Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
File: ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft (raw, json)
Hash identifier: LjncZaUAy99ENfFBkYh1RiFaCmb/Qn6OBW3/3Q75m0g=
Subject key identifier: 40:A6:C6:72:7B:E3:19:CD:DD:50:A5:D1:E8:9E:85:C8:E4:09:C7:FA
Authority key identifier: 7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6
Certificate issuer: /CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
Certificate serial: 01974E57F37F2DE63512BEF23DAD016E29B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
Manifest number: 0D0C
Signing time: Sun 08 Jun 2025 07:01:16 +0000
Manifest this update: Sun 08 Jun 2025 07:01:16 +0000
Manifest next update: Mon 09 Jun 2025 07:01:16 +0000
Files and hashes: 1: ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl (hash: bbYvkBJikvZkW8rRFhONOh0AARyYWyhhT9+NGwBCQ3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:f3:7f:2d:e6:35:12:be:f2:3d:ad:01:6e:29:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
Validity
Not Before: Jun 8 07:01:16 2025 GMT
Not After : Jun 9 07:01:16 2025 GMT
Subject: CN=40a6c6727be319cddd50a5d1e89e85c8e409c7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ae:eb:d2:70:30:a6:86:65:e7:da:11:e3:fb:
73:e0:1a:db:5f:23:a6:f6:61:56:60:ec:5e:f7:e6:
08:76:61:1e:13:5f:78:76:cd:a8:a9:b5:ae:12:0a:
1e:f8:bd:cd:90:d6:3e:fa:c7:d5:21:15:4e:e8:98:
72:1f:f4:ed:e8:91:b2:15:8b:a8:e5:64:44:01:a8:
44:88:da:96:45:23:54:9f:58:75:ce:3a:88:8a:f4:
a0:89:3a:6e:54:3a:b0:81:a8:da:97:f8:28:e2:2a:
ed:45:fe:e4:e0:05:f8:46:9f:fe:fb:b5:55:5c:32:
f2:73:5a:c2:3c:44:2b:d8:d7:b4:89:24:43:23:94:
fd:c8:8b:e4:40:10:89:33:7a:41:ba:3e:1f:b6:59:
fb:a9:f1:60:d5:dc:e2:b4:35:70:3f:66:85:56:a2:
f1:85:cb:ac:a9:b9:3e:73:b4:02:39:57:e8:55:61:
82:f1:74:89:63:e6:34:34:dd:9f:40:40:3b:f6:d6:
3a:83:ac:93:7b:95:c0:2e:72:cf:63:8b:ba:a6:a3:
5e:a1:6d:59:0f:16:1e:6e:b0:04:33:cf:12:ff:2d:
f5:8e:e6:f4:fb:86:5f:81:8f:41:7b:1d:b0:09:bd:
2d:4e:9b:36:0a:e3:63:50:46:65:60:47:84:a1:e3:
f9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A6:C6:72:7B:E3:19:CD:DD:50:A5:D1:E8:9E:85:C8:E4:09:C7:FA
X509v3 Authority Key Identifier:
keyid:7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c9:ac:a9:64:bf:6d:d5:06:0a:3e:3e:4c:71:e2:a8:22:95:
2c:c0:f2:84:22:2a:81:07:cc:e7:1d:47:9a:71:f3:cb:db:91:
fa:a2:f4:29:06:f8:ae:18:6c:80:cd:09:24:05:c2:fc:ae:5e:
35:db:a3:c1:a5:31:ac:20:10:27:2a:57:e8:b1:e6:b4:44:cc:
47:bd:d1:37:6a:8a:49:20:27:b3:4e:54:5c:b2:d5:73:b8:67:
f0:29:78:c3:cf:b3:a1:71:35:73:a5:2f:45:ca:82:b0:ae:07:
e7:45:de:e6:ce:50:f3:c3:45:72:59:ed:00:08:06:80:ac:8e:
13:fe:0d:8c:8b:9e:5e:23:30:27:59:7a:6f:49:4d:f2:ad:c0:
4e:41:e5:3e:cf:ad:ae:04:c8:5d:eb:4b:d4:31:e7:50:ee:93:
ad:f0:38:f9:20:0c:83:49:d8:a8:fe:02:1a:23:17:29:9a:21:
af:67:79:dd:fa:24:b8:4a:b9:d0:0f:8a:72:d2:85:cd:01:7b:
06:8a:bf:83:ae:c7:4f:be:40:7d:0f:a1:dc:73:35:45:2c:7e:
8e:c0:da:ee:6e:96:33:e5:dd:09:78:62:97:ac:bb:9f:99:55:
40:a6:ee:bd:7a:4a:83:68:c9:f2:21:e3:84:65:24:6b:fc:da:
e2:c3:2b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:30:03 2025 by rpki-client