Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
File: SS0kreN6IjOTKECddX1H-XlDt6A.mft (raw, json)
Hash identifier: GYXUET5wljp8Z+fDEl8TvdB7etA4e1wRios6mnKxk18=
Subject key identifier: AB:7E:D6:A4:10:33:B6:63:E7:0A:D2:F3:EA:EE:F2:EB:9A:72:1E:69
Authority key identifier: 49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0
Certificate issuer: /CN=492d24ade37a22339328409d757d47f97943b7a0
Certificate serial: 01975121445ED85B88C1C7DEB750A216C832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
Manifest number: 0C7B
Signing time: Sun 08 Jun 2025 20:00:24 +0000
Manifest this update: Sun 08 Jun 2025 20:00:24 +0000
Manifest next update: Mon 09 Jun 2025 20:00:24 +0000
Files and hashes: 1: SS0kreN6IjOTKECddX1H-XlDt6A.crl (hash: EKyT1MJFzMktMPHq60YZB60Hg30QXb+Lnz3edQLZPxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:44:5e:d8:5b:88:c1:c7:de:b7:50:a2:16:c8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492d24ade37a22339328409d757d47f97943b7a0
Validity
Not Before: Jun 8 20:00:24 2025 GMT
Not After : Jun 9 20:00:24 2025 GMT
Subject: CN=ab7ed6a41033b663e70ad2f3eaeef2eb9a721e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a9:87:9f:9d:b8:38:2a:be:d3:da:cc:28:96:
07:33:84:8c:ec:ac:64:d3:2b:b8:cd:a8:6f:a2:78:
17:5b:4f:24:b1:7b:56:95:62:bc:d2:9a:37:c4:d8:
19:b1:31:c6:03:e5:de:e9:57:b9:99:6f:8f:5d:c5:
d2:16:2d:63:72:75:e1:8f:a2:29:89:6a:32:30:66:
cb:5a:38:6f:7b:ce:69:aa:91:7c:2d:87:7b:4f:6d:
1b:9b:58:e3:d3:53:10:1b:4b:ee:6a:f0:37:3d:78:
d1:99:f9:98:26:95:0d:1c:42:8c:ba:4d:2e:2b:ce:
6c:cb:13:ce:7e:e9:96:c5:29:3b:6c:b1:1c:c2:d8:
9e:f4:3f:c6:53:7e:d7:d0:f0:47:21:de:f0:4c:5c:
4f:b4:51:57:d4:7c:4c:f3:03:08:62:6b:a5:89:75:
e7:6b:86:15:9e:35:35:14:71:f6:f4:8c:3a:04:e4:
76:ad:3b:7b:e9:b3:cd:a8:11:f8:9a:44:03:db:d8:
7c:18:cd:a7:ca:e2:34:be:40:c5:a0:10:77:7e:44:
81:22:e3:af:fd:90:2a:37:77:4b:82:e4:1e:73:1d:
cf:1b:2f:76:ee:9a:a6:b8:c8:f0:7f:77:49:f0:03:
2a:8a:f6:40:2e:5a:e4:03:c4:37:9c:fc:02:b3:c7:
7e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7E:D6:A4:10:33:B6:63:E7:0A:D2:F3:EA:EE:F2:EB:9A:72:1E:69
X509v3 Authority Key Identifier:
keyid:49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b9:6f:4b:57:37:35:a7:31:7b:8b:be:52:31:87:c9:ea:8e:
4b:ac:a0:69:dc:45:30:d2:14:f4:d8:dc:fd:fe:05:45:8a:68:
ad:10:d9:54:d7:59:f8:b0:dc:7d:d7:e5:05:46:86:13:40:22:
d5:86:01:84:11:30:db:dc:54:c4:f4:fa:d4:52:a1:e3:ab:db:
7c:2b:29:f9:6d:72:c4:77:b2:6e:10:73:0e:a9:56:b1:95:30:
a6:98:e3:45:7c:cb:75:bc:ab:bf:2e:af:fb:cf:11:18:99:bd:
50:da:f2:41:c8:87:a5:ad:8c:9d:8d:41:8e:23:e6:53:77:f2:
5d:91:3c:2a:1e:ff:25:cf:67:c0:8d:44:9f:3b:33:78:9e:f9:
9d:c4:b8:47:e1:6f:62:00:6e:fb:1a:c9:6d:bf:1a:0c:f5:23:
be:4b:97:2b:c2:0b:de:ac:fc:e3:ab:2b:17:bc:5d:fd:3e:f3:
d6:58:0d:5e:81:d4:ff:19:8a:ed:6a:90:41:a7:60:f3:5b:9e:
e5:61:f3:88:df:77:99:ca:a5:69:28:be:92:f3:e1:7d:24:8f:
5f:53:31:9b:6c:41:de:07:90:4d:42:4e:ba:e9:f0:76:33:58:
85:7e:4e:95:49:ae:08:3a:9e:2e:7f:23:b1:8c:a5:5b:33:eb:
29:55:82:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:14:03 2025 by rpki-client