Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
File: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft (raw, json)
Hash identifier: e/KWK7H5CwGMPcb1HITwXmnf72pAoc/iffLLyMMY1Vo=
Subject key identifier: 7E:0E:3C:8F:42:99:60:7A:1C:A9:98:DA:B4:83:E6:47:0B:F0:88:37
Authority key identifier: 73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C
Certificate issuer: /CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
Certificate serial: 0197684E488B2A33FE3951F9E22B1A48CEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
Manifest number: 0A41
Signing time: Fri 13 Jun 2025 08:00:50 +0000
Manifest this update: Fri 13 Jun 2025 08:00:50 +0000
Manifest next update: Sat 14 Jun 2025 08:00:50 +0000
Files and hashes: 1: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl (hash: 9XXAoNA2VsT2Jh2e0Wta4e1L26UZrILpWzb3xzvA9PM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:48:8b:2a:33:fe:39:51:f9:e2:2b:1a:48:ce:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
Validity
Not Before: Jun 13 08:00:50 2025 GMT
Not After : Jun 14 08:00:50 2025 GMT
Subject: CN=7e0e3c8f4299607a1ca998dab483e6470bf08837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f8:cd:50:78:af:41:0a:7f:a6:40:d7:a0:1b:
35:de:33:03:a9:3d:54:70:e3:cc:6e:fb:81:ad:5b:
4f:e8:ef:04:bb:28:c1:3d:cd:60:ee:b5:75:b3:78:
80:4f:9c:ac:45:65:9f:99:3e:b9:08:36:cc:99:78:
87:c9:ed:14:74:ca:9b:b5:67:92:8f:81:fc:36:2a:
35:83:27:b0:b4:32:52:2e:33:d1:9e:e2:e4:b1:49:
d7:fa:44:92:b7:67:e0:6a:9f:95:1c:d9:80:75:41:
04:a3:ac:21:62:e4:e1:c1:85:f1:d6:67:cd:68:7d:
7e:69:ca:12:01:a4:a6:3c:b4:cb:f0:99:a8:ab:35:
9a:31:88:e7:ce:b2:bb:8f:b7:20:06:8d:11:6a:cb:
23:3c:c7:38:fa:d3:31:a1:39:9e:27:6d:0b:bb:69:
93:01:b1:74:1a:e1:ab:8b:07:92:71:ab:58:8e:6e:
bd:c4:4f:46:6a:6a:de:9b:65:92:e7:89:59:eb:ea:
3b:54:9b:0e:5b:46:d4:3e:75:af:1d:89:ab:40:45:
14:f1:95:ab:79:88:89:f7:ac:6f:61:5d:0a:74:30:
7f:db:3b:7c:69:0d:d6:e4:5e:39:79:7a:80:c5:a6:
45:43:10:f5:cb:06:a7:4e:0f:d3:22:83:fa:f6:f4:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0E:3C:8F:42:99:60:7A:1C:A9:98:DA:B4:83:E6:47:0B:F0:88:37
X509v3 Authority Key Identifier:
keyid:73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:36:ae:78:f6:47:b7:80:49:df:94:b7:02:a1:5b:c8:0d:ff:
ab:a9:2a:cf:43:91:85:41:80:37:30:3e:c8:b0:ab:c3:fc:ca:
d4:2b:e4:7a:5f:20:b9:85:11:57:8d:99:2e:76:6d:98:dd:f5:
e0:45:9b:88:53:7a:8d:1e:8b:cd:37:84:79:16:29:9f:bf:de:
1e:40:9a:c5:c8:74:8d:9d:a3:9d:23:60:fc:f2:66:d5:a3:74:
c1:22:43:ef:c6:d8:1e:6c:54:70:a9:76:1a:cc:fa:44:90:e2:
8e:7f:52:83:b6:04:50:b2:fa:5e:24:ae:17:89:8b:b0:8e:3e:
98:6d:cf:d4:f9:99:29:3a:75:5c:ce:1d:1e:72:71:bd:d1:3f:
c9:0c:66:4a:05:81:48:a9:4b:e1:fc:2e:92:af:c0:e0:f8:d5:
ec:4e:66:38:7a:8e:09:4f:fe:f1:8c:df:d3:08:f3:6c:03:92:
49:27:52:f8:3f:04:1a:f3:09:6e:b4:a2:b1:ee:19:cd:23:c5:
fc:ea:ae:cf:ea:66:88:64:66:a8:f0:47:59:d9:9b:02:d0:2d:
38:7f:26:fd:70:cb:44:10:31:e6:68:fb:20:b2:53:36:50:b3:
1f:96:6e:4f:a7:f2:17:0a:e5:e4:90:07:16:4d:96:c8:2a:55:
87:84:20:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:11 2025 by rpki-client