
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
File: SxEEihpJFuExuM4Iji1v5OXF49s.mft (raw, json)
Hash identifier: xnhsW8HDSXvZpvv36B6Pd1pRrmpqX36LJd5Fig3YTQw=
Subject key identifier: 2E:F0:35:8F:15:1A:7B:C9:ED:83:1A:11:E1:BB:D9:08:4D:4A:49:7C
Authority key identifier: 4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB
Certificate issuer: /CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db
Certificate serial: 019746302C879EF4848AA3FAA8610378918B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
Manifest number: 01B9
Signing time: Fri 06 Jun 2025 17:00:51 +0000
Manifest this update: Fri 06 Jun 2025 17:00:51 +0000
Manifest next update: Sat 07 Jun 2025 17:00:51 +0000
Files and hashes: 1: SxEEihpJFuExuM4Iji1v5OXF49s.crl (hash: DoCxfLC0XcwEK416UhFtcPicxgbkzttFN+22eqQ2+0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:2c:87:9e:f4:84:8a:a3:fa:a8:61:03:78:91:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db
Validity
Not Before: Jun 6 17:00:51 2025 GMT
Not After : Jun 7 17:00:51 2025 GMT
Subject: CN=2ef0358f151a7bc9ed831a11e1bbd9084d4a497c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:21:08:77:b3:75:d8:49:80:a6:81:a6:2d:
59:47:91:dd:1e:af:dd:ef:d5:58:e2:0b:e6:73:18:
d8:8f:fa:3c:aa:07:d3:c7:fa:71:74:11:08:0e:c9:
49:6a:9e:45:f8:ad:e0:c0:61:84:fc:33:ce:62:26:
af:e1:c1:09:bd:3b:a1:ff:ff:c0:ca:68:07:53:5f:
ed:5d:c4:3c:ce:a5:ae:b5:1c:e6:7e:86:c4:db:b1:
84:8e:16:25:5c:e7:dc:95:7f:f1:93:94:1d:c1:ed:
d1:f7:15:ac:9d:1e:19:c2:44:dd:41:3e:ae:a3:d6:
d5:77:70:6a:ac:d5:27:79:96:a6:bb:a5:4e:3f:e3:
02:d6:0e:82:bb:94:50:2b:26:47:e4:b0:db:79:ef:
90:f0:32:a7:1d:8a:31:b6:9d:c4:5b:c9:1e:f2:f8:
f8:be:18:df:8e:70:0c:b1:7b:f7:55:ba:97:d3:0b:
59:b6:37:87:3e:a9:f5:00:b6:e3:b2:97:d8:aa:d2:
df:21:12:77:34:af:00:21:41:d6:6a:ae:32:82:93:
30:60:33:31:bb:1f:eb:dc:27:ca:c0:d8:9a:2b:26:
37:96:24:25:1c:c7:d6:b1:8d:f1:31:82:40:a8:c4:
82:e4:da:e8:88:99:3a:8c:72:6b:24:86:14:45:57:
8b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F0:35:8F:15:1A:7B:C9:ED:83:1A:11:E1:BB:D9:08:4D:4A:49:7C
X509v3 Authority Key Identifier:
keyid:4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e6:da:a2:73:16:15:45:13:5f:51:39:3a:6a:2f:19:3b:c8:
ee:77:c6:5a:1d:de:ed:33:8a:c6:bf:d3:b5:d0:7b:05:5b:d3:
14:af:8d:c6:3e:15:6e:30:0a:99:f1:5f:77:fd:0a:3d:bd:66:
80:52:93:29:eb:cb:97:9d:c4:c6:46:c3:79:b6:60:c6:00:70:
fe:0f:b9:cd:f1:6a:9d:e0:79:05:97:e3:c3:af:7b:0b:6e:9e:
53:14:f1:cf:86:9a:e1:a8:30:61:4c:66:bb:e2:58:f5:53:d8:
bf:d6:30:a1:ae:8f:68:e6:44:77:41:9a:e0:2a:71:d6:cf:dd:
e2:42:bb:77:a0:ae:71:9d:23:76:57:72:2b:34:77:54:f1:c9:
0a:89:15:29:0d:5d:95:cc:4a:d7:b4:51:c2:d6:18:ad:2f:9f:
b9:7d:4a:7d:7e:2b:dc:86:44:b0:2d:be:f3:c1:a4:88:54:d6:
34:ed:bf:b2:bb:f2:50:3e:f7:13:4e:d3:ee:22:97:95:7c:73:
ae:9d:83:a7:8b:24:cc:38:c4:c4:0d:73:df:74:6e:4a:26:25:
c8:d6:1e:4c:d1:28:d7:46:d0:de:a9:4c:89:cf:53:56:7e:c2:
71:18:48:b5:a2:f5:a1:65:db:fb:30:a4:05:42:7c:c8:aa:b8:
5e:87:ca:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:15 2025 by rpki-client