Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4615a1-9052-40c6-a18d-a0d79924db6c/1/sCnHJ8biLu2PvNHot2k5V40Nygo.mft
File: sCnHJ8biLu2PvNHot2k5V40Nygo.mft (raw, json)
Hash identifier: yN+ZBp5vvDCt2zeI95IG3/12AYAbIKk2Ps3sa39zH3Q=
Subject key identifier: C1:3A:AD:BA:66:92:C9:55:F6:86:36:49:24:1E:DB:E9:5E:23:08:5F
Authority key identifier: B0:29:C7:27:C6:E2:2E:ED:8F:BC:D1:E8:B7:69:39:57:8D:0D:CA:0A
Certificate issuer: /CN=b029c727c6e22eed8fbcd1e8b76939578d0dca0a
Certificate serial: 01984776A85F03447219D19A9646E257D55E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCnHJ8biLu2PvNHot2k5V40Nygo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4615a1-9052-40c6-a18d-a0d79924db6c/1/sCnHJ8biLu2PvNHot2k5V40Nygo.mft
Manifest number: 15FB
Signing time: Sat 26 Jul 2025 16:00:15 +0000
Manifest this update: Sat 26 Jul 2025 16:00:15 +0000
Manifest next update: Sun 27 Jul 2025 16:00:15 +0000
Files and hashes: 1: sCnHJ8biLu2PvNHot2k5V40Nygo.crl (hash: CG0qfXqHu3WvYzCudAVCiC5pzKMYs5UUV9QaAK0bNeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4615a1-9052-40c6-a18d-a0d79924db6c/1/sCnHJ8biLu2PvNHot2k5V40Nygo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4615a1-9052-40c6-a18d-a0d79924db6c/1/sCnHJ8biLu2PvNHot2k5V40Nygo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCnHJ8biLu2PvNHot2k5V40Nygo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:a8:5f:03:44:72:19:d1:9a:96:46:e2:57:d5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b029c727c6e22eed8fbcd1e8b76939578d0dca0a
Validity
Not Before: Jul 26 16:00:15 2025 GMT
Not After : Jul 27 16:00:15 2025 GMT
Subject: CN=c13aadba6692c955f6863649241edbe95e23085f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5d:8a:f6:08:fc:71:a8:a9:ad:78:4b:cb:f0:
b1:d8:7d:7f:a8:6e:d3:02:4f:9f:0c:6a:bf:4d:22:
18:20:ef:70:0a:d6:ed:23:69:be:ea:2e:f1:40:ba:
7d:af:33:2d:26:de:a1:69:aa:ec:f4:a6:96:32:1a:
24:53:66:ba:06:07:ab:67:a2:4b:ce:ea:79:fa:88:
14:1a:c0:a1:64:54:bd:0c:50:fd:7c:0c:e5:99:93:
41:a3:4a:f9:b0:2d:30:6f:6e:f9:21:f6:fb:87:77:
a2:93:7d:70:9b:02:97:36:4d:fe:b0:a4:96:29:e5:
ee:2b:bb:21:b1:46:b8:29:1f:5f:46:74:54:cd:9a:
99:87:46:ce:90:f3:b9:ea:df:0b:ab:b7:d0:83:f2:
7b:8c:50:da:c5:f4:97:df:ed:09:88:e9:0f:57:3d:
1a:46:12:29:92:32:17:e0:d8:c5:1a:b1:07:b0:93:
b3:58:63:a5:e1:35:43:5d:2b:9a:99:03:a0:45:0b:
d2:3b:d0:91:e7:07:56:50:ac:e2:d8:33:12:d5:d6:
64:19:a4:82:a0:a7:f7:85:4d:9a:e7:1a:b6:6e:b0:
3d:4a:89:47:b4:9d:f9:a8:29:6e:34:73:0b:57:db:
4e:9d:a3:a6:51:23:8c:80:d5:82:67:12:c5:b0:df:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3A:AD:BA:66:92:C9:55:F6:86:36:49:24:1E:DB:E9:5E:23:08:5F
X509v3 Authority Key Identifier:
keyid:B0:29:C7:27:C6:E2:2E:ED:8F:BC:D1:E8:B7:69:39:57:8D:0D:CA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCnHJ8biLu2PvNHot2k5V40Nygo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4615a1-9052-40c6-a18d-a0d79924db6c/1/sCnHJ8biLu2PvNHot2k5V40Nygo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4615a1-9052-40c6-a18d-a0d79924db6c/1/sCnHJ8biLu2PvNHot2k5V40Nygo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:d3:78:8b:6b:41:ad:9d:5e:1b:64:ae:cb:03:b5:4e:1c:ad:
ec:39:28:e7:5a:5f:de:af:d7:1e:92:4b:09:c5:bd:e7:46:ee:
bb:ba:b8:88:af:02:4e:42:90:c1:b8:68:df:1d:3f:24:98:7f:
49:52:bf:84:cb:a8:3e:5d:cb:43:7d:62:ca:57:d1:8c:d4:74:
3e:f9:4b:2a:f3:e2:cf:df:b4:d1:67:cd:7d:7e:15:97:e6:ae:
d8:32:28:eb:30:af:a8:bc:29:d2:39:a1:4c:b0:0c:ca:b3:5b:
46:b7:52:fa:f0:fb:ac:21:9c:29:45:12:b2:f6:85:6b:e6:76:
03:49:11:1c:09:1b:51:71:6d:5b:81:67:52:05:21:ca:c7:ae:
80:c0:49:77:1c:c4:bf:1d:59:b3:d3:a9:d7:9b:83:ec:0b:37:
8e:a0:40:bc:bd:c0:10:be:42:07:76:d8:31:f2:99:58:2f:e1:
df:1e:66:10:f8:c4:78:c2:29:e4:5f:42:6f:f6:67:cd:bc:dd:
d6:f1:eb:1d:0a:5b:5d:d6:82:55:42:6d:f3:ee:ea:6a:ba:41:
5d:0e:8b:87:71:36:04:fe:3d:88:4d:a0:46:4c:35:18:c1:90:
cf:ac:47:d5:c2:49:11:c0:58:7a:e8:43:7c:fd:d8:be:5b:2d:
f9:10:f5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:47:01 2025 by rpki-client