Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
File: kVijd10MXrOPIPDvmjYRBhpRlbM.mft (raw, json)
Hash identifier: gYIBOIpMCuRSJG6U0mSKnBcmiCKcvZKHhwofibfvrVY=
Subject key identifier: 10:97:09:58:8C:02:EC:6F:AA:CE:D7:6A:8A:A0:84:0F:DE:E9:14:E6
Authority key identifier: 91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3
Certificate issuer: /CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3
Certificate serial: 019747E79795760AE3655D4A9DED3455FEE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 01:00:49 +0000
Manifest this update: Sat 07 Jun 2025 01:00:49 +0000
Manifest next update: Sun 08 Jun 2025 01:00:49 +0000
Files and hashes: 1: kVijd10MXrOPIPDvmjYRBhpRlbM.crl (hash: 47sQ9GQY5vo+xv58964fV6OXG+8PhRiXedoRBT0VC/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:97:95:76:0a:e3:65:5d:4a:9d:ed:34:55:fe:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3
Validity
Not Before: Jun 7 01:00:49 2025 GMT
Not After : Jun 8 01:00:49 2025 GMT
Subject: CN=109709588c02ec6faaced76a8aa0840fdee914e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b2:0c:2d:0f:00:aa:3c:c2:e5:2b:61:95:d3:
03:8a:39:ff:33:6f:1a:04:6a:be:97:87:c2:2f:cf:
ff:80:30:60:24:51:f9:ea:48:a0:1d:e7:38:2f:77:
85:ad:ce:ac:fd:6c:b7:88:82:cb:c0:c9:1e:d2:5c:
2a:d0:26:0c:13:b0:06:57:69:01:06:79:dc:f9:2a:
2d:0c:c8:a5:46:a4:e7:50:3e:c8:7c:c7:c5:ad:71:
73:c7:3a:f2:d7:48:7a:61:e7:2f:50:84:b7:97:fd:
eb:6b:d9:e0:98:8a:2a:dd:33:f8:ce:5e:27:1c:2b:
f0:3c:ed:55:d2:1c:69:2c:58:41:18:46:7d:e5:77:
bb:4f:e3:c4:29:3c:fd:1c:d8:27:45:98:fd:01:90:
c1:26:5f:00:8e:a2:8c:7e:da:e1:72:9f:69:08:f2:
37:d7:ae:92:71:4e:9f:dd:c8:e7:9e:66:82:66:ae:
5b:66:7f:a1:08:86:b3:29:4b:ea:63:78:b9:46:a6:
97:33:03:03:36:b2:5b:83:e9:65:4d:a0:e5:54:fd:
3b:ae:be:8d:94:f7:b2:53:6b:4f:c9:41:05:b9:e3:
63:17:47:87:f9:84:b0:1b:42:f3:e7:3b:6b:e9:f9:
d4:8c:68:67:85:27:59:53:43:d2:87:d7:e7:af:36:
d9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:97:09:58:8C:02:EC:6F:AA:CE:D7:6A:8A:A0:84:0F:DE:E9:14:E6
X509v3 Authority Key Identifier:
keyid:91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0a:9b:3c:86:ab:fe:2b:75:5e:21:86:10:25:23:ec:d7:cd:
fd:6b:1c:8f:b7:56:d4:57:8a:dd:ee:67:2f:2f:6a:86:21:4f:
a8:2d:77:54:8f:c0:8e:17:19:98:e3:b4:30:70:5d:8e:45:69:
94:bc:5b:ff:f4:48:20:91:c9:5a:e1:c7:64:bc:51:5f:15:9a:
88:57:23:47:bb:f0:5a:e9:99:29:9b:e3:74:a8:7c:1f:a9:52:
d7:96:5d:56:0c:4e:0c:3a:2a:32:68:d1:0d:5d:40:53:05:33:
d6:82:58:00:3e:c5:d1:68:d3:89:9c:ef:43:8e:d2:b6:a3:62:
05:1b:94:84:b1:dd:17:ef:27:67:59:20:47:6a:4b:73:d6:62:
53:c0:83:3e:0a:f6:cb:34:d1:c4:3b:d9:df:a6:a4:2a:6f:51:
f0:82:d3:85:b7:e8:11:31:1a:53:24:5a:53:f5:67:82:84:0f:
ef:56:00:53:f9:c6:24:58:ac:7d:89:14:65:72:60:aa:b6:04:
45:08:18:50:15:54:48:99:02:e5:d5:29:3b:9a:cd:01:a6:af:
d0:bf:2d:e6:97:98:8f:1a:23:68:fe:75:ae:16:18:84:8d:c1:
4b:89:31:9d:7a:a2:84:7b:f2:ca:d0:4b:5e:14:90:29:6d:0d:
aa:94:cc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:15:36 2025 by rpki-client