Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
File: CEoFdH74ii68ny-u9iAZ3IfRolM.mft (raw, json)
Hash identifier: 6jzpG6gftcThFGHBw57faww9CxAB0i2CEPZiYWf5DRo=
Subject key identifier: F6:60:25:50:9D:75:E6:ED:22:43:99:83:38:F5:E7:D2:9B:84:1B:9B
Authority key identifier: 08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
Certificate issuer: /CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Certificate serial: 0197496868AE42E77ADB54549968A998FE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
Manifest number: 1258
Signing time: Sat 07 Jun 2025 08:01:08 +0000
Manifest this update: Sat 07 Jun 2025 08:01:08 +0000
Manifest next update: Sun 08 Jun 2025 08:01:08 +0000
Files and hashes: 1: CEoFdH74ii68ny-u9iAZ3IfRolM.crl (hash: +5bcdaEH0gPwV05VwAZ/nuItB/+kYZ0zUZsadzPjlZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:68:ae:42:e7:7a:db:54:54:99:68:a9:98:fe:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Validity
Not Before: Jun 7 08:01:08 2025 GMT
Not After : Jun 8 08:01:08 2025 GMT
Subject: CN=f66025509d75e6ed2243998338f5e7d29b841b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e4:ca:0e:2a:e2:9a:eb:5b:cc:5d:72:e1:9c:
a2:83:d5:5c:30:d4:13:36:e3:d5:9c:32:10:a0:78:
15:0d:4a:93:3a:62:28:cd:e9:51:9f:ed:ca:95:3b:
69:c0:ca:41:c9:e2:5e:24:b1:40:e1:68:78:e7:ae:
95:a5:fe:2d:8a:33:3a:c0:b0:a8:34:a3:d2:2c:08:
e6:4d:33:7c:ff:c5:6a:92:ce:96:8d:57:6a:45:99:
f6:8f:2f:3e:66:bf:68:52:37:30:01:16:d8:e5:19:
76:ad:94:18:1c:4d:fa:5e:b0:98:dd:31:e8:af:67:
31:39:b2:e5:da:94:dc:b6:7c:5b:a7:9c:1e:56:d2:
2f:d3:76:ae:20:c7:c0:c6:de:c5:c9:84:64:54:68:
0c:98:fd:6f:01:02:12:8b:9c:ba:4b:09:67:32:89:
aa:1d:69:84:c8:c1:49:7a:0a:1e:b4:ea:55:26:28:
b0:dc:04:19:04:c4:6a:d5:02:9d:b0:7a:4f:38:84:
f0:6f:70:06:e3:22:6c:9f:69:92:d1:ed:39:48:58:
ee:b7:8f:3e:e7:d1:6d:92:32:99:1c:fb:f5:3e:c0:
9e:94:c0:d8:60:24:d9:9e:e0:f1:3a:d7:6e:90:6b:
cd:10:93:c1:54:60:86:d1:7b:4c:19:b8:7f:7c:e7:
e1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:60:25:50:9D:75:E6:ED:22:43:99:83:38:F5:E7:D2:9B:84:1B:9B
X509v3 Authority Key Identifier:
keyid:08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c2:b9:f7:24:e2:f6:72:86:61:bf:72:1b:f0:0e:38:51:4d:
cf:a4:c2:8d:d2:fc:97:70:59:69:95:20:d1:ef:18:c4:c1:93:
98:e0:be:3a:47:40:5a:c7:43:b5:d2:ee:d2:63:f2:9e:ec:e9:
96:46:20:38:1b:4a:b3:54:f7:25:df:a6:8b:ab:ac:9c:f7:e9:
29:ca:49:89:e9:07:54:06:a2:19:da:f3:e4:c0:d9:30:7f:57:
0c:bc:03:28:54:75:99:6b:b4:2c:62:43:93:c7:5a:0e:51:36:
f8:4c:03:b1:da:44:f6:94:54:9b:c1:b8:ee:70:fb:f0:40:8b:
2b:97:a9:11:7b:f8:44:6a:75:ea:69:2a:26:10:14:66:96:e2:
89:c6:e0:c2:e0:83:81:6a:ee:17:ab:29:b6:b2:42:69:4e:06:
a6:b0:85:0d:b2:d2:a0:54:1d:e2:b6:33:4f:1f:7c:2e:2f:fd:
7f:2c:f8:11:3b:44:ad:3d:b6:27:a9:7f:f3:ab:22:9a:fc:e5:
46:27:66:75:c0:1d:d1:9e:de:d8:10:0d:e2:83:1d:77:b4:a8:
0c:20:94:76:c3:09:29:42:84:a5:b0:f2:8d:f1:94:29:e6:2d:
bf:05:a6:6d:8c:26:ab:49:40:a3:2f:ef:a3:39:b5:68:76:9c:
8e:42:90:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:53:22 2025 by rpki-client