Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
File: V1qbLylkIBK0cD0kDrweyD5H030.mft (raw, json)
Hash identifier: KwMVygCNUoDYhTLRilEZVn/iUaG0tJVSelwlDjbBuLw=
Subject key identifier: 73:CD:06:7A:F8:39:C2:51:1A:A9:3A:D1:8D:07:96:4F:6B:EE:04:E7
Authority key identifier: 57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
Certificate issuer: /CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Certificate serial: 01974A7B2107907711CED7899B6F19BDE7C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 13:01:12 +0000
Manifest this update: Sat 07 Jun 2025 13:01:12 +0000
Manifest next update: Sun 08 Jun 2025 13:01:12 +0000
Files and hashes: 1: V1qbLylkIBK0cD0kDrweyD5H030.crl (hash: IDXUx9zzbY9gcOtJ2pWDB9UqaWTFx3tVVE4V9uUyFgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:21:07:90:77:11:ce:d7:89:9b:6f:19:bd:e7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Validity
Not Before: Jun 7 13:01:12 2025 GMT
Not After : Jun 8 13:01:12 2025 GMT
Subject: CN=73cd067af839c2511aa93ad18d07964f6bee04e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:37:cd:a0:62:8d:b3:be:c1:ef:bf:c0:02:
19:51:76:6c:c4:4d:1f:e9:ac:04:c6:fb:8a:3a:c5:
df:32:8a:a7:fd:2b:02:1b:78:b6:28:22:f9:01:52:
34:1f:bc:ed:bd:79:0b:95:ee:be:70:c4:a7:fe:96:
18:d9:d5:90:d1:cb:3a:f1:45:63:cb:82:93:3e:8c:
cf:21:36:e5:c3:b7:37:8b:07:15:5e:d8:57:02:95:
2d:bb:8a:6e:99:c9:68:16:ce:4e:4a:03:2b:f9:c0:
ce:df:49:22:c2:86:6b:d4:ab:8b:5e:85:08:3d:ed:
bb:6e:3e:58:73:93:31:3d:4d:00:79:ae:f1:13:09:
63:18:61:83:67:ec:da:a2:bf:8a:2b:5e:42:b7:08:
1d:4f:c5:c9:8d:11:eb:d1:e7:5e:16:55:18:24:0d:
06:f4:fd:91:3e:59:02:81:39:e2:5c:60:80:72:42:
78:27:f2:ce:b6:ae:41:85:48:24:25:ef:1f:ac:b9:
8f:69:72:da:10:2e:d4:44:44:9a:8a:db:f9:64:ec:
14:05:6f:e4:7b:ae:f6:b9:c5:5d:f4:2d:36:50:91:
32:f5:21:9a:93:f2:87:d6:c4:67:42:17:b9:0f:79:
47:bb:82:53:72:6a:19:12:1f:d8:80:0d:70:b6:22:
02:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CD:06:7A:F8:39:C2:51:1A:A9:3A:D1:8D:07:96:4F:6B:EE:04:E7
X509v3 Authority Key Identifier:
keyid:57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2b:ef:6d:f7:be:37:a3:1c:cd:cf:47:a8:78:2b:fa:a7:b1:
66:7f:b1:e4:84:20:dc:e0:70:f5:a5:ec:45:5c:19:cb:6c:cb:
dd:08:a7:77:f7:06:71:01:78:d1:4c:f9:59:51:2f:f0:51:a7:
35:1a:dd:ff:2a:cd:64:c8:17:62:47:63:0a:3c:31:0f:aa:7e:
66:69:cf:26:70:1e:42:de:73:67:10:02:4a:ba:1c:66:af:aa:
5f:4f:ab:00:02:64:62:90:19:05:fa:da:f1:30:a5:38:d0:d4:
07:f7:42:ce:32:3d:25:66:c5:03:2e:49:f6:cd:68:c4:ed:e1:
0a:7f:1a:10:c6:ca:ce:7f:73:06:36:15:8c:79:2b:4b:28:37:
5b:06:81:70:c6:ee:bc:e1:15:0b:92:0d:26:36:23:ba:fa:16:
12:f5:13:b3:4a:be:32:e0:eb:c8:c7:44:3e:d5:aa:33:5f:77:
f1:ea:1e:ec:03:38:20:6e:45:e2:0d:e9:65:52:bb:50:64:33:
0f:46:11:d4:6d:9e:25:2a:33:37:e7:70:50:c3:0c:6c:0f:6f:
ad:31:f9:fe:3a:42:b1:f5:9c:42:1f:f0:d3:13:93:b5:6c:87:
e5:40:70:cf:c1:ea:de:7c:8a:11:04:3e:bd:85:6f:7b:22:7d:
5a:d7:ff:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:14:55 2025 by rpki-client