Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
File: sl8gfyfZGpE36LZdKQEpmHGqOh0.mft (raw, json)
Hash identifier: /1tf0TvcCv36t6nVj224U0YpZ0bUfDdd4y0Nf/GuhnU=
Subject key identifier: 34:7A:6A:3B:06:DF:AD:7F:67:4D:4D:70:FE:B9:3F:C6:D5:D1:CA:45
Authority key identifier: B2:5F:20:7F:27:D9:1A:91:37:E8:B6:5D:29:01:29:98:71:AA:3A:1D
Certificate issuer: /CN=b25f207f27d91a9137e8b65d2901299871aa3a1d
Certificate serial: 01974C32395B480D184099C33995CAA3BA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
Manifest number: B5
Signing time: Sat 07 Jun 2025 21:00:49 +0000
Manifest this update: Sat 07 Jun 2025 21:00:49 +0000
Manifest next update: Sun 08 Jun 2025 21:00:49 +0000
Files and hashes: 1: sl8gfyfZGpE36LZdKQEpmHGqOh0.crl (hash: bMKTdU50kNtm3qxGC+wpB65Ua07peAzwbZu7v9r1Iag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:39:5b:48:0d:18:40:99:c3:39:95:ca:a3:ba:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25f207f27d91a9137e8b65d2901299871aa3a1d
Validity
Not Before: Jun 7 21:00:49 2025 GMT
Not After : Jun 8 21:00:49 2025 GMT
Subject: CN=347a6a3b06dfad7f674d4d70feb93fc6d5d1ca45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:56:5b:9b:4d:b6:60:f8:23:ac:3f:b5:13:3a:
04:66:79:db:68:28:17:36:b7:fb:51:74:13:b7:79:
e6:18:ed:2c:27:ef:77:43:1c:80:64:9a:59:75:6d:
f4:5f:4a:0e:b2:fa:c5:5c:9a:1b:87:ff:ba:7a:2a:
6c:e9:7b:5c:8c:6a:98:34:ec:f6:d2:2f:15:55:79:
e4:da:02:52:25:99:e3:77:99:69:d0:b2:59:4c:f1:
26:41:0c:76:84:70:17:36:ea:8b:0a:33:4c:4e:be:
28:55:8f:fa:3c:36:0b:b7:5f:d8:19:ed:01:a3:00:
4c:f1:fc:b1:3b:d8:a2:5b:7c:61:50:f5:81:7b:b6:
05:90:d5:00:7d:54:c2:f5:12:42:52:90:bd:3e:88:
4f:a6:18:55:62:54:a4:c4:63:1e:1d:30:b5:10:6d:
7a:1c:8a:10:e7:88:9f:11:60:42:d1:76:03:09:0c:
ed:dd:b4:84:89:72:a6:ce:d1:c4:27:0f:48:04:ea:
dd:4a:4f:fa:3b:aa:74:31:12:42:62:91:14:29:76:
a1:02:c6:cb:d3:60:29:65:3b:10:3a:b3:47:c6:60:
65:59:db:f2:08:4d:c8:7f:0c:74:8e:11:e2:54:56:
6f:fb:80:79:95:f6:28:44:ce:91:e0:23:17:be:ef:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7A:6A:3B:06:DF:AD:7F:67:4D:4D:70:FE:B9:3F:C6:D5:D1:CA:45
X509v3 Authority Key Identifier:
keyid:B2:5F:20:7F:27:D9:1A:91:37:E8:B6:5D:29:01:29:98:71:AA:3A:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a4:2d:cb:67:36:3a:f5:8b:d9:43:90:30:a0:95:9c:a2:66:
0c:7c:1d:19:1c:f4:1b:2e:9f:29:d2:d8:99:6f:17:f1:a7:62:
c0:08:e0:e6:ca:b7:0e:6a:6b:c7:6b:20:68:12:71:61:5e:d6:
26:49:b6:31:a9:4e:62:22:9f:08:93:49:31:f3:7c:d0:e8:98:
54:3d:66:44:53:58:06:10:72:ee:1b:ab:02:2d:e6:19:49:d9:
63:ef:be:8a:ac:b3:36:2e:85:96:ac:63:96:bc:7c:77:7e:01:
49:1b:5e:96:3a:cd:f1:4e:78:12:c0:60:25:84:8a:16:82:0c:
bc:35:29:2c:00:19:d6:27:4f:7b:a0:4c:19:27:f4:fc:b0:87:
a4:65:8d:6a:70:b1:49:fc:dc:53:58:7c:5e:09:81:54:27:59:
1f:9f:90:6b:64:eb:63:aa:7e:97:5e:31:9b:2e:67:e4:f8:8a:
96:fb:f5:d3:09:90:8c:1e:2b:5c:cc:1a:32:ea:cb:28:de:12:
9a:ec:9a:1c:4e:8e:b2:db:4b:5f:b5:49:29:b7:5e:09:a2:27:
4c:ae:9e:63:74:4b:94:73:50:0c:4c:18:0b:99:aa:c0:85:bc:
9e:92:4a:f5:aa:b9:6a:16:35:44:14:ed:94:5e:27:39:de:62:
94:89:e9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:51:47 2025 by rpki-client