Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
File: sEAqOILi-MUlQrB73sCypQ1ZgNs.mft (raw, json)
Hash identifier: JusTibIjQeyzKBYVxqon7UcD8Bc8T+qPlcoEP1gmnmc=
Subject key identifier: 68:A9:56:0A:AF:85:E3:8F:29:73:A3:F0:B3:5E:40:1F:06:BA:74:5E
Authority key identifier: B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB
Certificate issuer: /CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db
Certificate serial: 01974EC50B3BEFA73D6B9C8F68B6D31D1652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
Manifest number: 0E58
Signing time: Sun 08 Jun 2025 09:00:25 +0000
Manifest this update: Sun 08 Jun 2025 09:00:25 +0000
Manifest next update: Mon 09 Jun 2025 09:00:25 +0000
Files and hashes: 1: sEAqOILi-MUlQrB73sCypQ1ZgNs.crl (hash: W2DTeWS6A63m96Zc+Wh+3t+cWSGHs50jsrD4DLBm/ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:0b:3b:ef:a7:3d:6b:9c:8f:68:b6:d3:1d:16:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db
Validity
Not Before: Jun 8 09:00:25 2025 GMT
Not After : Jun 9 09:00:25 2025 GMT
Subject: CN=68a9560aaf85e38f2973a3f0b35e401f06ba745e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:dc:0f:0c:38:67:59:eb:50:9b:99:91:fd:
c3:3c:7e:c9:75:ec:79:7c:c3:36:2a:91:79:74:57:
fb:8e:11:6a:d6:8a:d7:f6:db:50:7b:93:23:a5:74:
a2:d3:31:66:00:02:ab:77:e4:52:38:24:74:6b:e6:
b0:11:ab:e5:61:7d:49:50:2b:1b:c9:b5:5f:d8:44:
84:1d:cf:de:5f:df:73:21:ac:05:b5:25:72:1b:55:
2f:a9:e3:45:ad:c8:9b:84:43:12:87:b5:60:f9:26:
6c:2c:03:54:da:ae:0a:50:05:d0:3a:46:0d:be:ae:
35:01:17:38:be:9e:72:fd:53:3b:8f:f3:1a:c6:2e:
62:b4:cd:70:64:b3:19:db:46:ca:2e:9f:5d:32:3a:
c1:89:6b:34:06:94:20:5d:38:56:96:b5:be:f3:b8:
4e:72:2a:71:9a:13:74:b7:3a:b2:6f:54:93:6b:83:
9f:1d:37:54:7a:5f:cf:3c:2f:4a:06:5a:d7:c4:a4:
cc:19:e7:9a:f8:9e:29:36:cf:ed:cf:c8:42:ff:d8:
b0:b1:7d:c7:c3:99:43:8c:5e:fb:48:5d:c0:69:5d:
46:e3:30:d7:fc:f7:f6:c8:e2:ec:68:3c:db:62:6c:
eb:7c:c2:ab:18:fb:46:c1:e9:72:cc:2c:72:69:bf:
e4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A9:56:0A:AF:85:E3:8F:29:73:A3:F0:B3:5E:40:1F:06:BA:74:5E
X509v3 Authority Key Identifier:
keyid:B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3b:73:42:c3:56:7a:e0:e4:b4:84:f6:d5:b8:98:1f:26:8c:
5e:c0:b9:8b:d9:98:44:fd:ca:b4:a8:f9:5f:96:7a:ee:3c:c5:
53:b8:5c:a7:c5:4c:91:30:2e:97:4b:b9:23:09:18:89:7b:ea:
d5:ef:50:68:6f:3e:02:e3:c7:3f:f0:72:17:22:0b:15:0b:d9:
20:69:be:37:e9:06:97:8b:b1:75:7c:eb:5a:07:9b:27:68:70:
dd:96:d8:66:6f:9a:8f:f8:0e:4c:1a:4e:87:93:dd:8a:39:fb:
d0:bd:2c:6e:c4:d8:76:c6:be:f0:fd:00:7c:0e:b8:3b:c3:25:
50:6b:07:05:4c:34:03:21:ad:8d:9b:1e:cd:02:f4:37:00:9c:
c4:b9:c2:64:7a:94:39:97:e0:bb:59:5d:cb:65:10:bc:7e:ec:
c1:64:cd:db:14:ae:ab:e1:20:8e:c0:69:52:63:20:cd:c5:53:
fe:b3:02:f5:82:1d:f9:fc:98:35:22:06:33:59:18:cd:4e:d5:
18:1e:59:33:7f:44:d3:cf:9d:d7:25:ea:e0:29:5d:b4:ae:e9:
fe:80:f1:3f:89:23:5e:21:5d:aa:80:35:08:88:c4:62:05:30:
3b:8b:b1:94:28:6c:dd:27:ff:e1:25:5c:93:e3:c5:5e:de:52:
77:37:51:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:00:08 2025 by rpki-client