Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
File: d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft (raw, json)
Hash identifier: 57TVlQKSw2rHVgeMJeR7GiezK3/maAAKUiCONxr0FCE=
Subject key identifier: D8:02:21:22:07:33:EE:9E:9D:66:4C:8B:58:A3:47:FD:39:1B:D8:E6
Authority key identifier: 77:F4:9A:F8:4C:0B:8A:09:A7:B3:B4:F1:F2:71:44:EB:25:91:0F:B5
Certificate issuer: /CN=77f49af84c0b8a09a7b3b4f1f27144eb25910fb5
Certificate serial: 019921E7DA0CB25069D0969FD36AEE17B324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
Manifest number: 04DD
Signing time: Sun 07 Sep 2025 02:01:06 +0000
Manifest this update: Sun 07 Sep 2025 02:01:06 +0000
Manifest next update: Mon 08 Sep 2025 02:01:06 +0000
Files and hashes: 1: d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl (hash: lAdmGbHnaq2x+q7JWndj5JVwEGcu8K/V13qS09/q16s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:da:0c:b2:50:69:d0:96:9f:d3:6a:ee:17:b3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f49af84c0b8a09a7b3b4f1f27144eb25910fb5
Validity
Not Before: Sep 7 02:01:06 2025 GMT
Not After : Sep 8 02:01:06 2025 GMT
Subject: CN=d80221220733ee9e9d664c8b58a347fd391bd8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:65:bf:ac:7a:9a:eb:23:3a:f8:fb:0f:1f:df:
7a:c3:50:9c:43:97:d0:33:56:8f:4b:2f:90:6e:38:
b4:c7:b7:bf:e2:d7:e2:dd:b6:16:ee:53:46:9b:a1:
c3:1e:a9:c0:9b:79:7a:c4:da:ce:90:41:df:b0:ef:
51:b6:a1:43:9a:2a:fe:4d:32:ba:d1:64:46:9f:8d:
da:8c:3d:b0:0d:30:80:cd:9c:3f:b4:58:6e:94:a0:
c4:05:4d:5e:b3:b8:a0:d2:4c:20:7d:e9:a2:55:40:
1b:d2:70:bf:8c:67:10:cf:41:db:15:b9:7d:cc:b7:
a9:77:e7:ec:e8:12:ee:3b:80:12:ae:b6:d9:f1:4b:
19:33:a3:44:53:6d:41:0c:79:a1:57:1c:cc:11:59:
45:bc:8f:09:c0:aa:80:44:75:2b:ab:cf:9a:7e:d3:
0a:d0:3e:0a:05:b4:33:3d:86:ae:4c:28:db:6f:95:
70:7a:9a:27:0e:fb:4f:50:48:77:6d:15:77:bb:c8:
62:52:11:06:95:09:42:86:0b:1f:65:e8:c1:eb:57:
fb:80:e5:e9:18:08:ea:89:cd:97:0f:ce:68:06:a4:
60:77:1f:89:6a:9d:ab:c3:37:ec:81:0f:a0:d3:a9:
1f:47:3e:f5:5a:cd:ee:03:06:6c:d7:39:f6:b6:48:
c4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:02:21:22:07:33:EE:9E:9D:66:4C:8B:58:A3:47:FD:39:1B:D8:E6
X509v3 Authority Key Identifier:
keyid:77:F4:9A:F8:4C:0B:8A:09:A7:B3:B4:F1:F2:71:44:EB:25:91:0F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:cd:98:e2:06:42:7f:64:5c:69:84:1e:49:29:58:ce:6e:25:
93:df:6f:36:0e:60:3f:f4:a3:6d:c4:e8:d4:98:2b:62:0f:9b:
2a:d7:fb:29:05:0d:fb:dd:00:53:b1:85:a5:3e:7a:a6:a7:4d:
aa:c4:4e:4d:5d:51:21:7e:13:15:29:de:14:52:ba:67:da:13:
fe:ea:87:94:47:0a:08:ab:0e:7f:b5:0f:45:04:ce:f9:d3:2c:
20:cb:06:9f:6d:11:60:9e:9d:54:dc:00:a7:3b:31:fa:45:b0:
3d:f9:b3:19:31:01:6e:69:7f:2d:92:0d:d0:ee:d2:30:8d:b2:
62:bc:f7:0e:3c:d6:51:f2:ee:14:c3:77:92:98:43:05:5e:e3:
89:fa:2b:63:a9:8e:1a:46:dc:56:9b:08:e6:f0:93:d7:43:c9:
6f:f0:01:17:ef:88:ed:7b:ac:6d:be:2a:9e:f7:51:66:35:78:
57:d6:05:06:16:c2:96:b9:1b:a9:3d:49:76:f1:d9:4c:5f:38:
e3:82:17:d5:e6:30:5c:bb:bf:28:d7:59:90:d6:f6:29:11:aa:
e8:5d:27:07:c8:5c:a1:1c:3c:f9:84:94:49:32:6a:b3:f3:13:
74:a6:eb:e5:7e:33:82:d8:57:7c:af:99:ba:b8:35:2e:ca:50:
d4:af:cd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:38 2025 by rpki-client