
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft
File: INShQtHjFwTrW88Dp4X2N4NVt5k.mft (raw, json)
Hash identifier: vs2waoX0W0dawc1oCMjeuOtvsd7TlTIr2jHpXFqAfpM=
Subject key identifier: D3:E6:7C:C5:34:85:96:67:70:9A:11:F3:B8:E7:9A:EA:BC:7C:FB:FB
Authority key identifier: 20:D4:A1:42:D1:E3:17:04:EB:5B:CF:03:A7:85:F6:37:83:55:B7:99
Certificate issuer: /CN=20d4a142d1e31704eb5bcf03a785f6378355b799
Certificate serial: 0197470B660A76404B539530F8F59D8E7D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INShQtHjFwTrW88Dp4X2N4NVt5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft
Manifest number: 059F
Signing time: Fri 06 Jun 2025 21:00:18 +0000
Manifest this update: Fri 06 Jun 2025 21:00:18 +0000
Manifest next update: Sat 07 Jun 2025 21:00:18 +0000
Files and hashes: 1: INShQtHjFwTrW88Dp4X2N4NVt5k.crl (hash: 4iQe8l0xz29phj42WKW5sY+9w7+zh8W67TLFRMGZe1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/INShQtHjFwTrW88Dp4X2N4NVt5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:66:0a:76:40:4b:53:95:30:f8:f5:9d:8e:7d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d4a142d1e31704eb5bcf03a785f6378355b799
Validity
Not Before: Jun 6 21:00:18 2025 GMT
Not After : Jun 7 21:00:18 2025 GMT
Subject: CN=d3e67cc534859667709a11f3b8e79aeabc7cfbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:1c:34:93:38:78:d5:0d:ef:cf:24:6b:4a:
03:37:7e:38:b0:c9:4f:67:55:77:16:62:d0:3d:21:
f0:36:fc:e4:e7:72:ca:1c:e8:0a:01:2f:99:74:51:
6a:ad:08:01:a5:1b:62:60:bd:75:27:b1:30:5d:ec:
49:65:26:3b:92:0a:a4:b4:18:96:48:9f:e0:a9:09:
e3:44:48:61:0d:7b:4c:94:55:97:d9:c5:7e:9c:a8:
ad:a7:6c:ac:7d:18:83:83:9f:3f:f6:37:41:25:99:
cf:ac:84:1b:ad:89:29:43:1c:75:c0:00:af:df:d3:
62:9b:e8:fd:2d:4d:81:e5:20:ab:61:ce:87:7e:a0:
da:40:56:8a:d9:af:75:d4:a1:4a:4c:61:fe:46:d8:
53:a1:11:a5:86:a5:50:c4:c9:c2:53:a2:65:a9:fe:
df:6c:1e:82:68:ea:20:54:40:09:72:34:9f:3b:87:
1d:48:33:41:6c:fb:80:11:b9:61:17:03:ef:49:40:
7d:0b:2e:94:e1:c4:34:2d:0a:00:04:d3:c9:fe:f1:
b1:2f:19:42:e4:10:cb:f5:ad:02:72:69:88:af:17:
f5:87:73:5f:0f:46:ff:ec:97:a0:90:36:e4:41:08:
de:6a:5e:4d:a8:65:a3:99:50:c4:2c:ee:40:a3:da:
9d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E6:7C:C5:34:85:96:67:70:9A:11:F3:B8:E7:9A:EA:BC:7C:FB:FB
X509v3 Authority Key Identifier:
keyid:20:D4:A1:42:D1:E3:17:04:EB:5B:CF:03:A7:85:F6:37:83:55:B7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INShQtHjFwTrW88Dp4X2N4NVt5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ea:9f:0d:d1:88:a7:d4:29:3b:db:d6:b0:e4:0b:26:16:e8:
0b:c7:34:bf:a2:df:45:79:05:54:59:04:27:7c:8f:d0:35:bf:
8a:ed:4f:a2:07:3a:7f:82:e3:01:b7:33:23:72:3a:33:68:0e:
85:ef:df:98:ef:87:60:81:e5:83:8a:e9:58:a7:b1:3a:72:44:
93:d0:ad:b8:a5:67:7c:86:45:c5:de:61:7b:ef:ce:7e:3e:a6:
cb:93:92:1d:39:33:ac:ad:d2:c2:ad:60:04:8e:4d:d8:1b:16:
30:c9:37:5a:e6:b0:a9:80:75:64:8f:3a:f2:27:3a:77:eb:2d:
44:4b:f4:65:fd:eb:23:c3:21:c9:3c:f4:1c:e2:af:c4:5b:15:
b3:42:f3:86:19:41:03:d1:7e:9d:02:e4:1e:06:4f:a9:55:6e:
b9:4f:9d:3d:bc:5d:cc:21:b7:be:74:b2:e2:a1:ef:d9:ff:6c:
5f:e2:fb:b1:fe:0b:42:8c:36:5e:73:13:16:e5:e7:0d:44:01:
3e:35:e9:fe:27:d3:b4:2a:90:50:07:bc:d7:28:c0:1c:ca:3a:
cc:33:e2:ba:b3:bd:5a:a1:27:9b:c0:84:56:ed:f5:07:c9:25:
d6:d1:bd:29:4a:60:5b:61:ce:95:50:5e:4b:a4:d4:1f:91:5d:
f3:ee:76:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:35 2025 by rpki-client