
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
File: f_F65Ue58mQeYFd_5VPdtvdJoIc.mft (raw, json)
Hash identifier: DB9ma1c/Noo01jwDUqOeprvnIhsn5Q60Hfo3Ejv9O2w=
Subject key identifier: D3:1F:21:3F:2C:B9:6B:3F:89:DE:3F:2E:F3:A4:D0:A1:0D:8F:2D:E7
Authority key identifier: 7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
Certificate issuer: /CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Certificate serial: 01974A43D8C03C91C2AF0C99D85ED8669140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
Manifest number: 02BB
Signing time: Sat 07 Jun 2025 12:00:49 +0000
Manifest this update: Sat 07 Jun 2025 12:00:49 +0000
Manifest next update: Sun 08 Jun 2025 12:00:49 +0000
Files and hashes: 1: f_F65Ue58mQeYFd_5VPdtvdJoIc.crl (hash: VbaoSUAJhlv7rTRE/FsPb2JCeUPgni+/yD4CK8eIhxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:d8:c0:3c:91:c2:af:0c:99:d8:5e:d8:66:91:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Validity
Not Before: Jun 7 12:00:49 2025 GMT
Not After : Jun 8 12:00:49 2025 GMT
Subject: CN=d31f213f2cb96b3f89de3f2ef3a4d0a10d8f2de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:16:3c:27:36:a7:fd:33:ab:5e:d0:98:7c:
57:e3:86:37:31:af:2f:0c:1c:62:2d:47:1b:32:d7:
17:15:b5:59:7e:8d:9c:3f:46:91:b6:d0:de:0b:09:
38:7a:5d:c5:47:ea:3b:49:55:7e:67:6b:a5:e8:74:
1b:d9:05:d7:40:a8:8b:29:89:56:67:c3:e7:20:e5:
33:9b:d1:c2:ef:3a:bd:d0:2b:30:e0:0e:e4:a8:cc:
d5:0f:fd:78:94:f1:69:2b:3a:a4:ac:10:98:cd:0c:
1d:b5:14:0e:21:ba:7e:ed:91:0f:c9:dd:fd:8c:f9:
05:17:72:5d:ad:d6:31:13:7a:4b:a4:a2:03:c0:ef:
23:c0:fb:f6:b9:50:7b:1b:b7:ff:52:a3:26:8d:d6:
f7:2c:f4:93:60:d7:ff:50:c6:b8:f1:2a:7e:9a:73:
24:73:ab:99:67:91:81:ea:23:1c:e8:c6:c1:d6:05:
20:0a:36:95:cb:3d:d6:b6:49:7f:74:06:8b:cf:30:
2f:ff:06:f9:75:7b:93:97:f4:e3:fa:c3:29:7e:f6:
23:fa:7b:21:f2:41:60:eb:00:e6:40:65:80:c2:4d:
e5:3e:1a:b6:bc:cf:2b:7b:39:ec:51:6c:9b:ee:50:
2f:08:ed:f0:8f:ae:6a:6f:1c:54:8f:42:c8:9c:8d:
29:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1F:21:3F:2C:B9:6B:3F:89:DE:3F:2E:F3:A4:D0:A1:0D:8F:2D:E7
X509v3 Authority Key Identifier:
keyid:7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f4:f7:69:da:4e:e6:fb:79:c7:4d:67:48:01:ba:7e:e4:2b:
7a:9d:f5:99:f9:59:ba:13:ff:45:25:ff:b6:46:1d:41:4f:da:
c3:8d:a3:0c:2a:85:63:42:15:40:73:20:42:0a:16:7e:a4:41:
04:7f:b5:ba:b2:88:73:25:ba:ae:ae:c1:01:49:cb:8b:57:02:
61:ae:9a:74:e9:3c:f0:5c:70:38:88:18:3b:89:9b:0d:e6:42:
e8:21:d1:c4:9c:08:56:45:12:1a:6c:3b:e9:ad:95:5d:ed:fb:
a7:3a:c1:63:fd:f3:c9:eb:6b:12:6a:31:df:20:32:63:c9:4f:
75:f0:df:82:ac:24:a1:57:76:a3:41:1a:db:e5:bf:03:d7:ec:
bd:79:2e:4a:ee:39:98:82:04:32:bf:1f:c1:c2:8b:57:6c:66:
c7:7d:5a:54:39:89:7b:ee:dc:81:26:15:27:be:d5:56:3a:f0:
6b:40:ae:7f:13:c5:59:de:ff:ed:b0:84:7f:44:30:65:7d:77:
e1:1b:5b:c1:95:82:b5:e7:4c:46:f7:e3:a4:90:0d:fe:83:cc:
bf:92:11:6b:ce:2c:2b:a3:68:00:ff:10:ff:80:7d:0b:a9:87:
e0:f5:dc:d3:8b:ab:a7:72:cb:71:14:5f:75:20:c0:e2:91:29:
ed:8e:d5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:37:25 2025 by rpki-client