Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
File: mfL0sCJG5gTiN_N5RaOCv62hJ38.mft (raw, json)
Hash identifier: 4YzBc4hXyyIa7BfjR8L+mpT3gqx1ygQxsUfhaj2PQuQ=
Subject key identifier: 66:A4:D3:29:83:FC:CF:A6:52:55:15:43:43:CB:B6:BE:95:4E:84:2F
Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
Certificate issuer: /CN=99f2f4b02246e604e237f37945a382bfada1277f
Certificate serial: 019748C36798F95A515BCDF485AAABB6A9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
Manifest number: 0666
Signing time: Sat 07 Jun 2025 05:00:54 +0000
Manifest this update: Sat 07 Jun 2025 05:00:54 +0000
Manifest next update: Sun 08 Jun 2025 05:00:54 +0000
Files and hashes: 1: mfL0sCJG5gTiN_N5RaOCv62hJ38.crl (hash: Q9d+9g8uRG68yietYXNNaQDvW78ZprLbe9YZvEv5E+g=)
2: tD16yJgx6FslawER1Evjktr90DU.roa (hash: IgaqAI1HCcxs2x01fN4KAw3fM/ZJo5SCnC5NuJ1Z+9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:67:98:f9:5a:51:5b:cd:f4:85:aa:ab:b6:a9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f
Validity
Not Before: Jun 7 05:00:54 2025 GMT
Not After : Jun 8 05:00:54 2025 GMT
Subject: CN=66a4d32983fccfa65255154343cbb6be954e842f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:5d:7f:06:95:85:fb:23:c7:ac:77:f6:09:
79:0e:77:47:8c:b0:1a:a7:11:dc:ef:cf:f7:8b:18:
cf:12:b7:a2:6c:1c:1f:ba:8c:e7:98:00:71:5e:54:
a6:56:68:9f:b4:60:dc:50:75:84:cf:bb:2b:6a:07:
67:d5:24:13:ad:39:fe:9e:01:fd:b7:cd:4d:4a:da:
4e:cc:5d:7c:bd:3b:0e:9c:d1:db:55:a6:83:d0:40:
6d:4c:96:eb:55:61:82:8f:a1:74:99:a0:3a:53:96:
b0:c4:9e:a2:f2:d8:08:03:48:a5:cf:ba:22:89:03:
97:85:9d:8a:b0:87:6e:e0:da:d7:10:04:ae:67:c8:
b6:19:49:92:54:76:07:ce:53:96:1e:59:05:1e:d7:
63:98:f6:47:a8:5c:d7:78:45:90:a4:87:da:5f:22:
c7:9f:3f:3e:9f:1a:99:5a:f7:97:da:d8:ef:e7:8a:
91:9e:f2:32:52:84:1f:cb:16:3e:36:45:75:3a:74:
d4:5b:70:3b:5a:85:98:1d:86:0d:93:d7:27:7c:d8:
59:cd:37:52:c2:f8:ca:e8:ce:c3:5d:d3:45:31:5d:
be:d5:d0:33:95:c3:ed:70:24:ac:0e:5f:d6:d9:70:
b4:f8:a0:c4:db:a6:b1:89:58:ad:de:a4:d0:00:c8:
8e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A4:D3:29:83:FC:CF:A6:52:55:15:43:43:CB:B6:BE:95:4E:84:2F
X509v3 Authority Key Identifier:
keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5b:54:b8:eb:e4:d3:8c:2b:d6:20:92:d6:c0:8e:81:bf:47:
9b:8b:b1:be:84:c9:d9:00:2d:b4:a6:33:07:18:0b:84:c9:e6:
71:23:f6:10:8d:4b:ad:62:1a:98:71:e1:55:21:1e:81:f9:3f:
d7:71:6e:b3:c7:12:3e:25:bb:f9:c8:8e:08:d1:0f:b1:0c:14:
17:3f:44:9d:c7:2a:8f:f2:0e:9e:5e:54:da:04:bc:00:04:87:
1c:9f:4f:b5:7a:de:5d:a4:29:bf:92:63:89:4d:82:9d:6a:71:
f7:70:b1:b5:64:91:f4:a0:5d:e5:06:b5:0d:3a:4f:f4:f2:d2:
0a:a9:cc:83:b2:94:f5:69:ef:7a:26:b5:95:2d:41:9b:f3:72:
d9:a9:f0:ff:cb:94:0c:12:d5:1e:d1:28:62:c4:18:8e:00:bd:
d0:b1:af:01:79:c6:a8:3d:ef:32:7e:ab:82:9f:1b:9e:70:c2:
96:1e:69:fb:a4:46:65:f0:96:aa:bc:d9:ee:38:6b:d1:13:21:
82:19:6e:98:35:d8:f9:f1:22:0d:ab:e0:b5:6a:b4:9d:32:90:
70:bf:12:47:05:28:cc:e5:f1:89:ee:66:28:a4:dd:5c:b9:dc:
8e:b9:d3:ef:8a:46:7d:2b:76:76:e4:17:a8:3f:78:e7:b1:7f:
98:65:74:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:25 2025 by rpki-client