Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
File: X78QDyDnniuCeH_mRaU_TChkKvY.mft (raw, json)
Hash identifier: t1TFXcf9/Dk3Yx2VgpdZaE7rNsqRPVeKUH4cA6Zcebc=
Subject key identifier: 78:DC:F5:51:CF:1D:EB:91:F2:6F:C5:E8:F4:45:D1:D9:FF:29:E7:20
Authority key identifier: 5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6
Certificate issuer: /CN=5fbf100f20e79e2b82787fe645a53f4c28642af6
Certificate serial: 01974B566EDDFAC6861F30B6E9FD60283BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 17:00:45 +0000
Manifest this update: Sat 07 Jun 2025 17:00:45 +0000
Manifest next update: Sun 08 Jun 2025 17:00:45 +0000
Files and hashes: 1: X78QDyDnniuCeH_mRaU_TChkKvY.crl (hash: VpG9TJmWFFfUK33RmA1egUQ3ydVWyKfX/JXsruMJ6e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:6e:dd:fa:c6:86:1f:30:b6:e9:fd:60:28:3b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbf100f20e79e2b82787fe645a53f4c28642af6
Validity
Not Before: Jun 7 17:00:45 2025 GMT
Not After : Jun 8 17:00:45 2025 GMT
Subject: CN=78dcf551cf1deb91f26fc5e8f445d1d9ff29e720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:81:86:03:92:c3:90:aa:bd:9c:00:d7:ca:bf:
c8:27:04:ce:ad:b1:b8:3d:47:04:51:a1:76:99:1d:
1b:91:6f:7f:15:4d:46:f2:78:59:19:1d:5d:8a:07:
6c:a4:c7:be:5c:90:56:a2:79:2a:38:27:27:55:ea:
05:14:ef:00:90:da:d0:2d:d8:4a:27:36:2f:0c:9a:
ff:d4:43:a3:37:ff:60:86:e8:24:65:eb:cd:0c:af:
47:65:7d:0e:91:83:82:0d:89:aa:2a:24:43:c2:8e:
ff:08:f9:09:48:3b:79:f9:01:b9:0e:0a:fa:cc:50:
9f:cf:02:41:f7:f1:48:ae:27:f7:f2:08:0b:e9:1a:
79:00:7b:8e:16:7a:ee:89:2e:c0:33:58:ef:e6:71:
32:4f:f2:22:87:64:c9:02:40:6a:95:37:22:f8:bc:
7d:ee:fb:01:02:7b:ca:2c:60:fb:6c:7e:8e:31:bc:
a0:82:4f:0b:67:40:ac:0b:d2:b2:35:78:79:df:79:
a6:34:bb:f2:30:33:b5:ec:2a:e8:3c:55:7d:45:db:
c3:78:b7:bf:60:c2:07:ed:3c:50:93:81:f4:6c:ab:
95:d2:17:a4:c1:73:19:61:c8:d2:b9:35:cf:d5:10:
8c:3a:ab:3a:c5:78:f8:4c:b4:c5:6d:77:db:30:a7:
2e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DC:F5:51:CF:1D:EB:91:F2:6F:C5:E8:F4:45:D1:D9:FF:29:E7:20
X509v3 Authority Key Identifier:
keyid:5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:71:2c:07:f0:40:ba:14:c4:0a:80:2b:9a:96:eb:24:9d:3d:
80:43:4b:d9:64:c4:64:ad:d2:fa:7a:50:9a:fc:75:78:66:19:
89:c7:64:07:8c:72:08:e4:62:58:77:1d:0d:98:91:73:b8:ca:
3b:06:f9:14:de:0e:2e:04:ea:20:af:42:c3:13:7f:20:3d:11:
cb:9b:0a:11:f5:1f:d4:9b:19:9a:db:6a:1e:cd:c5:1c:c5:57:
1e:a3:0c:eb:b1:0e:7d:a6:80:25:ba:38:65:2f:44:f4:b8:81:
8b:a8:b1:cd:2f:a8:17:4c:aa:40:89:69:39:ba:ae:e1:23:b1:
39:1a:f6:13:88:e9:09:55:33:6e:ab:d5:69:29:80:76:06:6d:
79:ed:95:30:c8:7a:fe:a4:07:b9:05:44:0c:aa:57:7c:82:02:
cb:51:b3:97:4d:c0:ce:23:43:46:08:f1:7a:b8:05:1a:b0:9f:
c5:a9:63:04:c0:4f:5f:23:d4:30:a2:15:35:af:35:d8:bf:c6:
fc:49:34:6c:66:06:bb:2e:a8:c0:4f:78:38:56:2a:30:ad:ce:
2d:14:d6:94:92:f9:41:94:35:bc:a4:ee:1b:76:66:e8:30:e6:
7b:1f:1d:13:89:5d:ff:2b:ad:03:b6:62:a6:b5:7e:f3:f9:e1:
45:4f:41:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:28:55 2025 by rpki-client