Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
File: cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft (raw, json)
Hash identifier: J3180l7wj5IyzGhPqwW2xfyaiii1HSg3vIRu7y4mMag=
Subject key identifier: 38:B7:01:34:6A:A1:9C:52:E0:CF:70:BA:89:9B:5F:86:BA:79:4B:44
Authority key identifier: 70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D
Certificate issuer: /CN=70379a6713e79e598d9feaa66dca169188e0218d
Certificate serial: 01976C98AD82404BAFED69DF97C18F66DEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
Manifest number: 0D93
Signing time: Sat 14 Jun 2025 04:00:34 +0000
Manifest this update: Sat 14 Jun 2025 04:00:34 +0000
Manifest next update: Sun 15 Jun 2025 04:00:34 +0000
Files and hashes: 1: cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl (hash: 2Y7p/v5bpOn9HpbR+k6SEMvYFpa9iPRmkeyi9viEyqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:ad:82:40:4b:af:ed:69:df:97:c1:8f:66:de:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70379a6713e79e598d9feaa66dca169188e0218d
Validity
Not Before: Jun 14 04:00:34 2025 GMT
Not After : Jun 15 04:00:34 2025 GMT
Subject: CN=38b701346aa19c52e0cf70ba899b5f86ba794b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:95:87:e7:78:24:1e:e9:97:05:d7:94:53:eb:
f4:16:06:ea:fe:37:10:76:3f:fd:37:45:42:2d:90:
d8:e9:c7:b7:32:f6:a3:90:0e:7a:40:a5:65:47:9e:
df:f4:83:5c:4f:e3:15:cf:d9:9b:4e:f9:be:85:f3:
57:29:1b:c6:35:6a:07:c5:00:73:7f:7a:7e:c2:3b:
b8:f6:d0:12:d2:a2:e6:b1:c2:e2:29:65:bc:f2:e5:
6e:3d:30:b5:02:7c:5c:c6:02:be:c4:12:4d:ea:04:
01:22:fb:fd:c4:e0:b0:5f:6e:fb:1f:e1:68:fa:df:
62:0e:60:43:47:31:42:4b:8d:a2:24:88:ac:e6:8d:
a0:61:2b:f2:2f:2f:a3:3a:b7:57:87:b0:39:9e:f3:
07:7c:c8:6b:b2:af:38:86:a9:f9:6e:15:ad:44:79:
dc:b3:4a:f4:e1:a5:94:85:d7:64:c1:1f:5e:80:33:
08:7b:3e:f1:7b:f1:f4:55:f3:69:90:ad:2a:5a:25:
3f:a3:77:2e:fb:34:b3:2f:88:12:68:8d:ef:29:c8:
53:55:55:2b:bd:4d:53:fd:be:06:68:2b:1d:77:8a:
55:52:c9:c8:87:af:7b:2e:cd:e7:28:e9:6e:9d:d4:
25:01:a2:e2:19:cf:9c:27:27:62:79:cf:a9:cc:12:
9e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B7:01:34:6A:A1:9C:52:E0:CF:70:BA:89:9B:5F:86:BA:79:4B:44
X509v3 Authority Key Identifier:
keyid:70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b7:4f:06:e5:4d:df:12:8f:56:4e:86:0a:f6:f0:a9:d6:1b:
f8:a7:7d:70:af:e2:e5:4f:16:4c:27:a2:27:ce:e5:39:35:ca:
4e:ab:4b:19:3a:46:e3:2a:53:d2:5c:02:09:53:9a:2a:89:5a:
99:7e:e7:c6:ea:b3:26:98:5e:68:52:25:8a:83:93:66:30:e0:
8f:0f:3c:1f:8c:21:33:ca:00:7a:f5:af:f3:0a:be:08:9b:e7:
11:9e:72:2b:0d:84:aa:93:61:1d:9a:1f:7a:c9:4c:68:14:d1:
9c:59:6e:64:c4:26:4e:75:73:d4:18:59:c1:80:5a:b5:32:64:
9f:0e:22:51:9c:ba:50:83:b8:68:ae:f3:55:a8:e8:cc:c0:ab:
58:39:2c:0b:93:7b:62:0e:e1:b7:2a:e2:6d:e0:3b:a4:2a:f0:
91:34:3f:df:06:fa:ff:96:fb:f3:f4:4d:3c:19:6b:bc:93:8f:
64:20:67:e1:19:9c:da:c2:64:40:94:98:ea:a4:c4:70:29:00:
8f:79:63:07:e7:6f:78:fa:57:6e:49:9b:0c:1d:67:f9:47:24:
a3:3c:0b:6c:fb:77:d4:2e:f2:3d:60:4b:db:7a:46:c5:33:2f:
a4:84:8d:49:83:33:fb:b6:5e:c7:1f:e6:9f:1a:66:1b:2c:f8:
00:15:55:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:31:17 2025 by rpki-client