Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
File: 861SH4OIdIPIybDG895f1e1Whck.mft (raw, json)
Hash identifier: yBUNsLVWmi45+Gx34pxH29j4FLhRA0pY1TMRAAiFWnQ=
Subject key identifier: 35:A1:D9:96:F0:B4:87:7A:8C:32:8C:65:22:5E:3F:F9:DF:2D:3B:34
Authority key identifier: F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
Certificate issuer: /CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Certificate serial: 01987B9CDDA7E9D1E33FD06D1BE54AD6F5E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
Manifest number: 0BA5
Signing time: Tue 05 Aug 2025 19:02:14 +0000
Manifest this update: Tue 05 Aug 2025 19:02:14 +0000
Manifest next update: Wed 06 Aug 2025 19:02:14 +0000
Files and hashes: 1: 861SH4OIdIPIybDG895f1e1Whck.crl (hash: ZxGkEIdsqwMogkKtOrW2zr+6NLe7rYHI6o/ZTv0rgiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:dd:a7:e9:d1:e3:3f:d0:6d:1b:e5:4a:d6:f5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Validity
Not Before: Aug 5 19:02:14 2025 GMT
Not After : Aug 6 19:02:14 2025 GMT
Subject: CN=35a1d996f0b4877a8c328c65225e3ff9df2d3b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:11:e3:ca:60:6f:4a:56:67:26:1e:bf:e9:
c4:30:5e:22:8d:37:6a:58:7f:a1:ad:6c:e4:87:13:
2f:45:99:cc:ea:25:df:da:e9:e9:bc:1b:a3:34:99:
93:2a:4c:d2:ea:df:dd:0f:bb:ca:73:3b:fa:c6:fc:
d7:fa:5b:65:e5:43:41:ac:d3:a9:7e:92:18:cc:19:
37:59:40:25:f2:4b:4b:a6:ca:24:64:73:f0:33:b4:
76:b5:c6:33:09:fd:13:32:84:d2:70:6b:b1:10:a3:
b9:6e:3a:96:a4:65:7a:ef:ce:f7:39:00:8f:a0:e7:
b5:e1:dd:20:e8:06:98:4e:d0:84:78:4e:60:2a:e5:
b5:c9:96:22:3a:47:56:02:fa:b8:3e:80:05:9a:01:
fe:65:c2:27:3f:03:9b:dd:8f:ce:1e:70:e4:4f:03:
7a:a7:c9:fe:1f:3c:b2:c2:d0:01:3e:00:02:be:aa:
3c:0a:f4:3c:64:bc:b9:1b:8c:df:13:82:eb:a0:11:
a8:9a:7c:65:e9:b8:3d:b9:ac:b7:0e:00:85:94:14:
ad:bd:89:0d:cd:95:42:40:24:96:6a:99:d0:07:69:
51:05:c0:f0:49:09:43:c2:3d:af:7a:00:0c:6d:a0:
e7:b1:4e:96:22:b1:d1:09:bf:47:cc:2f:ad:36:92:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A1:D9:96:F0:B4:87:7A:8C:32:8C:65:22:5E:3F:F9:DF:2D:3B:34
X509v3 Authority Key Identifier:
keyid:F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7c:9e:fb:31:0c:ba:be:6f:5c:22:b8:80:e2:76:14:9c:b8:
d7:7c:81:01:c2:ca:f0:f0:59:86:9c:d3:e7:ee:db:ac:af:09:
3a:b6:f4:cf:29:c4:3b:56:3d:aa:43:3b:4a:3c:4a:47:e1:e8:
68:35:e4:23:d6:09:bc:29:5d:af:d5:5c:47:4c:b4:11:d0:65:
80:e6:54:d6:3b:fe:58:0f:43:de:49:5e:7e:bc:7a:c8:32:f9:
3b:74:ae:0d:0f:d9:d8:4d:70:b2:a4:2d:d5:1e:51:60:57:96:
a2:2b:2c:e1:d2:80:43:73:4b:10:ee:d2:89:7c:1c:06:92:8a:
a8:17:d1:8a:2d:9f:80:f5:f6:e9:cf:69:07:4d:08:23:05:7e:
eb:0a:0b:2c:d9:b5:53:49:48:c3:9e:fe:85:f5:32:77:8d:14:
ed:5a:90:f3:0b:b4:2d:cf:a0:14:60:bd:6f:27:ba:48:70:b7:
d1:5d:80:dc:38:65:20:a4:e1:25:7a:9b:d6:3f:2b:7a:e1:da:
16:5b:69:2e:db:62:61:27:32:77:86:da:d5:b6:1d:0f:29:0c:
28:05:d7:43:8f:e0:ea:79:eb:1b:7e:8b:f0:07:ad:c8:d6:13:
63:3d:4d:c9:95:25:13:7e:40:89:13:4d:9a:37:cd:e2:b1:7e:
b9:a8:60:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:49:49 2025 by rpki-client