Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
File: 2u6A610wBIVU0K79Q7zu0z791Kk.mft (raw, json)
Hash identifier: 8bi8BVgGrHW8OI3X2l1kNkJt05GYgvfr9ILWr7TDooA=
Subject key identifier: 6A:78:F1:D7:2B:3C:0C:22:04:5B:5B:08:D6:51:B9:C5:07:99:BB:AC
Authority key identifier: DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9
Certificate issuer: /CN=daee80eb5d30048554d0aefd43bceed33efdd4a9
Certificate serial: 0197D77632AA8967F4F52281FE0D049DAB31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
Manifest number: 1255
Signing time: Fri 04 Jul 2025 22:02:17 +0000
Manifest this update: Fri 04 Jul 2025 22:02:17 +0000
Manifest next update: Sat 05 Jul 2025 22:02:17 +0000
Files and hashes: 1: 2u6A610wBIVU0K79Q7zu0z791Kk.crl (hash: S2/SAn+YHUK0hfk1Ahqg3zF0mPx9bCFr9BcB7ePvcRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 22:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d7:76:32:aa:89:67:f4:f5:22:81:fe:0d:04:9d:ab:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daee80eb5d30048554d0aefd43bceed33efdd4a9
Validity
Not Before: Jul 4 22:02:17 2025 GMT
Not After : Jul 5 22:02:17 2025 GMT
Subject: CN=6a78f1d72b3c0c22045b5b08d651b9c50799bbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8b:32:5a:e1:9b:2c:14:66:87:4b:1e:e3:16:
46:42:8a:3a:d7:a1:e5:2f:9c:67:53:5f:85:82:f1:
0d:64:cd:75:38:4a:b4:25:ec:64:e4:85:7b:31:76:
5c:47:35:4e:03:cf:31:14:54:0b:75:d3:4c:16:da:
46:f3:38:bf:fb:05:dc:68:bd:8c:4c:4d:25:b4:f7:
a8:08:8c:79:f5:ff:83:12:a0:fc:a2:e2:af:51:5e:
32:53:54:d8:2d:9b:f6:f4:3c:e9:16:44:6e:33:ed:
d0:62:81:60:d0:bb:7c:e1:dc:c0:a7:51:5b:08:4e:
79:59:03:60:53:55:6f:45:09:df:14:ec:cb:fa:b1:
aa:1a:94:87:4a:d8:c2:5f:91:c7:5b:c3:7f:6d:15:
2f:46:f5:c7:15:aa:29:34:f9:6d:c9:59:06:4e:5c:
7f:63:fc:c5:0d:d1:d3:41:d5:c3:c9:01:e9:c1:4c:
f2:ae:60:65:90:d6:5a:02:95:84:0a:24:b4:99:15:
be:d7:56:6d:fe:35:c4:52:da:f0:2f:50:32:a5:43:
9f:9d:b9:25:fe:14:31:37:e3:8b:c1:27:fe:9c:ba:
4c:29:62:b0:0c:6f:37:65:bf:36:cb:f1:49:63:88:
33:bf:a8:c9:3d:bc:0a:43:75:6a:a1:35:f9:a6:4d:
52:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:78:F1:D7:2B:3C:0C:22:04:5B:5B:08:D6:51:B9:C5:07:99:BB:AC
X509v3 Authority Key Identifier:
keyid:DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:be:91:87:3f:15:62:2a:54:f0:6b:1c:a1:e4:a7:53:0d:f6:
60:bc:5c:38:2b:00:64:6e:d2:b4:f0:c9:2a:9a:b6:ea:c1:f8:
e7:ee:78:fe:aa:f3:01:2b:ef:3f:c0:c0:e8:7a:f8:34:57:01:
83:36:39:03:58:49:f7:64:7d:e8:0b:98:81:d9:1f:a3:0b:5a:
c7:c2:8a:a1:9a:c9:d7:cf:65:77:34:1c:8f:3e:1c:d9:9d:d3:
e9:ef:c4:e9:96:d4:35:f7:e8:d5:47:26:5d:a9:34:3f:40:7e:
9b:94:e9:5e:49:a7:f1:12:42:4c:92:95:db:d6:8e:de:93:63:
10:9a:a6:b2:fd:ca:c3:58:dd:11:8e:86:06:34:06:b6:be:0f:
79:f2:40:c9:3a:24:14:1d:2c:7d:54:4c:c1:79:c7:1e:12:58:
58:c9:4f:a0:1d:14:2d:7d:8b:d7:e0:c7:20:75:76:32:b4:46:
a7:67:b6:b3:e6:a5:70:7d:05:3d:4d:86:c7:61:ab:e5:1c:2d:
3d:00:61:76:3f:f6:cb:16:2b:0a:fd:57:44:fb:35:65:22:fd:
86:a0:b7:94:00:09:b1:e8:32:e6:26:2f:fe:4b:df:91:87:a4:
c3:9f:b0:d6:46:41:af:15:84:5a:7b:3f:a5:f4:a6:a2:85:dc:
4f:1e:f0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:25:50 2025 by rpki-client