Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
File: RX6_qZz102gBj6f-DBEjQfXTZcA.mft (raw, json)
Hash identifier: OtyDc68XoO46NZ/Rc/SXT7Uvi1RY925Y1OxvMaz+xuo=
Subject key identifier: 70:C4:BA:FF:C6:B2:5C:41:8F:B8:34:A3:07:A0:04:8F:9F:FC:29:44
Authority key identifier: 45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0
Certificate issuer: /CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0
Certificate serial: 01976C2A9E1C388C53683877DDC1B8897AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
Manifest number: 0343
Signing time: Sat 14 Jun 2025 02:00:21 +0000
Manifest this update: Sat 14 Jun 2025 02:00:21 +0000
Manifest next update: Sun 15 Jun 2025 02:00:21 +0000
Files and hashes: 1: RX6_qZz102gBj6f-DBEjQfXTZcA.crl (hash: UujfF42qIqOL88Yn12Zi72Qv0Wu+4MGuiq3DIXlSLto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:9e:1c:38:8c:53:68:38:77:dd:c1:b8:89:7a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0
Validity
Not Before: Jun 14 02:00:21 2025 GMT
Not After : Jun 15 02:00:21 2025 GMT
Subject: CN=70c4baffc6b25c418fb834a307a0048f9ffc2944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4b:06:e0:5f:bf:b9:15:31:06:80:ea:b3:2a:
1f:9e:77:35:34:c2:11:f4:52:93:f3:dd:95:4e:d9:
8f:6d:13:ab:16:64:28:14:27:fa:a5:22:6e:c3:2a:
64:b6:18:22:dd:b9:61:0e:fb:d2:db:d8:ca:da:ec:
55:bf:4b:98:19:8b:f7:0a:c8:be:85:81:7b:7a:d9:
c5:2e:22:bd:61:53:4d:db:d9:86:c8:f4:83:23:1c:
e0:c2:32:be:be:d1:37:d9:46:27:d3:07:54:8f:fa:
c8:ad:50:12:ad:ab:7c:6e:ce:72:d4:07:3d:21:83:
31:b3:de:f4:1b:d8:51:f1:8e:85:97:49:51:c4:53:
b1:cc:a2:f9:3a:b3:7f:e6:32:eb:b3:14:9c:a6:49:
0d:76:49:fb:01:58:1b:ff:b2:8f:aa:a3:80:31:98:
35:dc:17:92:f2:72:e1:6f:0c:6d:58:b4:69:37:5d:
ae:98:7a:5c:fc:07:ba:da:60:42:5a:a0:b7:9b:b8:
e9:3a:5f:c8:fd:5d:3c:e6:4f:2e:21:33:9b:a6:f3:
cd:4d:c9:01:d2:4a:21:fa:7f:a9:13:a0:3f:5e:4c:
6d:45:aa:ed:4e:47:38:db:64:cf:d0:62:76:85:31:
63:c5:ac:37:3b:7e:90:12:10:6a:aa:a1:99:70:b1:
77:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C4:BA:FF:C6:B2:5C:41:8F:B8:34:A3:07:A0:04:8F:9F:FC:29:44
X509v3 Authority Key Identifier:
keyid:45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ca:24:4b:99:96:8a:c0:5e:81:9b:b0:7a:a1:ac:49:63:90:
85:78:8a:42:44:28:d6:95:f1:46:90:33:c8:a2:97:eb:e9:63:
45:2d:5b:51:e8:d0:0e:6f:c2:0b:f4:b7:b8:12:3d:cc:bd:c8:
eb:57:f9:76:e3:b6:cd:58:6d:59:87:df:84:f8:e9:b4:83:57:
29:59:0b:44:b7:00:81:f9:ff:e0:ec:be:ec:e9:20:d9:f9:f5:
71:c8:27:a9:cc:98:75:d8:b4:3e:f6:12:08:da:ab:af:c8:82:
04:c6:97:36:8c:44:a9:a9:4d:b8:d3:8b:bd:cc:d3:7f:c0:9c:
2e:65:cd:76:ea:37:a5:4c:47:92:9d:7f:60:e9:b4:9b:2a:b7:
62:83:f1:f4:1f:dc:c7:33:9f:ad:24:7e:19:9f:45:f1:ab:cf:
6f:86:44:c0:83:06:c4:bf:9c:de:b6:19:ea:cb:e6:4b:19:4b:
71:48:31:2f:43:6c:cd:93:d3:be:fb:cc:77:8b:4e:6d:a4:b5:
c0:04:21:b6:ab:ac:90:0f:ba:0a:c5:47:35:4a:f6:22:6c:af:
6f:38:b3:8a:f5:ad:97:69:75:f1:07:e1:1d:2d:57:f3:9a:09:
45:2a:9e:dc:ad:d1:28:f8:e5:2c:12:a8:ac:22:94:1c:d9:ba:
99:b9:2d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:07:42 2025 by rpki-client