Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
File: AclpL7GkCf800a87grjj2mRnXDI.mft (raw, json)
Hash identifier: OoAKOiNykQRtOL3rHRy3MpsfkjwQUQax/IkWKwct22Q=
Subject key identifier: 42:89:9E:04:8E:54:50:80:17:46:E7:34:C4:08:AD:E6:88:32:71:B5
Authority key identifier: 01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
Certificate issuer: /CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Certificate serial: 01976D3E067AF6502BBBCADBE3544214789E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
Manifest number: 0B04
Signing time: Sat 14 Jun 2025 07:01:10 +0000
Manifest this update: Sat 14 Jun 2025 07:01:10 +0000
Manifest next update: Sun 15 Jun 2025 07:01:10 +0000
Files and hashes: 1: AclpL7GkCf800a87grjj2mRnXDI.crl (hash: wBgefy/IbBXBCY2vaSp6S8GUo9NXUiAG5NxO12r7+q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:06:7a:f6:50:2b:bb:ca:db:e3:54:42:14:78:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Validity
Not Before: Jun 14 07:01:10 2025 GMT
Not After : Jun 15 07:01:10 2025 GMT
Subject: CN=42899e048e5450801746e734c408ade6883271b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8d:8b:64:83:e3:93:33:4e:dd:bb:5a:01:f4:
04:81:2d:74:1c:87:d9:80:a6:2f:5e:8b:e9:34:b4:
57:2a:ed:e3:f4:32:ab:4e:91:33:40:34:12:51:69:
18:76:bc:e6:12:5c:b1:cf:5b:b7:82:d9:80:b2:27:
bd:69:ec:3f:4d:c1:c2:63:21:74:90:11:ae:db:c7:
34:1e:4e:fd:2e:b4:3b:b7:43:35:3f:38:41:6d:f4:
c7:e5:a8:49:eb:2c:fe:c6:2e:d4:e4:1f:df:9e:05:
d6:bb:e3:96:65:aa:28:d0:66:ea:21:ee:d7:76:75:
ff:70:0f:1e:8a:a4:60:d7:28:44:c2:65:e1:96:24:
c8:34:f1:bf:9e:2f:b5:70:c5:b0:62:64:f0:7e:c0:
fc:f2:12:66:e1:12:fa:59:5d:18:c8:6a:c7:6c:0f:
16:a8:da:92:69:d5:b1:d7:92:69:f5:b4:6f:f2:17:
74:30:6b:41:dd:79:51:90:37:cf:b3:11:0b:75:6e:
42:f1:1b:b0:5e:dc:df:4f:f6:d6:1b:e8:9a:8c:1d:
82:9b:1f:e6:1d:4a:e6:fb:34:ae:64:bc:c6:1b:ec:
55:5c:a0:81:cf:2c:18:ff:5f:8a:bc:ee:56:06:89:
79:fe:d4:c9:6b:94:32:96:cd:cf:97:48:41:5a:29:
17:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:89:9E:04:8E:54:50:80:17:46:E7:34:C4:08:AD:E6:88:32:71:B5
X509v3 Authority Key Identifier:
keyid:01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5d:e6:28:c6:0a:e4:82:a4:68:1f:37:d7:4e:61:46:8e:6d:
5f:74:d2:7d:87:d7:f8:b8:cb:63:c3:05:56:90:df:a1:b5:c2:
89:f4:96:75:3a:dd:9d:41:f0:f8:23:9a:0d:dc:d0:fe:d1:eb:
cd:b1:55:b9:a8:65:bb:d9:d6:25:e4:32:c8:d1:55:99:2d:fd:
82:75:73:1e:50:b8:f9:e4:d4:4e:22:36:6e:98:74:2c:5a:34:
da:01:80:d2:82:bb:a5:4d:50:2d:b1:a9:2a:92:7a:c1:88:59:
29:3e:2c:49:75:13:63:83:fe:67:f9:ea:c1:53:d5:30:8f:ae:
f6:d2:cf:e6:43:2c:20:dc:b2:a5:82:51:2b:72:3d:64:9a:be:
91:41:ef:2f:76:9b:46:fb:0c:aa:0d:e4:ae:54:30:b0:b4:71:
a4:7e:27:37:7d:b6:4b:fd:b7:4d:75:fc:7a:92:67:23:02:76:
c9:e2:da:d9:9c:b0:b4:f1:b3:1c:fc:62:95:38:b0:93:a9:cf:
29:ee:be:3f:33:64:5a:29:10:74:68:cc:15:24:44:56:35:56:
9e:2b:3c:86:71:3d:b5:5b:b4:46:04:47:f6:b0:09:46:ec:cc:
42:13:d5:b5:96:84:64:eb:87:25:e4:72:b3:04:75:bc:af:11:
67:8f:64:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:28:45 2025 by rpki-client