Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
File: Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft (raw, json)
Hash identifier: UGHpmhPaC7s2a2vvLrXr14+AnNX5IfXcRlwhq42vbFA=
Subject key identifier: 41:F3:68:95:4F:B3:FC:6C:C2:49:FB:27:00:0B:41:8A:6C:10:23:0D
Authority key identifier: 32:4D:9D:8B:05:04:55:56:76:B9:18:EE:39:1D:C1:53:A9:87:E3:8A
Certificate issuer: /CN=324d9d8b0504555676b918ee391dc153a987e38a
Certificate serial: 0197D587038FE19B20D9427A998B1FE99F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
Manifest number: 0FE9
Signing time: Fri 04 Jul 2025 13:01:24 +0000
Manifest this update: Fri 04 Jul 2025 13:01:24 +0000
Manifest next update: Sat 05 Jul 2025 13:01:24 +0000
Files and hashes: 1: Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl (hash: IYGbBxs5DCwKNrfBZPa+o2+Ndea1q/X2F19sna8sU2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:87:03:8f:e1:9b:20:d9:42:7a:99:8b:1f:e9:9f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324d9d8b0504555676b918ee391dc153a987e38a
Validity
Not Before: Jul 4 13:01:24 2025 GMT
Not After : Jul 5 13:01:24 2025 GMT
Subject: CN=41f368954fb3fc6cc249fb27000b418a6c10230d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:66:72:f7:d6:dd:26:5e:d7:74:49:70:91:
7f:9a:a2:41:a8:27:e6:93:8d:19:64:e9:9d:4b:50:
45:ca:ee:a5:41:bf:3a:08:f0:57:06:8c:d3:4e:cc:
1e:0c:05:12:7e:4d:ef:ff:22:6d:bb:40:b0:cb:a5:
8e:08:b0:bd:61:b8:08:03:c1:1c:79:2b:6e:4b:2e:
fb:8e:1a:bb:fb:97:f3:d9:d1:2a:31:32:fd:42:05:
6f:c5:bb:05:cd:c7:32:78:2d:86:ea:83:4e:1e:68:
b4:2e:0b:dd:d4:c8:e4:a4:96:57:c9:b0:86:b6:02:
c4:a2:6a:2a:f2:cd:e5:fd:15:d4:86:17:3c:d0:9d:
9e:c3:18:c0:c1:27:46:73:90:f0:ae:c5:6c:03:85:
81:3a:f0:bf:41:5f:18:f6:81:42:2a:20:57:91:8f:
d1:a7:bd:56:f7:3f:1a:f5:e1:47:d9:af:db:bb:d8:
4b:f1:2c:b8:ec:3e:40:b4:a2:19:85:4d:25:ed:07:
11:20:22:2b:df:7f:ad:db:51:26:72:1f:bc:7e:01:
e2:68:cc:7c:2c:ce:ad:87:c0:3c:11:3c:76:0e:c4:
6b:15:ff:df:70:57:c0:86:2f:47:f9:90:ab:4a:87:
ee:d2:85:cd:65:4c:df:99:62:3f:31:c7:43:08:19:
ff:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F3:68:95:4F:B3:FC:6C:C2:49:FB:27:00:0B:41:8A:6C:10:23:0D
X509v3 Authority Key Identifier:
keyid:32:4D:9D:8B:05:04:55:56:76:B9:18:EE:39:1D:C1:53:A9:87:E3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:32:22:9c:ee:f9:f1:04:0f:0a:67:e8:5c:b8:4d:04:88:a5:
04:93:88:d6:e9:c1:9a:bd:87:e9:5f:84:64:b5:fb:32:07:da:
17:2d:ee:bf:21:cc:23:ec:e8:4b:56:a0:ce:3f:ad:b4:2a:6c:
e4:47:1f:b0:28:7f:dc:ad:dd:36:7a:2f:49:8d:c6:b0:63:f1:
0b:22:59:2c:42:f8:56:20:d2:71:48:e2:e8:eb:83:d3:56:31:
68:38:01:83:02:e0:50:0a:02:01:57:a4:da:0e:d5:ee:35:67:
0b:74:94:2d:95:73:24:11:69:f3:39:91:7f:96:dd:79:08:7e:
ca:08:de:bd:5a:e4:a6:a3:fb:ef:3f:a1:0f:bd:af:af:88:4d:
24:f2:c0:2b:5e:44:11:36:98:f4:76:ee:04:46:11:9b:84:00:
7e:06:06:7b:eb:48:34:8f:98:ca:91:b9:46:35:47:9a:6c:cd:
7b:59:f0:5d:eb:99:25:be:b7:93:81:2f:cb:31:5c:5b:9a:c4:
1d:3c:2f:c5:f8:e8:82:83:8f:fe:29:d9:a4:87:94:12:91:a4:
36:65:6b:a7:eb:ec:46:70:d5:ce:28:81:f8:84:a3:a8:73:fa:
e4:d4:20:1d:88:1f:f6:f4:10:41:5f:3b:c4:ff:89:25:8c:c3:
7d:7e:67:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:22:55 2025 by rpki-client