
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
File: 52px9rqT9s9H6zF7K_0EnVzDl2A.mft (raw, json)
Hash identifier: no8U04S6oXcT9bXonqJNs+0Rs0GuzTbHz0CLljnbZ5U=
Subject key identifier: 51:B7:41:99:A5:33:D6:98:C8:C1:7A:6D:86:C9:BD:75:12:14:59:A3
Authority key identifier: E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
Certificate issuer: /CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Certificate serial: 01974E5770BAC5A06D3C3ECD0ED25C994ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
Manifest number: 098B
Signing time: Sun 08 Jun 2025 07:00:42 +0000
Manifest this update: Sun 08 Jun 2025 07:00:42 +0000
Manifest next update: Mon 09 Jun 2025 07:00:42 +0000
Files and hashes: 1: 52px9rqT9s9H6zF7K_0EnVzDl2A.crl (hash: zPylgZIWWnycKgqKE1dXRNVPAtVNPYBf93Im1jneGUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:70:ba:c5:a0:6d:3c:3e:cd:0e:d2:5c:99:4e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Validity
Not Before: Jun 8 07:00:42 2025 GMT
Not After : Jun 9 07:00:42 2025 GMT
Subject: CN=51b74199a533d698c8c17a6d86c9bd75121459a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:dc:52:99:8e:36:97:06:0e:20:7e:0e:b3:
36:64:5f:4a:1f:e6:3c:c1:fb:96:9f:36:4a:90:82:
bf:b9:a8:13:d3:48:8b:b8:36:32:1c:19:a0:0e:fd:
60:d7:51:c7:c0:cb:c9:26:3e:62:43:8a:8c:c3:39:
5a:d0:0a:b8:1d:e6:02:b5:9f:2c:46:83:c4:47:32:
dc:6e:d3:b3:5c:14:67:a7:45:33:13:5e:89:97:b3:
d8:06:d3:8a:7a:2d:59:dc:f1:1f:21:3b:77:84:7b:
8b:2b:fa:56:52:7b:4f:f9:d7:a4:cc:50:0b:4c:dd:
ab:20:28:75:fd:8c:71:51:33:c7:4f:89:36:65:01:
f3:aa:ed:c9:6e:38:f3:a4:8d:16:0d:66:08:37:67:
fc:5d:00:dd:f7:5e:2a:64:e3:6e:4f:a0:a4:02:ab:
2d:0d:b6:9c:81:89:c3:c2:c3:5b:a1:6c:8c:c2:97:
94:6a:6c:ed:f9:7d:bb:c9:d3:4d:b0:52:db:01:bd:
e8:d4:7c:cb:11:95:e8:65:89:1d:70:05:d5:f3:9c:
0e:df:8d:52:c0:fb:94:8f:df:6a:9a:2c:96:b7:92:
bd:16:5b:53:bc:90:bb:8b:2f:8a:81:6c:61:99:ba:
d7:4f:ce:2a:5a:b8:97:c8:83:8c:b8:16:46:c9:83:
39:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B7:41:99:A5:33:D6:98:C8:C1:7A:6D:86:C9:BD:75:12:14:59:A3
X509v3 Authority Key Identifier:
keyid:E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5a:07:f7:df:56:43:31:53:3e:ca:00:fb:28:2c:40:b6:79:
76:35:81:d3:5a:b2:b8:b5:5e:1d:b8:40:d3:ff:4a:74:02:23:
34:3b:88:da:4c:98:62:0a:02:19:ca:63:0f:cf:14:ac:f7:6b:
72:34:e9:5d:36:9b:89:8e:16:a4:1e:03:86:6d:97:ba:15:b9:
89:07:18:a1:e5:22:18:be:fa:27:47:7b:5a:ee:cd:88:9d:dc:
27:64:1e:15:62:c7:10:48:ec:28:18:5a:fe:36:b5:db:df:51:
78:c0:11:93:43:d4:50:dc:3d:28:01:fe:e9:b5:fe:cf:02:fa:
66:77:7d:ed:a0:83:bb:3c:3a:29:8e:c0:31:d0:e6:37:55:5a:
96:6c:0c:20:e9:af:13:9b:75:8b:1b:bf:e8:7d:33:95:20:64:
7c:32:b7:75:4b:a0:d7:f1:0d:c0:ef:3a:bc:73:cd:b5:7f:31:
9f:72:dd:4a:58:27:e8:30:32:90:22:5d:6f:b1:ed:f7:bd:17:
a2:f4:dc:23:09:bc:fe:e3:ce:d6:7f:6f:40:42:a5:8a:21:56:
32:42:1b:c2:38:36:bf:5c:ad:3e:ea:20:7a:d6:c2:64:ce:8c:
f9:01:79:81:de:36:00:c2:73:f5:a2:91:a0:92:4e:7d:dd:2a:
51:78:6f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:48:37 2025 by rpki-client