Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.mft
File: r5aNFt0rQdNStf0zxJs-xP2tQlg.mft (raw, json)
Hash identifier: fHfzdssF43EdrlVx/bVS6m2J7pJSVcyf/HwTG8vkER0=
Subject key identifier: F4:D4:FE:D9:75:3E:48:44:6E:AF:D7:E4:6E:3F:63:9F:B2:1F:67:92
Authority key identifier: AF:96:8D:16:DD:2B:41:D3:52:B5:FD:33:C4:9B:3E:C4:FD:AD:42:58
Certificate issuer: /CN=af968d16dd2b41d352b5fd33c49b3ec4fdad4258
Certificate serial: 019768BBEBF83C87E395D1B7FE73DEB94091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5aNFt0rQdNStf0zxJs-xP2tQlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.mft
Manifest number: 0E9D
Signing time: Fri 13 Jun 2025 10:00:35 +0000
Manifest this update: Fri 13 Jun 2025 10:00:35 +0000
Manifest next update: Sat 14 Jun 2025 10:00:35 +0000
Files and hashes: 1: r5aNFt0rQdNStf0zxJs-xP2tQlg.crl (hash: trefngHyjXn7BDeKM5nW7VnB6m3oHqjTe8JKUqNFdmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5aNFt0rQdNStf0zxJs-xP2tQlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:eb:f8:3c:87:e3:95:d1:b7:fe:73:de:b9:40:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af968d16dd2b41d352b5fd33c49b3ec4fdad4258
Validity
Not Before: Jun 13 10:00:35 2025 GMT
Not After : Jun 14 10:00:35 2025 GMT
Subject: CN=f4d4fed9753e48446eafd7e46e3f639fb21f6792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:11:6b:f3:0f:a0:24:35:0f:c3:40:c7:1b:
3d:10:f3:57:98:28:e5:91:e0:57:fd:17:30:d6:02:
d8:2d:0c:18:6d:c3:9b:3b:52:7a:f0:d4:dd:6d:f4:
fa:dd:8d:f8:51:05:b5:45:97:4e:10:97:d1:7e:55:
f8:e3:af:cf:d1:15:f8:9c:86:08:bf:5c:47:a5:b4:
5f:03:ff:94:15:6d:af:fe:65:a8:41:1e:95:cd:0c:
20:ea:a1:71:f7:78:a1:2f:f1:f3:aa:31:cc:43:32:
16:75:e1:48:cf:a0:b9:3f:71:46:51:35:67:3e:81:
1a:41:bb:ad:f1:5b:ae:f9:9e:c8:3c:39:b1:0d:ad:
f7:fe:0d:53:86:e3:bc:30:8a:5b:9b:5e:f8:d6:dd:
dd:77:f5:eb:03:30:15:a0:17:b1:af:10:e8:85:fa:
60:92:93:37:5d:4e:f1:18:32:90:99:20:48:cf:f5:
bb:47:a5:d4:61:bd:4a:6a:0c:c4:32:62:d4:55:b8:
e5:de:71:d3:97:fd:d0:dd:cb:50:bf:8f:6e:30:2a:
48:16:af:99:9d:33:b0:9f:d7:47:28:62:af:58:f8:
7c:d4:44:ce:5c:f1:ca:ad:33:5c:4e:ec:d0:e8:23:
54:f4:2f:46:1a:80:2a:9f:92:4b:d2:ba:b0:77:97:
e2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D4:FE:D9:75:3E:48:44:6E:AF:D7:E4:6E:3F:63:9F:B2:1F:67:92
X509v3 Authority Key Identifier:
keyid:AF:96:8D:16:DD:2B:41:D3:52:B5:FD:33:C4:9B:3E:C4:FD:AD:42:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5aNFt0rQdNStf0zxJs-xP2tQlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:53:4a:b6:7d:2b:5a:0b:18:ed:25:d4:69:4b:db:3b:64:e8:
38:1e:a1:5d:4c:9c:9e:4a:7b:b0:c8:f5:73:7c:03:95:fa:c3:
c0:af:b0:d2:87:d8:dd:cf:ac:f4:de:35:a5:df:72:51:d8:de:
a9:86:e6:2d:03:5d:f2:e1:b5:63:cd:af:41:5f:2a:2c:ed:e5:
6d:67:bb:6e:37:4a:2e:9e:eb:c1:29:cf:53:16:c0:7d:dd:c5:
4e:10:83:1d:6a:b4:5a:42:80:81:e2:c5:de:3f:6f:6b:39:4f:
dd:c7:3d:7e:50:21:0e:bc:d8:bf:26:06:68:20:34:41:8f:c3:
ec:8a:24:3c:2f:b7:18:9d:de:67:fa:d1:f4:c4:27:ab:38:ee:
fc:b2:2f:62:fb:77:9a:07:3f:eb:a5:c2:d8:bf:8c:7c:f8:e0:
eb:e0:50:aa:80:1c:31:9d:2e:d5:68:f4:a5:3d:52:13:e1:b0:
7f:23:a7:19:23:aa:56:3d:d2:6d:85:77:fb:4d:17:3d:83:46:
6d:a1:e0:e2:03:86:ef:c8:aa:5a:a1:2a:13:79:2a:71:70:fa:
f3:ea:de:c0:0e:2a:15:e6:77:3f:a5:bd:1f:a3:6e:bb:db:52:
c1:98:fa:f5:3d:13:c2:77:08:14:66:f9:d1:3a:0f:34:73:79:
e2:88:21:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:06:00 2025 by rpki-client