Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
File: v74mhOFXoAYDw7KrDcUlKF6_64k.mft (raw, json)
Hash identifier: 1dnIiwF6IOMMZSuEh9M+sPbgZW7+KgOLwCGXbR0bSnY=
Subject key identifier: 08:CF:D3:FA:DB:24:89:8A:B5:F5:DA:26:58:61:7B:7A:E4:6B:AA:0B
Authority key identifier: BF:BE:26:84:E1:57:A0:06:03:C3:B2:AB:0D:C5:25:28:5E:BF:EB:89
Certificate issuer: /CN=bfbe2684e157a00603c3b2ab0dc525285ebfeb89
Certificate serial: 01974E580FF3E16534891D00350AB6C66B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
Manifest number: 0258
Signing time: Sun 08 Jun 2025 07:01:23 +0000
Manifest this update: Sun 08 Jun 2025 07:01:23 +0000
Manifest next update: Mon 09 Jun 2025 07:01:23 +0000
Files and hashes: 1: v74mhOFXoAYDw7KrDcUlKF6_64k.crl (hash: Xf4TkIZwzyYVL3SHfzIeqo94mw6rXLoSh+S5gLr781w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:0f:f3:e1:65:34:89:1d:00:35:0a:b6:c6:6b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbe2684e157a00603c3b2ab0dc525285ebfeb89
Validity
Not Before: Jun 8 07:01:23 2025 GMT
Not After : Jun 9 07:01:23 2025 GMT
Subject: CN=08cfd3fadb24898ab5f5da2658617b7ae46baa0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:93:9b:bd:44:60:6e:45:28:30:7c:cc:4b:
17:54:7b:17:55:5b:44:23:4d:25:c5:ea:a1:8a:eb:
d9:e3:ea:fb:ef:d1:65:ce:97:2e:97:a5:bf:a8:85:
ec:6e:93:ae:78:8f:88:03:8c:f0:37:c4:38:3d:45:
0b:6f:a7:13:5e:8c:e4:24:53:a3:d7:61:14:4f:ac:
d6:65:8f:ef:b0:58:93:80:79:b9:ae:5a:22:b7:6d:
60:9a:45:ab:d6:3d:6d:f0:46:ac:7d:40:89:c9:1c:
18:8f:02:70:c9:6d:3b:7b:b7:63:6c:0c:f3:e2:c8:
e1:cc:86:57:3e:11:a4:3f:58:7b:03:c4:9f:5b:87:
42:b8:ad:1a:05:ec:e2:4a:54:9f:9a:7a:ce:3f:bf:
d3:3b:15:74:41:3d:d0:26:4a:ac:55:40:67:e0:58:
91:e1:75:dd:7f:91:61:ae:c3:ca:18:c5:6b:aa:f7:
56:9b:e2:8b:d0:0d:fe:af:f4:1a:2a:60:c7:52:9e:
c8:e5:13:20:1a:14:7c:04:0b:6d:dc:ff:51:8a:38:
05:61:39:6d:37:73:eb:4d:39:a8:28:45:dd:13:cd:
50:5f:d4:2d:2c:75:19:86:b1:e5:72:d7:b2:9c:b6:
0d:1d:7b:c2:89:0c:5b:95:ff:ac:52:16:c9:11:50:
d0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CF:D3:FA:DB:24:89:8A:B5:F5:DA:26:58:61:7B:7A:E4:6B:AA:0B
X509v3 Authority Key Identifier:
keyid:BF:BE:26:84:E1:57:A0:06:03:C3:B2:AB:0D:C5:25:28:5E:BF:EB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:54:53:5c:da:fd:68:fc:85:b3:ac:69:e5:fb:ee:fe:f1:60:
62:9d:0d:46:d3:52:87:bf:43:c3:ef:aa:9c:a2:8b:f5:70:de:
63:d8:25:29:e5:8e:19:49:1c:7f:4f:bc:da:f6:d3:b0:9e:b4:
d3:6c:6c:8a:5d:f4:74:7a:1e:97:27:a6:5c:05:6f:33:1c:6d:
5a:a7:0a:34:26:40:a6:c1:59:5e:3a:4a:db:cb:93:9a:f6:6e:
24:e3:8b:11:93:72:56:3c:76:e9:51:d5:09:5e:1b:a5:3c:eb:
53:6a:32:c2:1a:6c:4c:b0:e0:d6:80:7f:77:e6:b2:2b:66:99:
32:86:42:f5:20:9c:3d:5d:47:ef:43:78:c6:07:04:cc:1c:3d:
3f:74:e5:7d:4e:57:5a:49:21:af:fc:ef:32:52:ef:ae:9d:b7:
a3:dc:62:2c:bd:3a:4b:ee:b6:1f:a7:60:6d:b9:ad:94:9c:71:
e4:be:f5:15:a0:4d:b3:b3:82:37:25:23:cd:6b:49:2c:1e:32:
b1:49:8e:12:eb:66:58:32:6b:58:c3:24:6c:aa:8b:29:39:76:
02:09:ff:47:82:24:3c:af:dd:b9:25:8f:0b:ab:1d:69:2f:c1:
3a:b6:0e:e7:2a:a5:cc:71:7a:f5:2b:52:f8:e4:1c:4d:fd:8b:
0c:55:40:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:19:46 2025 by rpki-client