Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
File: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft (raw, json)
Hash identifier: 3hp++04izjxsCElP/e8FJUqyCE6lMF36+BF/hVKf9wI=
Subject key identifier: A6:5D:B7:8A:F0:06:B5:0E:E2:F3:6C:F6:63:04:75:85:F0:C8:3B:DC
Authority key identifier: 31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C
Certificate issuer: /CN=31f124bd8f14bb98a48849c5205837323bfcf84c
Certificate serial: 01974967D6F3C83044F7317F92DDA9C34ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
Manifest number: 039D
Signing time: Sat 07 Jun 2025 08:00:31 +0000
Manifest this update: Sat 07 Jun 2025 08:00:31 +0000
Manifest next update: Sun 08 Jun 2025 08:00:31 +0000
Files and hashes: 1: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl (hash: F7oEdoQKDuSLJFV+H/C0kGSvXs/8d1OIDEQ5etVBsxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:d6:f3:c8:30:44:f7:31:7f:92:dd:a9:c3:4e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f124bd8f14bb98a48849c5205837323bfcf84c
Validity
Not Before: Jun 7 08:00:31 2025 GMT
Not After : Jun 8 08:00:31 2025 GMT
Subject: CN=a65db78af006b50ee2f36cf663047585f0c83bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:3a:7e:df:b1:bd:51:41:9c:c3:ed:ba:05:
a6:5f:6b:cc:51:69:a9:c4:8d:f5:0d:2b:67:1d:ac:
94:2f:f3:6d:9d:17:5d:19:5a:eb:01:6d:56:41:15:
50:31:cb:0e:17:a8:d9:22:42:b5:c2:5a:ab:83:79:
b6:28:61:86:3e:11:a3:ab:ba:e0:8c:1a:1e:f4:77:
b9:95:9c:81:59:7f:de:d5:43:ee:2c:71:6f:a6:ec:
43:87:ab:b9:bd:6c:39:1c:e4:6e:4b:0b:cd:33:15:
7b:cb:90:b3:c2:65:78:b6:0a:52:b4:70:16:62:2b:
3c:71:a1:06:22:c9:b9:b5:47:e7:e5:92:92:fe:44:
56:0f:fb:58:87:57:6f:63:5e:d1:da:fb:9c:44:38:
43:6b:b1:df:85:88:9c:ab:5f:74:d9:08:73:44:2e:
7b:99:a9:dd:dd:94:0d:fe:17:ce:71:32:a8:2b:4d:
ec:8e:de:57:dc:f2:c4:99:54:45:aa:b2:d1:af:58:
4d:87:36:05:61:80:55:4c:1c:9a:93:3f:75:5e:e5:
d2:d0:07:25:24:73:6e:9e:d6:4f:7b:17:d7:3a:ba:
f1:bb:93:75:98:65:38:98:35:37:82:ea:d6:76:be:
f8:65:43:0b:99:81:64:9b:32:93:96:94:07:75:35:
bd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5D:B7:8A:F0:06:B5:0E:E2:F3:6C:F6:63:04:75:85:F0:C8:3B:DC
X509v3 Authority Key Identifier:
keyid:31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:08:80:17:3c:f3:06:f9:0d:39:bf:7e:44:b1:44:44:a2:b7:
59:87:fb:4d:fb:1d:ee:2b:f6:32:32:9a:6a:97:97:e9:d9:85:
a9:9d:43:c6:4e:fe:24:69:a3:db:c0:6c:bc:86:30:85:19:20:
d8:f8:44:b1:1b:a8:aa:fa:40:13:45:80:e6:7a:89:0c:b5:46:
99:d7:65:82:66:15:31:ac:7a:62:1c:d3:68:0f:24:e7:be:fb:
ed:53:88:78:5b:b2:10:1e:a7:5d:83:b6:8e:78:ee:29:21:3f:
2e:f4:0c:bd:3e:5c:c9:3c:03:93:ae:4d:05:94:fc:93:37:6c:
d8:01:fe:ab:af:c3:a5:e6:6e:9f:1a:43:d3:b9:a5:ca:17:0c:
6a:57:b9:1b:ad:c7:cf:a0:58:93:e0:54:00:b7:50:79:ac:2f:
66:94:c3:36:97:ba:2b:80:3d:50:88:60:b7:0b:68:8e:d5:e8:
16:2c:cc:b2:e3:5e:ef:a9:aa:93:30:7e:90:1d:a2:97:b4:d2:
20:66:fa:d4:75:89:ea:07:8b:ef:4d:22:11:6a:61:92:95:67:
dd:01:78:d6:ba:60:df:ad:41:c5:f9:0b:cc:af:5a:eb:7c:6b:
67:a2:ac:b7:64:89:15:d2:27:70:be:ee:8e:fe:f3:64:84:ec:
e6:d9:01:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:34:06 2025 by rpki-client