Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
File: _dlCLeliA-XYc-CZVZGjppDdPZI.mft (raw, json)
Hash identifier: HffujR+o2h0WfpCC77Am4Vy9WqPBt0Fpphs083KCL9o=
Subject key identifier: D6:74:0D:97:FF:55:D0:9F:BF:01:06:6D:8B:51:23:60:63:7B:67:3C
Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Certificate issuer: /CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Certificate serial: 0197499F62D2E35597916CC59DA98FB66D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 09:01:11 +0000
Manifest this update: Sat 07 Jun 2025 09:01:11 +0000
Manifest next update: Sun 08 Jun 2025 09:01:11 +0000
Files and hashes: 1: _dlCLeliA-XYc-CZVZGjppDdPZI.crl (hash: ZCEbrq7E+5zc4gEvej46bLb0SdDCZ7mSP3ybts0+6w8=)
2: sKY5eWcuMLtnQDCwYINlgWrJYiU.roa (hash: CtU3txyv7ojbqzOBjkBrsZCPvN9srqKePBnH0g0kSFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:62:d2:e3:55:97:91:6c:c5:9d:a9:8f:b6:6d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Validity
Not Before: Jun 7 09:01:11 2025 GMT
Not After : Jun 8 09:01:11 2025 GMT
Subject: CN=d6740d97ff55d09fbf01066d8b512360637b673c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2a:83:5c:2f:7f:64:a8:e6:c1:b7:32:5f:4f:
be:11:ba:cf:65:25:f2:30:ea:af:78:f6:c6:2e:7b:
12:80:44:8d:81:c0:5f:39:60:ac:db:74:67:82:08:
45:34:66:2f:ac:b6:2c:bb:07:d9:7c:98:68:1a:e4:
60:b9:fd:94:9e:5b:c4:7c:b4:ed:ad:b5:a6:c0:96:
5e:d2:e5:da:d7:b6:03:bb:11:d1:fc:0b:4f:c4:46:
ce:40:75:aa:27:4b:e1:47:75:d1:40:6e:fd:9b:25:
8b:85:0b:45:de:55:72:da:86:da:94:17:7b:28:35:
56:15:18:cd:d1:44:c5:8c:3d:a3:71:71:65:aa:ae:
1a:e5:4b:ea:83:b5:e7:ca:be:12:a1:3f:cd:92:f5:
16:54:db:0e:12:d9:32:a5:b6:9c:aa:30:61:df:af:
2e:7b:07:cd:49:dc:cd:55:db:f3:30:0e:00:ae:b3:
8d:32:07:3d:c0:b3:00:39:4b:6a:bb:e2:fa:6f:8a:
e2:95:f8:2d:4b:18:6a:9b:a2:72:33:53:29:37:f7:
5f:be:d2:8f:a3:a1:f0:1f:dd:a5:fb:1b:5a:d8:3e:
ab:c7:01:7b:05:73:37:29:c8:81:ad:5a:dd:9b:e6:
a4:f7:51:de:8c:52:c9:df:e6:d3:2f:ac:e5:8e:60:
8a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:74:0D:97:FF:55:D0:9F:BF:01:06:6D:8B:51:23:60:63:7B:67:3C
X509v3 Authority Key Identifier:
keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e3:61:41:8e:e0:51:af:58:fd:b7:51:bc:55:1e:d2:18:12:
e2:8f:6c:2e:b2:df:4d:ea:27:59:4c:b9:11:00:b8:f7:0c:7d:
61:86:f2:b6:ff:b6:76:aa:56:12:c1:27:37:f0:02:9f:b1:c1:
6b:67:ce:ac:de:f1:66:69:33:85:ad:2b:f0:fb:ea:da:8e:9a:
59:bc:9c:c0:90:8d:d1:89:be:6c:23:a2:e8:fd:75:14:6a:7e:
06:7a:c9:40:6f:80:48:8c:aa:d6:32:d8:ec:87:11:01:98:dc:
87:8f:dd:30:7e:a0:84:93:cd:69:b7:c4:45:22:88:14:31:c2:
df:c6:17:33:93:49:37:87:e4:2a:76:8b:b9:47:e9:d7:e3:fa:
83:a5:27:ac:b1:b9:96:89:6b:c9:56:4f:68:03:6b:11:cf:30:
1e:6a:4a:ff:92:40:ff:e3:7c:05:13:f0:9f:03:cd:2c:52:95:
c7:92:d2:32:13:53:04:21:44:e5:ff:72:b0:2e:69:34:98:8b:
80:b3:4e:0e:6d:04:63:22:81:d0:7d:e7:28:f8:46:20:84:10:
e7:61:f4:0d:dc:f5:27:56:a7:4e:86:cd:af:db:4e:eb:25:d5:
42:ab:1b:22:cd:4a:73:52:4e:dd:31:43:f7:d1:34:73:17:7a:
c5:37:c1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:42:49 2025 by rpki-client