F1:87:4C:E7
X509v3 Authority Key Identifier:
keyid:81:E6:39:70:42:A7:A9:64:5F:C1:2F:75:9D:02:61:95:D7:CB:FD:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geY5cEKnqWRfwS91nQJhldfL_Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:77:ec:0f:e9:19:05:ca:c3:df:67:66:b3:df:16:a8:e0:9b:
08:e5:48:e1:5b:a5:fd:70:4e:cb:ca:8a:0a:ff:0b:8a:db:df:
bc:a8:85:b4:64:e3:b8:3e:b0:e0:df:27:59:a0:4f:83:af:d7:
d8:15:ed:b2:1d:1c:ec:24:82:ca:d7:c3:d8:a0:84:d6:21:82:
20:8f:44:81:2a:05:e7:36:34:cc:bf:7c:41:8a:06:2d:1b:54:
7c:f4:8a:d1:f5:d5:50:05:94:be:31:7c:60:bc:6a:b1:49:2c:
b6:4c:3a:26:af:77:fd:08:39:3c:66:82:73:51:9e:e5:92:27:
74:fb:34:d3:49:20:0e:82:e0:e9:3b:b7:a5:f7:88:99:e4:bf:
62:5f:1d:08:b5:6a:5e:86:8e:c6:14:d8:0e:d6:e2:db:f4:cc:
24:83:c4:2e:a1:1a:35:4b:3a:aa:10:40:48:62:5c:8d:fc:95:
f7:19:6d:07:eb:34:92:ca:63:48:c4:6b:bb:74:00:06:b3:f4:
1b:d2:f0:ae:8e:84:69:d9:8c:19:05:41:c1:e7:34:8b:53:e5:
9a:61:fd:2d:84:b7:24:1f:ca:4c:34:49:b1:91:f7:da:24:8e:
b2:0e:78:10:16:11:14:b3:34:da:2b:82:db:b9:c6:6c:22:b3:
9a:cc:a9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:35:14 2025 by rpki-client