Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: IguPn9BviyuINifrfcogZDD++k3DAolktejsJQdr+yc=
Subject key identifier: 97:2D:98:29:5B:75:A8:90:03:51:61:0E:3B:2A:FA:28:30:FA:12:0A
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 01974BC4030D4A935449FF9589F85A8C1975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 1513
Signing time: Sat 07 Jun 2025 19:00:26 +0000
Manifest this update: Sat 07 Jun 2025 19:00:26 +0000
Manifest next update: Sun 08 Jun 2025 19:00:26 +0000
Files and hashes: 1: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: CpTGKoqXNoC7T4F4gwwuzjfm+OYF5AnI8YxrKO9oYnw=)
2: pi-26F4PeqiMAjfpczMwVUa13T4.roa (hash: Vruq+xuvPpEjrPLqBdBog4T5WQxUoJKp5FP5nL6SSoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:03:0d:4a:93:54:49:ff:95:89:f8:5a:8c:19:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: Jun 7 19:00:26 2025 GMT
Not After : Jun 8 19:00:26 2025 GMT
Subject: CN=972d98295b75a8900351610e3b2afa2830fa120a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:8f:be:36:ed:9f:ff:f9:dc:85:b7:92:2f:
bd:7a:0c:79:95:13:b5:77:37:35:cc:81:0b:a6:d5:
44:67:dc:67:99:71:a4:1a:f1:d1:c8:f6:d1:61:29:
31:80:0d:60:65:0c:7b:94:a9:c9:a0:49:d5:cb:01:
9e:8e:fa:07:20:0d:77:48:06:71:c4:83:ea:82:7b:
41:a6:0d:61:09:0c:4d:bb:aa:f9:92:97:23:fb:ea:
e2:65:99:7e:f6:80:75:5a:cc:22:d9:c6:b5:19:99:
6c:6f:0d:b2:e5:1c:51:5a:02:ac:a2:6a:f1:a9:8f:
cf:27:a3:b1:c7:f6:9c:c7:78:ec:df:6e:1d:a8:4c:
99:d0:90:b5:39:ba:b2:83:6b:cd:f5:99:35:f1:c9:
66:34:eb:d1:ae:2a:d6:83:0c:bc:54:94:d4:85:94:
74:7f:9a:36:89:00:d4:31:cf:c6:79:1e:6d:6a:26:
1c:af:d0:ac:12:f1:8e:e6:47:6d:7c:37:1a:c8:16:
fd:98:b5:b9:4e:b8:55:62:0e:2e:11:d0:c4:fc:71:
24:af:6d:c8:30:51:67:15:93:63:25:26:a1:7f:d5:
b2:d9:8e:4c:0f:97:b7:fe:09:35:17:87:0b:73:ce:
ab:a2:45:3f:be:13:81:6c:b9:e9:7c:8d:b0:0f:30:
ae:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2D:98:29:5B:75:A8:90:03:51:61:0E:3B:2A:FA:28:30:FA:12:0A
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0b:c9:bf:b5:96:f4:48:f8:ec:d5:e3:71:b4:f2:ff:be:dc:
67:d9:11:f4:a9:5a:d9:73:09:eb:9e:41:eb:82:44:0b:d0:23:
86:fd:98:31:61:0a:e3:14:c8:70:7f:8e:de:85:2b:0a:ab:54:
cc:89:84:e8:8d:d6:7f:13:d3:a7:91:84:25:94:d2:be:3b:77:
40:a6:8c:9b:70:7e:d7:73:d2:d8:a3:2d:2c:0e:62:60:87:06:
ac:27:fc:48:26:e0:34:67:78:98:4f:95:0c:1e:f7:eb:4c:78:
fb:72:f8:55:75:52:12:98:fa:40:96:34:88:26:78:f9:a7:eb:
26:26:c3:d8:3b:37:30:56:1d:0f:1f:c7:7f:7a:57:9e:f4:da:
d4:c2:27:11:f7:3c:c7:cd:aa:42:aa:47:aa:2f:03:b0:d2:d0:
14:a6:5e:2a:1a:d8:e6:ab:00:c8:2e:c2:e0:97:51:d4:69:5d:
19:de:3a:c1:f9:f2:57:87:e9:cd:8a:d1:b9:6c:26:f1:bd:25:
09:1b:01:b4:2c:8d:1a:b1:45:dc:9d:2f:ee:f3:17:b4:64:27:
b1:a0:81:df:73:a1:bc:b2:62:2c:73:96:1c:e7:0b:71:07:30:
98:6c:da:8b:ea:ee:56:5a:74:46:c6:87:93:79:56:da:7e:ac:
08:4a:c0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:28:13 2025 by rpki-client