Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
File: sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft (raw, json)
Hash identifier: T/U3QonPDUHsLzf32a8Xj/RStfF7RGq+VXpAzqFn9rE=
Subject key identifier: ED:1E:54:54:A7:5A:18:06:71:67:60:45:3B:29:F6:E7:C8:41:A0:80
Authority key identifier: B0:7F:DF:43:7C:6F:5B:C7:3C:7D:CD:55:CE:58:CD:92:E4:9D:60:2E
Certificate issuer: /CN=b07fdf437c6f5bc73c7dcd55ce58cd92e49d602e
Certificate serial: 01974AB1C1E2EA8E24202CB607C288E96AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 14:00:52 +0000
Manifest this update: Sat 07 Jun 2025 14:00:52 +0000
Manifest next update: Sun 08 Jun 2025 14:00:52 +0000
Files and hashes: 1: sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl (hash: Oc3K6JinJCvZ0qmn4AvnlC1kY9Wz4kqEMVj3RurWFfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:c1:e2:ea:8e:24:20:2c:b6:07:c2:88:e9:6a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07fdf437c6f5bc73c7dcd55ce58cd92e49d602e
Validity
Not Before: Jun 7 14:00:52 2025 GMT
Not After : Jun 8 14:00:52 2025 GMT
Subject: CN=ed1e5454a75a1806716760453b29f6e7c841a080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:d9:65:a9:82:ca:e0:4c:a2:a4:c8:b9:8b:
df:1d:cd:f3:4d:c9:50:2c:31:0d:b1:44:8b:ab:ab:
38:ca:ab:82:93:0a:6c:aa:61:27:72:53:5f:7a:62:
e2:89:a9:52:ea:33:b0:89:33:2f:f2:73:0f:82:ca:
de:ec:5a:09:23:13:13:04:ac:da:48:1e:8f:f7:61:
83:3b:e2:8e:80:bc:d9:22:a8:ac:8b:48:92:9e:40:
6e:fd:c1:e6:4c:40:c1:ce:f0:e9:71:32:1a:66:68:
0a:48:8a:04:a2:13:80:e1:80:4b:31:7a:c5:84:af:
f2:5b:4c:6b:69:ee:d9:b7:bb:38:e2:82:52:61:ae:
2c:90:11:54:d4:0c:91:04:4a:b7:f2:08:fe:1c:a6:
ee:13:a8:d6:8b:1b:4e:ce:1e:3e:08:cb:c7:3f:7c:
e1:52:21:9a:ec:84:97:df:5a:79:4e:7a:1a:47:cb:
73:85:4f:13:1a:0c:33:56:08:e4:49:c4:f2:00:19:
b1:ff:ef:9f:a0:7e:c1:a3:10:d0:cc:11:19:de:5a:
28:96:9a:60:c0:59:d3:68:6e:34:4f:b7:d8:a5:8e:
84:48:e9:79:03:d1:cb:44:ad:5a:ab:ab:96:0a:aa:
d3:44:27:db:89:cc:ca:9b:eb:6b:c7:ad:85:69:ee:
d3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1E:54:54:A7:5A:18:06:71:67:60:45:3B:29:F6:E7:C8:41:A0:80
X509v3 Authority Key Identifier:
keyid:B0:7F:DF:43:7C:6F:5B:C7:3C:7D:CD:55:CE:58:CD:92:E4:9D:60:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a9:56:c5:9a:51:04:bb:aa:dd:46:b6:a9:85:44:5b:35:58:
0d:f4:a2:30:00:2b:b3:00:e0:8b:d8:3b:aa:de:00:8a:b0:1a:
71:58:87:b0:0e:45:71:a8:81:98:ef:91:21:aa:86:2e:eb:93:
9b:bb:d3:4d:c7:95:48:f6:10:ae:22:16:5c:0e:35:b2:81:01:
c2:9c:6c:29:74:78:a1:5e:4f:64:9f:a0:2f:27:98:95:b4:9f:
ab:b4:52:b6:de:93:b4:84:c2:0a:e8:12:15:0d:5c:34:25:a8:
25:f2:c6:8f:2f:24:c1:9f:7e:7a:1d:b6:83:c0:ef:bc:35:07:
23:85:7a:54:fe:e0:ea:60:32:5f:17:af:e0:8e:72:1a:ee:9a:
6d:cd:fc:e8:96:0d:a5:d4:d0:f4:6b:78:bc:ea:47:03:9b:19:
f7:aa:0b:ff:cc:e0:d9:7c:b3:c9:5f:f0:3d:16:4a:09:6e:3a:
7d:dd:97:7a:ca:70:07:85:06:6a:05:20:c4:2a:5c:bc:4d:81:
7b:52:02:71:e7:4d:28:d7:7d:74:fd:d8:3c:c0:50:39:df:9e:
76:e6:66:84:ac:ec:fa:88:7e:73:80:6f:46:aa:e5:c6:e0:6e:
ef:c1:cb:53:de:3f:49:39:15:6d:e6:71:61:56:6d:0f:47:09:
bf:0d:62:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:05:50 2025 by rpki-client