Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
File: RzLsDpHbv5TdodZQRH0miXbWIJo.mft (raw, json)
Hash identifier: LlBoB/aGt/zcCdkPaGtboOPcDkO+1csYdZc2eS0sVz0=
Subject key identifier: 04:46:25:42:75:5C:70:C9:F2:24:17:F6:46:01:08:1C:0E:87:56:32
Authority key identifier: 47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
Certificate issuer: /CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Certificate serial: 019848C0B14ADE58DBA9B269CA384F5EB839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
Manifest number: 0AB7
Signing time: Sat 26 Jul 2025 22:00:44 +0000
Manifest this update: Sat 26 Jul 2025 22:00:44 +0000
Manifest next update: Sun 27 Jul 2025 22:00:44 +0000
Files and hashes: 1: RzLsDpHbv5TdodZQRH0miXbWIJo.crl (hash: spinO4NvBNWngl9fbSrt6ERb2+YkWuu4izzuDMRX2Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:b1:4a:de:58:db:a9:b2:69:ca:38:4f:5e:b8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Validity
Not Before: Jul 26 22:00:44 2025 GMT
Not After : Jul 27 22:00:44 2025 GMT
Subject: CN=04462542755c70c9f22417f64601081c0e875632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:69:04:a1:92:3c:72:ec:30:f3:ae:30:18:
69:7b:65:14:5b:1a:c5:98:7f:fe:3a:1f:a1:92:20:
ee:50:67:c3:c1:bf:ca:93:3d:2e:aa:bf:ee:72:ae:
ba:c4:7c:ae:8d:4c:dd:55:94:2f:ad:c1:e5:1f:7d:
6b:17:52:3f:b4:b9:3c:e3:af:2e:0a:7b:4e:a2:c1:
1b:a5:01:3e:ba:2a:6a:87:98:1e:b1:09:ad:f4:b1:
4f:12:d9:07:68:cb:e5:c4:61:b3:91:be:4c:ad:3b:
6c:40:3e:25:9b:70:06:0c:ea:9f:ad:c1:c7:19:83:
a4:56:79:e0:8b:85:0a:97:09:3a:91:6a:b7:b2:38:
19:b5:8f:02:c4:81:79:23:72:1d:92:91:d1:76:e6:
7e:db:c2:a8:ea:11:e9:2d:69:c5:81:91:2d:55:bb:
d3:bf:a7:aa:fb:83:c6:1f:29:8f:5e:85:73:55:a3:
99:e5:03:02:96:3b:e5:11:2c:1b:1f:b7:d0:6c:14:
33:74:01:8f:4f:82:b2:62:77:d2:ff:cf:2c:35:9a:
9c:50:4f:86:ea:a8:d7:f6:0d:7a:b6:1d:32:7d:fd:
ab:82:2c:79:31:a3:80:13:99:30:f7:ac:9b:ce:08:
a3:b6:89:f6:17:c7:bc:49:14:c6:d2:09:10:0f:68:
68:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:46:25:42:75:5C:70:C9:F2:24:17:F6:46:01:08:1C:0E:87:56:32
X509v3 Authority Key Identifier:
keyid:47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:17:94:fc:db:cc:94:cc:12:a1:b6:8c:10:cc:da:67:2f:f9:
f7:e1:41:92:23:a7:53:a8:37:a1:d1:56:5a:4e:4b:1e:3a:c3:
ef:21:3f:1d:27:37:26:83:4c:06:c5:b9:b3:0c:6e:71:e6:f2:
12:d1:e9:49:d5:3f:d1:bf:ff:20:dc:02:d8:62:f7:ac:50:3e:
31:56:b6:5e:e6:3d:01:b6:2f:17:73:58:e8:26:81:dc:f0:04:
f2:1e:96:09:73:cb:e4:70:50:0d:bd:52:5b:9f:6f:3a:e1:6a:
65:11:9d:44:f2:35:15:f2:c4:46:25:29:4e:17:5a:f3:4d:fe:
53:8e:15:05:4b:b5:86:46:82:b5:4c:cd:0e:87:26:9d:2d:4e:
40:d6:24:dc:60:9a:43:d5:7f:19:d2:60:c5:da:03:f8:e2:d4:
ec:6f:0c:95:03:c5:a2:96:36:f6:dd:90:91:83:f2:85:65:6b:
8c:41:35:99:ea:02:8a:cc:93:14:fc:61:f4:6e:db:15:d8:73:
bc:f4:8f:4b:a8:8c:91:77:ad:a7:41:eb:9d:5b:7b:90:8c:0b:
11:1f:74:c6:0d:13:80:cf:0d:17:01:b9:b1:95:3a:d8:52:14:
a3:f4:c0:f6:f5:12:37:91:50:09:03:73:c7:33:80:dc:7a:d5:
17:1b:84:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:35:05 2025 by rpki-client