Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
File: l37KDVyVbeF79pcQRvLrlc5hXik.mft (raw, json)
Hash identifier: v/yiDLeDcEvttCgbtfah3tKPCZe431+Br05M8MPxEOE=
Subject key identifier: 6A:57:72:F8:8B:1B:9F:B1:56:71:42:60:25:19:17:EB:3F:F9:8D:EE
Authority key identifier: 97:7E:CA:0D:5C:95:6D:E1:7B:F6:97:10:46:F2:EB:95:CE:61:5E:29
Certificate issuer: /CN=977eca0d5c956de17bf6971046f2eb95ce615e29
Certificate serial: 019750461734B76C16085E05F81E49195360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l37KDVyVbeF79pcQRvLrlc5hXik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 16:01:00 +0000
Manifest this update: Sun 08 Jun 2025 16:01:00 +0000
Manifest next update: Mon 09 Jun 2025 16:01:00 +0000
Files and hashes: 1: l37KDVyVbeF79pcQRvLrlc5hXik.crl (hash: 7vrYOmL0CdDjrDj1EjIpBNbMLQmgZkEmD4MKg+In11g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
rsync://rpki.ripe.net/repository/DEFAULT/l37KDVyVbeF79pcQRvLrlc5hXik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:17:34:b7:6c:16:08:5e:05:f8:1e:49:19:53:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977eca0d5c956de17bf6971046f2eb95ce615e29
Validity
Not Before: Jun 8 16:01:00 2025 GMT
Not After : Jun 9 16:01:00 2025 GMT
Subject: CN=6a5772f88b1b9fb156714260251917eb3ff98dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0a:d4:61:f5:99:c2:7f:61:c1:82:ba:12:92:
41:5b:72:aa:4b:66:fd:cd:1c:ac:ff:8f:c7:34:7c:
b1:cb:7f:41:11:ce:4f:dc:4d:c0:26:68:81:ad:6c:
c8:33:a7:9e:9e:bf:9e:22:ce:fc:2c:56:e9:7e:f6:
0c:e1:dc:e2:c8:a5:1e:54:3e:09:9b:3a:7a:c0:34:
a2:47:69:00:1f:a8:45:7c:93:ac:6f:3e:93:09:3c:
01:ce:d8:c8:95:00:7f:9b:ff:99:22:5e:03:46:ca:
ed:f0:93:37:23:ad:02:93:03:07:b3:8a:da:ff:ac:
24:a0:16:70:05:6f:23:7b:92:c5:d6:d8:5a:f7:0f:
ac:8a:f1:c1:7f:8f:c4:7d:98:f8:40:82:34:24:5e:
8f:73:bf:7b:23:08:9f:ce:3c:86:f6:6d:3c:9c:bf:
5e:7b:3d:99:df:ff:97:6c:22:3b:6c:35:d0:11:74:
cb:02:c8:2e:05:c0:e9:de:9e:7b:53:fa:24:62:b4:
9b:3a:93:54:87:11:36:b0:71:a5:be:10:33:23:5c:
4e:9f:ec:75:b9:8d:db:c4:a4:5f:b9:3c:44:d8:42:
da:64:bc:ff:75:6a:fc:b7:f8:b8:8e:c0:fe:10:8e:
b8:08:3e:14:87:2b:a9:9b:93:b4:5d:37:9c:e2:64:
56:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:57:72:F8:8B:1B:9F:B1:56:71:42:60:25:19:17:EB:3F:F9:8D:EE
X509v3 Authority Key Identifier:
keyid:97:7E:CA:0D:5C:95:6D:E1:7B:F6:97:10:46:F2:EB:95:CE:61:5E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l37KDVyVbeF79pcQRvLrlc5hXik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9e:ea:31:fe:f1:14:10:43:1c:f5:fd:d0:36:8b:4c:99:b6:
43:1a:38:57:28:7a:a0:dd:39:fa:02:5c:0c:49:3b:71:7a:4c:
58:3d:25:c8:99:0b:15:74:45:b5:9d:a8:77:63:2a:86:09:f0:
43:0a:b7:65:38:0c:7a:9a:fa:b6:d2:4b:27:38:f0:a9:30:6c:
74:d1:1c:fe:3f:e0:79:89:f1:79:4c:a8:ef:93:94:e6:0e:74:
93:8d:22:d2:f3:89:61:0e:a2:7b:27:1a:4a:3e:00:bc:51:7b:
cd:b6:71:e7:2d:be:a2:ff:c6:35:55:8f:f4:94:e1:d0:0b:4b:
54:76:ca:e9:d8:cc:4d:f2:69:fd:11:a0:d3:9a:64:86:07:12:
23:bb:6f:4c:e6:ed:f7:1a:42:63:bc:c3:68:e8:02:d1:c1:9c:
d1:ef:5c:41:37:f3:81:43:28:45:ca:99:90:08:ac:07:4b:9f:
f0:a6:63:04:91:f0:40:cf:c5:d9:42:df:3b:e7:95:fa:5f:92:
e6:d9:e4:81:f9:4c:18:51:b9:74:6a:f8:37:71:ec:71:2e:3f:
62:f4:c7:f2:72:94:23:a1:eb:4f:71:0e:cd:2f:f6:07:22:1a:
f7:24:f2:50:ee:54:77:1f:75:9d:07:dd:03:ce:29:30:9d:3c:
41:4e:e4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:30:36 2025 by rpki-client