Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
File: tDtWqlNz6PXng0dnQkDv98KCctw.mft (raw, json)
Hash identifier: yl9wMspT/sxQCAO5ga8t2sM09l0CuyFNAhrfgaqPY0k=
Subject key identifier: 1D:86:84:C2:CC:FB:EB:5B:E8:51:E4:7F:44:29:A1:90:40:A1:1B:C0
Authority key identifier: B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
Certificate issuer: /CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Certificate serial: 0197469E6D1680622F302ABE92FE55335BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
Manifest number: 0EB3
Signing time: Fri 06 Jun 2025 19:01:17 +0000
Manifest this update: Fri 06 Jun 2025 19:01:17 +0000
Manifest next update: Sat 07 Jun 2025 19:01:17 +0000
Files and hashes: 1: tDtWqlNz6PXng0dnQkDv98KCctw.crl (hash: Uw5H2IORZYvKbVs7ulDuZN1UOleG9dQwtmN8JeIyEhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:6d:16:80:62:2f:30:2a:be:92:fe:55:33:5b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Validity
Not Before: Jun 6 19:01:17 2025 GMT
Not After : Jun 7 19:01:17 2025 GMT
Subject: CN=1d8684c2ccfbeb5be851e47f4429a19040a11bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:52:a2:de:34:ef:94:60:eb:5e:5d:f1:f2:
e2:79:1f:a3:87:12:14:4c:7b:47:3a:51:42:4a:9f:
f5:8d:88:be:22:86:12:a3:0f:5a:1f:a7:7c:e7:e3:
87:bc:ff:62:00:07:e9:69:93:76:20:3c:6f:f8:5c:
7a:4f:94:14:ac:2a:e8:7e:d8:40:fc:b0:b0:48:8a:
80:02:15:d7:fa:d9:43:f9:d0:c1:fd:ea:62:97:93:
fb:6f:ed:8f:e0:da:bc:d8:42:87:be:e1:26:f9:54:
e9:69:ff:30:10:c0:55:b5:92:d7:24:8b:da:2e:1f:
2d:45:a9:e5:a7:9a:9e:ec:40:b7:6b:bb:2a:7e:85:
3b:d9:c2:81:dc:dc:af:df:c3:94:5c:49:e1:6f:dd:
b5:b4:5c:47:81:04:8d:a4:3a:cf:30:47:c0:6f:0d:
9b:2c:74:5c:94:17:6f:bc:1a:65:0f:45:7e:a1:e0:
0c:5c:e6:85:cb:89:d9:67:8d:3f:36:62:e0:3c:5e:
5d:e6:1b:ff:0f:28:d5:a2:19:f1:f6:71:b8:ee:48:
6e:68:26:10:2d:5e:54:4b:28:3b:43:6b:01:09:e1:
7a:44:bd:7c:9f:ac:e2:4b:2d:3a:e6:bd:4f:1b:ae:
b8:1a:5d:fa:94:11:49:e6:93:9f:14:20:a7:32:b1:
19:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:86:84:C2:CC:FB:EB:5B:E8:51:E4:7F:44:29:A1:90:40:A1:1B:C0
X509v3 Authority Key Identifier:
keyid:B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a9:18:0b:8b:a7:4d:85:39:5c:67:79:2f:ff:14:db:9d:c7:
ab:73:20:80:ce:ff:5b:24:de:65:42:bf:ae:95:a9:c4:1f:d7:
ee:eb:42:b1:ea:2c:62:ed:13:d2:d5:33:11:72:f3:6f:0f:28:
bb:f6:71:a6:d7:3a:8f:bc:c7:8c:8c:cb:36:4b:9a:fb:76:80:
a6:20:cb:6d:34:90:fb:8d:9a:48:c5:57:53:ab:52:7e:3c:f1:
12:13:d5:e6:69:65:14:b6:96:07:ae:a4:1b:65:9f:ac:9c:e3:
8d:52:3a:83:f7:ae:b1:55:1a:38:a6:56:60:cd:5a:62:e2:ba:
3a:05:83:4e:59:22:70:c4:e9:c0:2c:85:f1:97:1e:be:60:be:
99:90:07:47:c0:3a:e4:e9:53:d6:fe:ae:20:ef:53:3b:4e:27:
7b:f1:dc:e4:62:7c:91:5a:26:aa:30:fe:63:a3:0b:f4:46:f5:
17:92:69:ca:6c:67:52:55:16:53:9b:12:80:7f:8d:78:47:cc:
4f:2e:9d:81:c9:6a:e3:32:c8:ec:42:87:4b:fb:d2:66:38:5b:
b6:ae:4b:77:b1:de:46:e4:23:28:e0:90:a1:d6:fa:62:19:a4:
81:71:a2:1b:32:be:c5:37:bf:07:da:3e:43:7e:52:21:12:00:
21:d1:96:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:47 2025 by rpki-client