Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
File: C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft (raw, json)
Hash identifier: A+CbXjk6b5dCHCqiM/A+sDnf1KB8fGpFO7n32ju62pw=
Subject key identifier: A1:EC:B8:18:AD:DC:2E:E6:FC:B4:BC:FC:61:CF:D0:22:90:B7:5D:2F
Authority key identifier: 0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
Certificate issuer: /CN=0bfa7348d6c1d7186328328720730f684fa20edc
Certificate serial: 01974EC5CD6953A7F8D4921E6D1C0CD2FD65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 09:01:15 +0000
Manifest this update: Sun 08 Jun 2025 09:01:15 +0000
Manifest next update: Mon 09 Jun 2025 09:01:15 +0000
Files and hashes: 1: C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl (hash: Rm6LNkclUklS+2OfIsHaqcLeUQC7jrPnm0iFNBQnUXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:cd:69:53:a7:f8:d4:92:1e:6d:1c:0c:d2:fd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfa7348d6c1d7186328328720730f684fa20edc
Validity
Not Before: Jun 8 09:01:15 2025 GMT
Not After : Jun 9 09:01:15 2025 GMT
Subject: CN=a1ecb818addc2ee6fcb4bcfc61cfd02290b75d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:74:22:ea:8c:ec:f5:ea:ff:56:65:51:3a:fd:
2f:6d:82:2d:76:bd:06:27:2d:86:5a:9d:9a:cb:ad:
68:8b:9f:78:f2:01:c4:56:e9:3c:5f:f6:73:2a:fb:
40:b6:b3:57:9b:39:e8:d2:21:e1:04:83:63:00:0f:
f7:53:08:ae:3f:e7:92:5a:67:ff:9f:18:97:ed:59:
39:c9:c6:37:bb:6b:99:2b:16:19:d7:a0:ea:a2:ed:
5a:ae:71:37:7b:45:cb:04:f1:2c:dd:71:db:30:78:
28:8a:78:21:5e:b2:29:77:7d:17:3b:c0:19:44:93:
0f:a7:68:a1:ec:7e:65:da:b5:e2:5f:ce:1c:c1:d3:
ce:f3:5a:7c:84:7c:fb:31:1e:c1:27:1e:6a:b8:ed:
e5:6b:d9:de:c8:f7:5b:06:ed:ae:2e:9a:eb:7f:21:
91:d3:96:ec:bf:1e:d3:3f:48:5c:3f:f8:c5:94:2f:
a4:7c:c8:73:93:87:78:35:de:f0:c9:2d:30:5d:bf:
72:4a:03:5d:17:23:14:a2:de:35:63:4e:91:a9:16:
0a:c9:c3:71:fd:f3:32:97:fd:4d:e7:d9:1c:be:40:
91:5a:c9:3d:f0:e1:e7:94:56:16:b4:dd:79:ed:06:
89:42:8e:97:63:43:0a:9a:86:b4:34:a4:e5:73:94:
42:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EC:B8:18:AD:DC:2E:E6:FC:B4:BC:FC:61:CF:D0:22:90:B7:5D:2F
X509v3 Authority Key Identifier:
keyid:0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:13:3c:a6:b1:55:87:a5:39:1a:be:10:e7:2d:a0:41:bf:cf:
27:7f:41:f2:69:2b:0a:8f:d2:d9:33:f4:16:4c:c0:c8:0f:e0:
a2:ee:ff:a4:a6:ff:91:74:89:1d:fd:37:e3:ee:1e:97:fe:84:
80:5f:2d:71:69:3d:db:0b:1d:61:4c:9b:79:55:f6:25:3c:2d:
44:42:4d:ab:38:d6:42:27:31:0d:c4:f6:c4:69:c6:37:dd:07:
eb:e6:a2:f3:bd:9b:86:25:13:e7:e8:35:f6:cc:93:8c:81:2d:
4d:e5:b4:70:dd:cd:da:fa:3f:e0:b8:84:8f:a2:a2:6e:1a:8d:
82:34:18:09:bb:ea:92:ce:78:76:83:b3:a6:ca:52:07:bf:3b:
9c:bc:8b:4d:01:f9:d9:cd:24:e5:d1:ae:d2:3f:74:25:54:e1:
5f:2b:81:da:52:13:70:d2:e8:66:97:a0:b5:72:b1:62:55:e8:
b0:0e:a5:ea:02:eb:d7:44:0a:81:92:68:65:51:0d:8f:e5:55:
c8:6f:53:fd:b9:b2:a7:9e:24:7f:1f:ea:42:85:4b:68:ac:83:
25:11:1c:40:30:3a:ea:da:06:5a:c1:24:fa:1a:e2:46:45:e9:
2f:8c:c6:1b:73:df:48:b2:e8:8b:46:39:43:56:f6:51:43:b1:
bb:d1:8d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:24:06 2025 by rpki-client