Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/332f0a-57d1-40d0-a86b-77213f991db9/1/67YrcxkGEIQRy1VV2BvcOj_cbbg.mft
File: 67YrcxkGEIQRy1VV2BvcOj_cbbg.mft (raw, json)
Hash identifier: YXF+L2RE19E41xC4ht+uwb6S5Qt/FpccFH+d8n3vUtw=
Subject key identifier: 3A:E2:B9:38:AF:E8:75:2B:CB:48:8B:F1:AD:E7:69:38:F3:56:8E:12
Authority key identifier: EB:B6:2B:73:19:06:10:84:11:CB:55:55:D8:1B:DC:3A:3F:DC:6D:B8
Certificate issuer: /CN=ebb62b731906108411cb5555d81bdc3a3fdc6db8
Certificate serial: 01984475C910372C3E546512D049CF087F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67YrcxkGEIQRy1VV2BvcOj_cbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/332f0a-57d1-40d0-a86b-77213f991db9/1/67YrcxkGEIQRy1VV2BvcOj_cbbg.mft
Manifest number: AB
Signing time: Sat 26 Jul 2025 02:00:26 +0000
Manifest this update: Sat 26 Jul 2025 02:00:26 +0000
Manifest next update: Sun 27 Jul 2025 02:00:26 +0000
Files and hashes: 1: 67YrcxkGEIQRy1VV2BvcOj_cbbg.crl (hash: Rxi0aKX6+SIS3VUW25tUdaYxeg37aLjWIawI32IUMSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/332f0a-57d1-40d0-a86b-77213f991db9/1/67YrcxkGEIQRy1VV2BvcOj_cbbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/332f0a-57d1-40d0-a86b-77213f991db9/1/67YrcxkGEIQRy1VV2BvcOj_cbbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/67YrcxkGEIQRy1VV2BvcOj_cbbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:c9:10:37:2c:3e:54:65:12:d0:49:cf:08:7f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb62b731906108411cb5555d81bdc3a3fdc6db8
Validity
Not Before: Jul 26 02:00:26 2025 GMT
Not After : Jul 27 02:00:26 2025 GMT
Subject: CN=3ae2b938afe8752bcb488bf1ade76938f3568e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:b0:af:7e:5b:6b:32:f7:c8:87:02:df:9b:
0d:b6:b5:47:0e:c0:8a:d9:96:93:0b:a9:71:8d:68:
b7:c8:28:14:c5:24:33:8e:05:89:26:78:e2:cb:3c:
16:a7:5f:4a:e5:db:67:6d:9b:9c:7f:ce:54:13:cc:
64:a1:6c:29:34:b2:d5:8a:34:22:aa:6e:d7:de:0a:
e3:7e:8c:ff:61:dc:c2:81:1d:5c:94:8e:fc:1a:e6:
e9:b7:60:01:07:15:27:fa:9c:e8:79:3e:ab:5c:10:
f7:e5:6f:ec:95:28:40:f6:0a:4b:ec:ee:97:87:dc:
3f:26:a8:f3:f8:e8:46:9e:cc:be:38:06:3f:96:c5:
88:30:ac:f5:f3:c6:9e:d4:f3:53:fa:15:4e:ee:3a:
d2:2b:e4:f8:a9:87:67:59:3e:b9:2a:e9:4b:25:be:
27:40:c7:00:61:03:97:3d:8b:07:a0:44:bb:b1:27:
06:de:12:92:fb:2f:e5:05:f3:20:d2:af:ea:69:5d:
9c:ad:c3:0a:b8:ce:ec:09:88:8e:a7:78:3d:25:50:
cb:71:be:eb:bd:3c:7c:e5:64:bc:5b:8d:13:79:00:
ad:4f:f8:ea:ef:a7:29:e5:cc:97:5d:a3:9a:22:67:
16:df:45:da:ce:59:cb:f9:a5:32:1f:ea:93:d4:78:
54:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E2:B9:38:AF:E8:75:2B:CB:48:8B:F1:AD:E7:69:38:F3:56:8E:12
X509v3 Authority Key Identifier:
keyid:EB:B6:2B:73:19:06:10:84:11:CB:55:55:D8:1B:DC:3A:3F:DC:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67YrcxkGEIQRy1VV2BvcOj_cbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/332f0a-57d1-40d0-a86b-77213f991db9/1/67YrcxkGEIQRy1VV2BvcOj_cbbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/332f0a-57d1-40d0-a86b-77213f991db9/1/67YrcxkGEIQRy1VV2BvcOj_cbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ac:b4:16:fe:40:25:9b:f1:f6:82:0a:bf:6e:e1:4f:3b:fd:
1b:77:86:07:7b:3b:74:8d:e9:dd:28:eb:62:f7:00:85:aa:17:
b5:b0:55:99:ca:1b:7d:57:93:38:90:42:df:4f:be:14:ba:17:
a9:74:17:32:fa:f9:b6:ad:f7:ef:5f:b8:71:3d:d6:18:80:03:
d5:dd:9a:be:a1:7f:d1:f4:82:59:dc:fa:57:2e:8b:e1:02:99:
86:e0:f7:05:d6:15:9f:ce:da:82:5a:dc:f2:f5:5d:09:2c:ae:
ad:b9:7c:ff:28:b0:d5:ac:3f:11:8e:8a:bf:97:49:d9:36:16:
2b:a9:6d:b6:41:1e:0d:63:92:e2:31:83:f9:c9:6f:42:7e:80:
2b:de:e3:42:f4:0f:1b:f5:a8:f1:4d:b4:a5:02:44:50:ea:19:
93:9d:c2:9b:a4:dc:a1:39:5d:8c:93:84:7d:30:9f:cf:a9:5d:
75:3c:74:ad:5b:da:c6:c1:8d:80:90:2c:2c:b5:e1:eb:5b:1b:
ec:34:7b:3b:bd:99:87:2c:06:71:ff:af:ee:e1:e3:84:60:22:
79:9a:b2:5b:b2:b9:9a:52:8b:52:62:1c:d6:f7:dc:18:e2:bd:
5b:87:07:a6:b9:2a:a9:d3:80:b0:d4:7f:0c:d3:28:11:c9:af:
a3:cf:2a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:30:28 2025 by rpki-client