Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
File: B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft (raw, json)
Hash identifier: b1fLDSvPP+FNidmfaArF72PoxOUoYEElx0syMntGCkU=
Subject key identifier: 56:27:35:A5:E2:05:F8:45:D8:CA:56:DA:97:AD:07:52:28:C4:20:CC
Authority key identifier: 07:D4:7B:21:CC:3B:A2:9C:C8:F8:A9:35:4F:33:7F:2D:5C:30:21:54
Certificate issuer: /CN=07d47b21cc3ba29cc8f8a9354f337f2d5c302154
Certificate serial: 019762832A3AC2EE99397B839EF309453319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
Manifest number: 1587
Signing time: Thu 12 Jun 2025 05:00:52 +0000
Manifest this update: Thu 12 Jun 2025 05:00:52 +0000
Manifest next update: Fri 13 Jun 2025 05:00:52 +0000
Files and hashes: 1: B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl (hash: 4Ze8JJSzs8S4RYklEMa4WDzNXZt0Z9DzreXLTocC554=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:83:2a:3a:c2:ee:99:39:7b:83:9e:f3:09:45:33:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d47b21cc3ba29cc8f8a9354f337f2d5c302154
Validity
Not Before: Jun 12 05:00:52 2025 GMT
Not After : Jun 13 05:00:52 2025 GMT
Subject: CN=562735a5e205f845d8ca56da97ad075228c420cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:18:b2:35:f1:28:9e:74:df:81:74:d4:f2:
70:04:ee:b9:27:ab:a8:bc:21:9c:30:e4:5a:d0:6f:
20:37:04:e6:eb:82:2f:51:cf:93:52:52:d5:76:ec:
4e:4c:bd:d9:25:18:9e:f5:70:72:17:19:f6:66:c7:
37:a9:bb:bb:49:f8:39:21:d7:48:d5:04:12:68:43:
19:f7:c7:b0:58:61:e5:76:3e:7e:30:60:75:44:57:
0c:96:bf:e4:3a:fb:99:2c:0f:12:40:ed:c5:12:31:
54:a4:19:dc:b1:e8:d1:1b:8a:fe:66:91:61:2f:23:
ac:93:3d:2f:88:0d:12:9c:89:5e:ce:84:9a:c0:37:
c2:1d:bc:8a:f4:e0:d6:9c:eb:44:0e:fc:b4:8f:34:
83:78:6d:a7:bf:6f:66:4f:d5:48:6d:a2:32:ac:27:
5c:d8:00:da:f0:9a:a4:97:66:ed:e8:4a:cf:9c:07:
73:a9:10:17:6c:ce:63:9c:26:45:29:27:c2:cd:1a:
80:bc:7b:5d:46:df:7c:73:91:7e:18:1d:e9:4c:e4:
f7:9e:cf:72:61:fb:e0:e9:7d:da:2c:db:a4:7e:d3:
83:27:5f:c4:ef:1e:ed:4f:83:69:4d:6f:d6:29:6e:
53:2f:65:0b:65:be:1a:41:6a:62:c6:99:51:e0:3a:
20:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:27:35:A5:E2:05:F8:45:D8:CA:56:DA:97:AD:07:52:28:C4:20:CC
X509v3 Authority Key Identifier:
keyid:07:D4:7B:21:CC:3B:A2:9C:C8:F8:A9:35:4F:33:7F:2D:5C:30:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3d:89:75:5e:fa:05:24:8a:59:3d:e5:9d:3f:c3:2c:91:d1:
ce:0d:aa:f7:e9:b3:61:59:ea:34:e0:f3:4c:6f:6e:7a:02:39:
4c:51:8f:29:1f:5f:e5:cf:37:6c:37:59:ad:72:5a:23:10:08:
55:f0:51:7f:7a:7c:ea:c3:21:7a:85:9f:63:74:ca:a4:55:ed:
69:6d:86:42:09:61:d6:0a:2f:bc:6a:88:f8:14:d8:81:04:0a:
fa:ff:95:3b:1b:fb:9a:32:8f:22:d7:9d:79:4a:33:af:6e:46:
94:d0:25:66:7e:cd:69:0d:60:d4:39:e7:ca:dd:fb:89:2b:38:
8b:b6:21:72:65:fb:eb:0a:ce:99:10:d2:d9:bd:b1:50:1c:9f:
88:44:67:0e:10:d5:3d:a5:37:ba:64:b8:c3:28:63:a4:dd:4f:
38:58:a9:03:34:5f:9d:a2:70:0a:1d:b0:90:c9:19:3d:f8:1b:
28:68:12:05:b4:1e:78:ef:ce:6e:b3:a7:a4:cf:b0:69:95:31:
7f:e8:0c:bb:d6:2e:4b:f4:f0:35:cf:70:e5:b3:93:2f:95:f0:
91:4b:14:27:a7:8a:84:f6:a7:5a:70:50:f2:1a:58:8a:7d:59:
cd:ab:b0:15:92:86:ff:fe:a6:01:5e:cc:1b:ee:fa:d8:5a:38:
62:5c:cb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:48:58 2025 by rpki-client