Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
File: _v9e0ddTW8-gPh8oisLHdWobEWA.mft (raw, json)
Hash identifier: /WenvRsdnh5oknI2sqht9OvcskkeSS6WPRjepZdtFTw=
Subject key identifier: 8B:60:BA:8D:CC:38:3A:05:B8:47:61:D6:45:86:3E:EB:7F:74:4A:71
Authority key identifier: FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60
Certificate issuer: /CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160
Certificate serial: 01976327B9D79ABA2873EB5E7BBB99B8F68A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
Manifest number: 3E
Signing time: Thu 12 Jun 2025 08:00:37 +0000
Manifest this update: Thu 12 Jun 2025 08:00:37 +0000
Manifest next update: Fri 13 Jun 2025 08:00:37 +0000
Files and hashes: 1: _v9e0ddTW8-gPh8oisLHdWobEWA.crl (hash: rHl7shdbeUzPLc3JwcU8uWSsFqOfOzHPiTIkvKrXnwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:27:b9:d7:9a:ba:28:73:eb:5e:7b:bb:99:b8:f6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160
Validity
Not Before: Jun 12 08:00:37 2025 GMT
Not After : Jun 13 08:00:37 2025 GMT
Subject: CN=8b60ba8dcc383a05b84761d645863eeb7f744a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:82:5f:3f:3c:7b:6c:52:f5:04:0b:2f:07:fd:
a0:34:be:ff:e4:b1:95:ea:e4:8f:96:af:33:ca:dc:
77:21:88:78:18:0f:c8:8b:b4:da:c2:24:d8:84:67:
a6:a8:e1:45:c8:97:36:8f:73:ce:c1:60:b8:83:35:
ae:19:0c:3d:cb:0d:e0:92:ad:ce:63:fa:98:28:69:
81:d2:ed:8b:1c:bf:96:85:e0:5e:b1:47:3d:ac:0b:
68:8a:fd:ac:13:ac:10:06:7f:e1:4d:c8:01:a8:6b:
a1:5d:91:f1:21:a3:f6:e3:fd:8c:5d:72:58:19:69:
e6:69:2a:40:63:a3:7f:f7:8c:e9:73:dd:23:36:21:
de:6b:eb:90:1b:9c:19:4f:cd:72:d8:01:d3:4d:2f:
3e:93:f9:34:51:35:19:4d:26:52:22:1b:79:93:4e:
5d:52:0f:51:84:c8:89:82:9b:bc:fb:61:3a:3f:5a:
54:7f:a5:45:d3:d4:6d:62:a0:ad:1d:42:20:75:5f:
b6:96:e1:2c:c3:e2:fa:c2:d0:95:02:d2:10:e5:c5:
29:14:a1:e3:66:53:01:e3:3f:b4:79:c7:91:fc:ad:
18:94:d6:4f:a3:7b:50:bc:bf:f3:7a:10:94:25:3a:
f3:e1:81:04:10:3e:42:7f:17:09:09:31:eb:e7:30:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:60:BA:8D:CC:38:3A:05:B8:47:61:D6:45:86:3E:EB:7F:74:4A:71
X509v3 Authority Key Identifier:
keyid:FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f7:20:10:45:e5:14:38:8e:f5:6e:cd:c6:13:8d:64:03:e7:
ec:21:a7:9f:0d:60:58:f7:18:ee:c0:53:c4:3a:a5:0b:58:b3:
58:37:56:26:ab:48:85:0d:65:e9:cb:d2:c5:d8:a1:47:69:11:
9c:44:e6:3a:e8:e4:df:a6:5a:a3:b9:22:39:1d:df:39:60:10:
35:46:08:57:14:37:40:1b:ab:84:4f:df:52:f0:bc:cc:b1:84:
c3:f8:c5:2d:64:d2:f5:3a:6d:72:0e:1c:56:fc:71:5d:99:f3:
e0:17:01:ca:36:0c:dd:80:a4:5c:1f:b8:57:bb:1e:1c:3a:d0:
a8:5e:da:d1:cd:6b:26:bb:44:db:97:8f:b1:f9:97:11:42:16:
c3:30:bb:72:0e:5e:f1:e0:ba:99:29:5e:8c:d4:3b:fc:01:ca:
af:de:e3:c9:e3:9e:62:e1:bb:24:38:cf:29:59:a7:1c:fe:7c:
8d:3b:0e:7c:8d:78:94:a3:3c:d3:0e:be:c8:4c:14:16:5f:90:
43:6f:15:fb:c4:38:9e:df:d1:d0:ab:95:3f:f1:11:c9:52:9b:
63:4c:5f:2e:94:b4:d7:1a:ac:5a:da:7d:57:f9:fb:5c:7e:30:
97:8a:b6:42:4f:f1:99:54:80:d8:92:3e:75:46:0b:cb:96:39:
a0:01:b9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:58:24 2025 by rpki-client