Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
File: cA5JDhDqN72DSWKGM7WIVmHmegI.mft (raw, json)
Hash identifier: XxKsAHs7rgAWA4bVFzjbLWNAEonSFtFm/LmiBOCsIrQ=
Subject key identifier: 35:79:D2:49:B5:04:30:0E:16:02:73:AB:7D:D7:EC:9F:FC:64:34:10
Authority key identifier: 70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02
Certificate issuer: /CN=700e490e10ea37bd8349628633b5885661e67a02
Certificate serial: 01976F2C47ED22A3F6BB3985B8F7C7423B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
Manifest number: 9A
Signing time: Sat 14 Jun 2025 16:01:02 +0000
Manifest this update: Sat 14 Jun 2025 16:01:02 +0000
Manifest next update: Sun 15 Jun 2025 16:01:02 +0000
Files and hashes: 1: cA5JDhDqN72DSWKGM7WIVmHmegI.crl (hash: CKR14du0orBuymHFOPZeEP9uP3zkyNRH7/hjV0937d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:47:ed:22:a3:f6:bb:39:85:b8:f7:c7:42:3b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700e490e10ea37bd8349628633b5885661e67a02
Validity
Not Before: Jun 14 16:01:02 2025 GMT
Not After : Jun 15 16:01:02 2025 GMT
Subject: CN=3579d249b504300e160273ab7dd7ec9ffc643410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:6a:37:06:dc:a2:c2:b2:9e:c0:ad:fd:30:
01:39:14:f8:ac:dd:a6:ea:c9:aa:3a:1d:b9:83:61:
ba:88:7e:da:0b:43:9d:39:1e:b8:7f:e4:21:b3:67:
46:10:43:32:94:ab:94:ea:fc:97:f8:7b:36:95:e4:
c7:26:05:55:83:3b:32:68:6b:a5:a9:f5:05:49:ce:
35:22:a7:30:15:1b:60:6d:79:89:27:1e:d5:0c:7e:
32:ba:24:f5:cb:83:4c:89:77:97:c6:d8:09:f3:ef:
94:60:cd:b6:ee:06:bd:b3:23:27:b4:5d:f1:07:95:
92:fc:13:ce:2a:6a:57:11:ce:00:77:e3:11:0a:39:
1b:38:f7:e1:ff:9d:21:85:e2:34:10:cb:55:eb:bc:
b4:60:84:91:1b:83:05:a5:df:9d:2f:66:6a:83:1f:
63:3a:83:18:0a:9a:98:60:5e:9f:72:2a:32:ac:ae:
5d:16:16:9c:55:c8:36:05:1f:93:22:6b:cc:95:b2:
25:92:83:6c:6a:17:84:d0:9f:a7:fa:50:9d:b5:e4:
01:24:4e:93:2a:fd:b5:ab:2d:a3:81:32:cf:eb:30:
a5:68:98:61:d3:68:d1:b7:27:2d:9e:57:cb:58:7e:
f3:f2:1b:e3:6c:9b:0a:23:7a:76:61:04:65:22:18:
9b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:79:D2:49:B5:04:30:0E:16:02:73:AB:7D:D7:EC:9F:FC:64:34:10
X509v3 Authority Key Identifier:
keyid:70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:42:04:8b:d4:3f:2e:6f:e3:30:8b:04:73:66:8e:37:7f:78:
50:82:87:59:e8:43:3f:1a:6e:82:83:23:a4:3f:58:6f:f5:a7:
ff:92:16:29:4a:0d:c5:0c:8b:91:8f:ad:69:79:b0:a2:8d:25:
56:99:61:85:85:3d:d3:ea:40:71:4d:cf:99:ad:16:0e:ff:f6:
31:cc:4c:b4:bc:42:a5:82:b3:b9:1a:5d:58:1d:f8:e6:7d:ed:
02:f2:68:6c:67:37:76:ef:bf:f7:f2:6d:33:ca:50:52:b2:b8:
ea:43:2f:a3:5c:22:9e:42:78:f6:1b:de:c5:d7:4c:d2:73:d2:
24:df:72:95:01:83:8d:02:90:b2:3c:00:5b:b3:bd:62:d8:d0:
f4:b9:60:f4:a9:24:1a:7f:40:50:6b:f9:84:6a:4e:03:a0:fb:
f7:44:0c:e4:b9:3e:14:cb:ea:02:ff:72:73:1f:9c:9c:2c:75:
d0:e7:a1:d0:52:f0:03:6e:8a:21:dd:e9:af:4f:09:49:ac:78:
6c:7b:d4:0f:6c:fb:69:3f:45:88:08:5c:5c:cc:3d:c3:35:13:
cb:52:31:fa:c7:ad:7a:45:b9:c7:cf:b2:a3:71:49:c5:bf:ba:
7b:07:8f:ce:22:50:3b:84:bf:b6:cb:f3:06:ed:e3:55:ee:57:
24:bb:37:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:53:24 2025 by rpki-client