Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
File: sSZ6Uay2bymRvqUkP-OIBolxofE.mft (raw, json)
Hash identifier: iQZJpvE64XkIZim0mxsxwhwbW557+BOwS9h8K/gScds=
Subject key identifier: 45:BB:1A:13:2D:4D:5D:38:01:17:2A:C7:92:86:F1:81:A0:C5:6A:88
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial: 01984B546DF7544C22ADFCB6425EDF9FA80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 10:01:21 +0000
Manifest this update: Sun 27 Jul 2025 10:01:21 +0000
Manifest next update: Mon 28 Jul 2025 10:01:21 +0000
Files and hashes: 1: sSZ6Uay2bymRvqUkP-OIBolxofE.crl (hash: caHJkqiO2zie/BeKtQZ5oP2B8wlZBQvKWw6+4IYB3iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:6d:f7:54:4c:22:ad:fc:b6:42:5e:df:9f:a8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
Validity
Not Before: Jul 27 10:01:21 2025 GMT
Not After : Jul 28 10:01:21 2025 GMT
Subject: CN=45bb1a132d4d5d3801172ac79286f181a0c56a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8b:77:20:5b:97:b7:77:0f:dd:b3:2b:64:ab:
db:f5:3c:be:74:08:8e:09:c6:a9:cb:69:de:65:cd:
41:d4:14:52:1b:38:e2:b4:94:20:e2:71:ae:a9:b2:
c7:a1:09:23:fd:71:08:3f:e0:35:91:7e:21:c6:d9:
2c:94:17:ff:ea:50:26:fe:ef:39:34:f1:a9:66:c0:
b2:08:88:da:e1:5c:63:98:6e:cf:4b:b3:b9:94:3a:
10:15:2f:22:e0:49:70:f5:78:a6:da:f0:58:a1:05:
ac:5e:6b:31:4d:7d:59:f5:19:44:db:a0:0c:da:fd:
7c:2c:3e:0e:b0:da:c5:20:41:57:d5:9b:2b:af:06:
f4:99:51:8c:ed:e0:d2:90:00:09:2e:11:9a:9e:8b:
20:e4:03:ed:b5:be:1f:de:ec:31:12:31:af:36:72:
a6:ee:2e:0f:72:13:55:ac:b2:0d:d4:23:08:67:9f:
bb:85:35:82:91:00:54:dc:d5:36:12:47:cd:6f:d3:
56:91:a2:4a:a1:b6:13:29:dc:59:d3:e9:b1:0a:a9:
8d:85:2c:2c:b7:d9:08:24:11:fc:6c:f3:d2:91:4c:
5c:a6:2c:81:3d:af:97:1a:16:d9:97:91:59:04:16:
99:1c:a1:93:22:1b:2c:7f:59:0a:13:ac:3e:ed:8e:
08:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BB:1A:13:2D:4D:5D:38:01:17:2A:C7:92:86:F1:81:A0:C5:6A:88
X509v3 Authority Key Identifier:
keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:ce:6f:2d:00:85:a1:5e:88:35:2e:a9:5e:5d:42:71:5d:0d:
ec:0c:a0:c5:53:f0:50:bc:80:38:73:fc:4e:e1:ad:43:49:7d:
5a:82:ed:68:8c:92:4f:d7:aa:55:0d:3e:fa:67:e4:25:93:a6:
5b:45:f6:3d:1a:f2:97:28:82:d0:8c:68:d3:43:d5:59:ad:6b:
60:d9:57:c5:e5:45:bb:4b:b4:59:39:c6:f5:1b:c8:bd:d6:8b:
cb:63:aa:61:8a:53:89:56:d2:7e:00:f7:b2:8e:03:b0:09:d8:
0e:41:3b:76:14:d7:08:7e:87:34:99:87:6b:bd:7b:80:4e:52:
40:90:d2:42:37:a1:cf:b6:f9:d8:70:29:86:24:e2:0b:4f:73:
b0:f8:47:f7:9c:54:3b:dc:f7:72:1b:73:37:e7:a7:61:32:d9:
42:13:1f:5c:c5:22:31:da:53:3c:27:4a:3e:c3:23:ea:5a:79:
06:28:6f:1b:43:f5:2a:a1:12:c9:7c:bf:45:05:40:21:79:fe:
0d:71:0c:83:fb:3c:cb:9d:88:19:77:de:47:15:6d:4f:a0:46:
02:18:83:6a:f9:f9:f7:f9:b6:41:df:0b:2c:38:7c:0d:7b:5b:
67:04:85:6d:ec:de:5b:cf:37:5b:42:f4:64:65:45:f4:cf:ad:
d9:67:7c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:19:07 2025 by rpki-client