Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.mft
File: rIpdP4uUYpQnOEoSDHdHYFY611o.mft (raw, json)
Hash identifier: u61utMLDZ0q1hw5eWx7pE3fatAdVJdh0WTKtNKH/dPI=
Subject key identifier: 12:AC:70:B9:1D:C3:53:39:9D:A1:93:FB:33:87:BC:1F:89:56:18:C5
Authority key identifier: AC:8A:5D:3F:8B:94:62:94:27:38:4A:12:0C:77:47:60:56:3A:D7:5A
Certificate issuer: /CN=ac8a5d3f8b94629427384a120c774760563ad75a
Certificate serial: 01984965DECE412D3478142F2072538E5ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpdP4uUYpQnOEoSDHdHYFY611o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.mft
Manifest number: 0FDE
Signing time: Sun 27 Jul 2025 01:01:09 +0000
Manifest this update: Sun 27 Jul 2025 01:01:09 +0000
Manifest next update: Mon 28 Jul 2025 01:01:09 +0000
Files and hashes: 1: rIpdP4uUYpQnOEoSDHdHYFY611o.crl (hash: h7EGQc3KQBqY5KN5Ucl6cp8qyYVXj4zHe2+qlKdC70g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpdP4uUYpQnOEoSDHdHYFY611o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:de:ce:41:2d:34:78:14:2f:20:72:53:8e:5e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a5d3f8b94629427384a120c774760563ad75a
Validity
Not Before: Jul 27 01:01:09 2025 GMT
Not After : Jul 28 01:01:09 2025 GMT
Subject: CN=12ac70b91dc353399da193fb3387bc1f895618c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:42:4d:4e:a9:b9:16:e1:33:32:0a:9a:1e:
7d:52:52:8c:c9:65:6c:e6:f0:80:bc:00:fd:3c:a2:
8e:bd:61:52:e5:ab:06:18:87:d7:d3:db:d7:17:63:
86:e6:66:f5:b7:80:d7:5d:e3:ce:34:86:74:c5:0f:
0a:8d:01:f3:d7:15:cd:c4:96:6c:9b:f8:7f:4d:eb:
d2:db:72:6e:8f:bd:64:71:4b:16:96:fb:fa:4f:8a:
7b:17:f3:8d:bb:fd:e2:0f:39:32:8b:8c:60:1d:35:
e0:18:e3:d8:0d:fe:cc:e2:73:80:85:7e:d0:d0:49:
85:bb:c4:cd:b7:67:cf:2b:4f:60:6a:69:1a:68:75:
34:4e:cc:9d:6c:10:1e:e0:35:f8:d9:de:5b:d3:ee:
fb:16:b1:30:af:2f:bd:45:6f:b6:b4:e9:47:1e:f3:
99:46:6e:d4:99:bc:1d:62:6b:87:cb:e6:c8:69:4d:
4b:9d:d5:ff:c5:54:7c:3c:ff:be:82:3e:5a:a0:e8:
1c:46:4a:32:eb:01:60:76:5f:83:db:e9:cc:b7:4d:
7f:cc:85:73:e0:19:f3:d3:a5:4d:33:15:ac:7d:78:
98:80:f3:a2:a2:bc:97:4f:c2:c9:7c:95:d6:69:00:
3a:d4:1e:aa:a9:31:72:03:b8:09:20:01:6d:64:d2:
2d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AC:70:B9:1D:C3:53:39:9D:A1:93:FB:33:87:BC:1F:89:56:18:C5
X509v3 Authority Key Identifier:
keyid:AC:8A:5D:3F:8B:94:62:94:27:38:4A:12:0C:77:47:60:56:3A:D7:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpdP4uUYpQnOEoSDHdHYFY611o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:da:dd:42:c4:9b:9e:66:58:b1:96:46:e8:c3:22:35:c3:a5:
35:f4:cf:a0:94:6f:3c:51:d4:fe:6c:ea:81:d7:97:9a:41:26:
51:d3:c2:6c:26:a3:20:97:5b:ad:3a:71:5f:bb:dd:f7:64:d8:
8a:52:47:36:76:22:ef:94:76:e5:ec:b3:51:5b:f6:98:42:2b:
2f:74:2d:51:e8:8a:ec:f0:fb:49:c2:30:3d:ab:aa:81:b6:9a:
4d:6d:8a:e6:69:29:db:df:82:37:2d:a7:f5:f6:c4:ca:e2:cd:
11:34:f5:1d:f5:0d:cb:84:06:00:70:3a:98:40:3b:78:16:c1:
05:6b:fe:5a:32:25:49:22:cb:d1:d5:95:9a:b1:52:ad:d5:03:
4f:58:a8:47:77:31:a5:4f:7c:42:36:14:be:d7:52:88:ee:e6:
ec:3a:31:89:74:5e:f0:02:ae:1d:02:ec:57:42:a8:d4:a9:b8:
03:30:23:df:55:b1:27:47:56:12:cb:54:99:f3:89:e3:4d:19:
72:bb:00:97:80:26:be:64:fb:a8:5c:9d:b8:6b:5e:02:ed:b0:
f8:30:56:bd:4a:16:0b:bc:39:87:d6:a7:55:5f:c8:67:9a:d8:
ac:c5:a1:9f:e8:78:b3:0f:3e:b4:a1:0c:78:92:6f:e9:02:e8:
f0:95:28:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:41:41 2025 by rpki-client