Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
File: M4YMg3IhmQcJz1rqKduBaJU-feA.mft (raw, json)
Hash identifier: Hl7OUzTJ/c/3U2T5gE0h+KHK/DNKEKqQHcbOiqqISHc=
Subject key identifier: 2E:75:96:8C:37:2E:BD:E5:C5:97:87:F2:B9:EC:6B:1D:5E:B3:0E:C5
Authority key identifier: 33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0
Certificate issuer: /CN=33860c837221990709cf5aea29db8168953e7de0
Certificate serial: 01978AA2E08E4FD9F9941A9F5C110092D963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
Manifest number: 06D5
Signing time: Fri 20 Jun 2025 00:00:19 +0000
Manifest this update: Fri 20 Jun 2025 00:00:19 +0000
Manifest next update: Sat 21 Jun 2025 00:00:19 +0000
Files and hashes: 1: M4YMg3IhmQcJz1rqKduBaJU-feA.crl (hash: LJhZZrMz4KT8fVkejBcasUbUAkFeIajF8TqapA25OKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:a2:e0:8e:4f:d9:f9:94:1a:9f:5c:11:00:92:d9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33860c837221990709cf5aea29db8168953e7de0
Validity
Not Before: Jun 20 00:00:19 2025 GMT
Not After : Jun 21 00:00:19 2025 GMT
Subject: CN=2e75968c372ebde5c59787f2b9ec6b1d5eb30ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:46:2c:1c:f4:e5:36:33:1e:90:e1:63:e2:
34:d9:a5:b9:c7:f4:a2:a4:89:a3:dc:9d:30:f1:ba:
3e:36:2e:e4:e1:91:35:9f:9e:2f:81:e5:85:53:92:
b1:d5:34:2c:af:b1:71:34:d7:9d:f9:9c:5d:a8:c6:
e1:45:64:b9:a4:56:dc:7c:3e:56:79:22:b5:1f:62:
98:c3:84:9b:4f:aa:c9:65:4a:fb:d7:56:a8:2c:3e:
e1:49:15:d0:30:77:06:42:e3:3e:c9:22:97:33:34:
2b:9f:d0:c5:4b:f8:44:31:5b:11:5c:37:4b:4f:53:
7f:66:5d:fc:7c:cd:39:78:60:89:60:e9:7a:65:b7:
53:60:8b:e1:db:71:5d:31:5c:22:92:a6:8b:e8:c1:
08:4d:59:65:1c:c3:4f:e2:6e:2c:09:64:d6:7c:30:
78:c6:2b:10:58:ae:11:e0:6d:d4:22:1b:03:85:f0:
65:e4:1f:06:5b:4b:81:f4:a1:92:e3:71:d5:41:92:
63:a5:9a:29:ef:2b:87:ff:49:fb:23:72:d3:4a:c6:
26:7d:b4:e9:e6:95:04:f3:8a:e8:72:03:e1:ee:46:
bd:d4:12:ad:82:58:ea:58:0d:58:09:b5:6f:af:6f:
84:80:42:74:ef:89:69:f2:37:ae:90:0e:74:e1:a8:
0e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:75:96:8C:37:2E:BD:E5:C5:97:87:F2:B9:EC:6B:1D:5E:B3:0E:C5
X509v3 Authority Key Identifier:
keyid:33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2d:97:51:ec:ae:fa:7e:6d:c0:98:d7:fa:a5:59:32:15:a9:
42:35:66:86:82:fa:25:d4:22:9f:ec:db:2d:5d:3d:cf:19:d2:
cb:39:cb:7f:5d:c5:48:7d:0c:5c:38:a6:e4:1f:fa:78:0d:2b:
aa:4b:73:1b:14:23:90:4c:70:f2:ea:e5:ea:58:b3:18:1c:41:
0d:b0:3e:d1:8e:9f:29:40:52:40:c7:2d:d6:72:b1:53:bb:c9:
95:14:a8:aa:f4:98:89:6d:a1:c1:21:a7:9f:46:90:ba:2e:4a:
d5:4b:11:84:35:90:f5:e0:47:8f:f1:ff:68:6a:2a:1a:a0:e8:
bf:41:d5:18:ef:a4:b5:b0:1d:4c:92:3c:d3:7e:91:9c:bf:c7:
36:b3:65:be:9e:40:68:f2:4a:01:f8:80:02:aa:20:88:1e:7c:
0b:71:bd:a3:28:79:51:7f:1b:5a:22:2d:34:86:90:16:5c:99:
af:58:4a:f6:8c:02:58:df:ee:ea:9b:ff:81:20:c1:d9:fe:4d:
60:69:c4:e4:2c:53:50:0c:d1:ed:b8:f4:3c:51:6c:b5:13:9e:
d1:81:96:8c:6e:6a:14:00:de:2f:8b:2e:e4:24:c4:4f:f6:67:
84:fd:4c:55:fc:1b:ce:96:90:5a:c4:16:f4:c7:e2:9e:00:d7:
ab:84:6a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:00:58 2025 by rpki-client