Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft
File: uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft (raw, json)
Hash identifier: zAWBBr8vhy+QL4uoxVV5YAvUuh9u720MqUNa2ItIz9k=
Subject key identifier: AD:40:F8:28:B0:62:5B:D4:CE:B2:1E:AA:0B:C4:21:64:F0:EE:5A:65
Authority key identifier: B8:8F:F8:6C:47:17:E0:E3:66:F2:90:CD:0D:62:8A:FC:46:A3:8F:0D
Certificate issuer: /CN=b88ff86c4717e0e366f290cd0d628afc46a38f0d
Certificate serial: 01974A7A9DEC1EA95E71AAD27AE9120FB448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uI_4bEcX4ONm8pDNDWKK_Eajjw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft
Manifest number: 0EE3
Signing time: Sat 07 Jun 2025 13:00:39 +0000
Manifest this update: Sat 07 Jun 2025 13:00:39 +0000
Manifest next update: Sun 08 Jun 2025 13:00:39 +0000
Files and hashes: 1: uI_4bEcX4ONm8pDNDWKK_Eajjw0.crl (hash: H/HrjW52r1z8LxytCQ1XrUbqdZkhfWZPe0foO7fXsMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uI_4bEcX4ONm8pDNDWKK_Eajjw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:9d:ec:1e:a9:5e:71:aa:d2:7a:e9:12:0f:b4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b88ff86c4717e0e366f290cd0d628afc46a38f0d
Validity
Not Before: Jun 7 13:00:39 2025 GMT
Not After : Jun 8 13:00:39 2025 GMT
Subject: CN=ad40f828b0625bd4ceb21eaa0bc42164f0ee5a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:b3:2e:4e:e0:cd:b5:cd:6a:6e:93:f6:7f:
6c:ad:60:8b:b9:f3:fb:1e:00:d9:2c:2a:79:ef:9b:
ee:99:66:9f:3c:bd:f5:08:dd:4f:0e:03:39:fc:e8:
d9:ad:81:e4:37:af:fc:f5:22:e6:8b:2c:e5:92:d4:
30:9b:e8:65:8d:bf:90:fd:77:68:5e:6a:d5:16:29:
3f:13:64:e4:06:99:b8:21:8a:4c:37:9c:63:22:d2:
2d:25:9f:44:cf:92:e0:97:9b:47:b9:a0:01:9e:48:
da:1c:47:91:1b:37:fb:09:0a:28:53:87:b2:d3:3b:
e5:c9:e2:af:49:4e:bd:30:f6:39:4c:0a:d5:27:cd:
58:b7:ba:e4:ac:78:23:8b:f7:94:7b:33:cb:ef:1c:
be:c1:10:a5:f9:0b:c9:6f:73:6b:f7:06:44:40:57:
0e:af:22:4b:95:a1:f8:8d:ce:ff:c2:43:b3:37:2d:
28:ee:7f:6d:e9:f3:99:d1:a2:61:30:1b:a3:91:40:
ac:20:c8:b6:bc:a5:59:2e:a5:7c:a9:79:3a:96:03:
67:d3:58:a6:92:33:25:d5:7a:5a:c5:d0:b9:36:58:
48:0e:f1:90:f2:9a:40:d3:a8:3e:c6:62:56:4f:b6:
1e:ec:50:1e:d6:21:c5:9f:8a:8f:84:4d:3b:30:f9:
dc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:40:F8:28:B0:62:5B:D4:CE:B2:1E:AA:0B:C4:21:64:F0:EE:5A:65
X509v3 Authority Key Identifier:
keyid:B8:8F:F8:6C:47:17:E0:E3:66:F2:90:CD:0D:62:8A:FC:46:A3:8F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uI_4bEcX4ONm8pDNDWKK_Eajjw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:84:4e:4a:66:6a:0d:9d:73:30:6c:80:bd:fa:3b:f7:9a:9e:
73:70:9f:f2:4c:9e:6f:1e:36:35:20:83:fd:e4:d0:dd:fa:81:
56:d9:9f:ec:7a:de:72:4f:33:6d:40:89:4b:45:c2:ed:2d:83:
16:ed:bc:bc:ec:7c:11:9c:fb:05:00:7d:89:b9:f0:4c:4c:d9:
8e:cc:0f:84:ad:43:04:a0:81:64:f8:91:81:60:d2:68:00:81:
9b:c9:b8:13:0f:92:92:2a:9d:77:6c:66:c7:24:5d:db:66:53:
d7:b4:d9:44:36:ab:23:d0:5a:20:64:20:33:5b:ea:49:0e:30:
ef:f5:88:3e:08:ce:38:3d:a7:6d:55:8f:1c:2e:50:f5:86:5b:
20:b9:b3:bf:e4:ea:f6:fd:1e:5f:c1:1d:51:cc:8d:22:60:12:
12:8b:47:97:19:c7:d6:c9:82:de:0c:96:0a:74:07:2b:98:36:
12:db:d9:59:2b:f5:27:6a:f7:5c:15:00:22:88:26:d5:6a:c3:
d1:66:01:d1:97:1e:9c:32:57:f3:44:b2:7a:30:6f:e2:b7:bd:
60:91:dd:3e:ea:0c:63:e7:7d:cb:27:4b:92:9f:01:27:a0:49:
9c:e4:49:e5:4d:fa:8a:47:1e:a6:95:3e:bc:57:a1:ed:f8:8f:
12:8e:10:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:35 2025 by rpki-client