Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
File: 55hPlAuxPQUcj4led5ZSsFrgwLM.mft (raw, json)
Hash identifier: CH5kQ2c83+66GCZsPeFEIrEzcCGrFW24D9/NYnvcYcI=
Subject key identifier: F3:FF:9C:E1:06:A7:93:1D:8D:19:D4:9E:9C:D4:52:CC:70:9E:3C:1B
Authority key identifier: E7:98:4F:94:0B:B1:3D:05:1C:8F:89:5E:77:96:52:B0:5A:E0:C0:B3
Certificate issuer: /CN=e7984f940bb13d051c8f895e779652b05ae0c0b3
Certificate serial: 019768BBCDC8E25B2697B959CBE6CBD6CE97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55hPlAuxPQUcj4led5ZSsFrgwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
Manifest number: 09DF
Signing time: Fri 13 Jun 2025 10:00:27 +0000
Manifest this update: Fri 13 Jun 2025 10:00:27 +0000
Manifest next update: Sat 14 Jun 2025 10:00:27 +0000
Files and hashes: 1: 55hPlAuxPQUcj4led5ZSsFrgwLM.crl (hash: RyR1me5rnwI3EeC4o/tRfsk+QeYcEnejADxYm8o/9M8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/55hPlAuxPQUcj4led5ZSsFrgwLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:cd:c8:e2:5b:26:97:b9:59:cb:e6:cb:d6:ce:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7984f940bb13d051c8f895e779652b05ae0c0b3
Validity
Not Before: Jun 13 10:00:27 2025 GMT
Not After : Jun 14 10:00:27 2025 GMT
Subject: CN=f3ff9ce106a7931d8d19d49e9cd452cc709e3c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:de:10:e2:8c:d0:d6:65:99:72:0e:47:a9:
6f:8b:6a:70:f0:bf:dd:6d:99:bd:fc:33:f8:42:91:
f4:d8:65:5e:85:28:86:29:89:21:69:5d:b0:99:41:
5a:e1:60:32:76:0c:a3:df:f5:98:c7:01:d2:15:3f:
65:60:18:6b:e3:a3:3b:2f:ef:80:fb:5b:95:9e:39:
2b:40:e8:f2:5a:11:0f:0d:03:ed:ca:1f:db:3b:91:
59:01:33:e4:40:8a:64:28:a4:0c:ae:33:f5:7d:5b:
45:69:41:75:e5:92:f3:0e:16:03:b6:f5:fb:7b:b0:
fe:6c:e2:67:af:10:32:bb:42:9e:33:21:b8:f2:85:
dc:04:3e:26:9c:a9:b9:b3:ee:6a:e7:f9:af:b9:0b:
ac:46:41:c2:4c:7a:3b:2b:64:58:08:61:4d:5d:6e:
47:5a:c3:de:f0:55:5d:8e:ad:b3:88:04:07:9a:cf:
12:08:a1:41:08:1c:a6:60:27:02:34:92:e5:5d:5e:
85:fb:b4:70:30:bf:5a:a9:7a:40:c9:26:1b:39:84:
aa:cc:01:fc:c4:4d:f4:f0:ab:89:3a:19:b7:32:84:
de:0d:6b:b4:58:b4:cc:d3:d5:a8:6c:57:a1:2e:1c:
31:05:fb:f6:65:65:40:3b:e6:10:5f:9d:38:b4:0a:
14:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FF:9C:E1:06:A7:93:1D:8D:19:D4:9E:9C:D4:52:CC:70:9E:3C:1B
X509v3 Authority Key Identifier:
keyid:E7:98:4F:94:0B:B1:3D:05:1C:8F:89:5E:77:96:52:B0:5A:E0:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55hPlAuxPQUcj4led5ZSsFrgwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:42:e5:1b:7d:90:83:d4:34:5b:2c:c6:e2:0c:26:e8:38:e0:
b2:a6:d7:08:88:2e:4b:74:ff:00:93:df:2a:9d:3a:83:e7:9d:
04:77:a0:99:5e:47:5b:37:86:f9:78:8f:6a:95:a7:2a:6e:84:
16:d4:8f:81:6e:63:72:1a:3d:77:86:15:3f:46:cc:fd:e9:d9:
9e:5e:fd:32:04:de:5b:db:54:20:3c:a6:cf:77:16:04:80:64:
55:cb:9a:08:6d:66:14:19:0e:07:ca:d7:88:8e:b3:58:a7:10:
ee:90:db:46:fc:9e:b9:41:f8:49:ae:0c:e4:a1:ee:b3:bb:33:
ef:39:c9:1b:25:66:6b:3d:aa:0a:8f:32:80:28:15:64:84:38:
f3:09:c2:50:fe:45:47:73:c0:6e:a2:43:28:41:2f:70:f9:18:
f1:12:47:0e:86:14:2c:87:df:05:24:e4:26:51:09:2f:89:dc:
2e:85:85:2f:f8:d8:b2:83:8d:f8:95:d3:25:23:f8:c5:5c:0c:
68:ac:66:7f:4c:8c:65:09:f8:bf:89:d6:43:46:49:1a:bc:a6:
cd:38:4d:71:1d:b1:b5:21:23:09:06:60:f1:38:cd:0a:1b:ec:
fe:a4:96:7a:46:fa:7f:38:6c:8c:9a:23:8e:0c:fc:35:74:18:
64:fc:5a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:48 2025 by rpki-client