Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
File: p_555OY70WvEI3WStoTQBDPL0PY.mft (raw, json)
Hash identifier: Xec07F6F0d6e3Toh6Ewv9rMzyeb6Ns0W3vnbo4ZwDsI=
Subject key identifier: 4C:E1:FB:01:33:06:C5:20:A7:8A:BB:D7:CE:61:58:06:46:2D:48:E8
Authority key identifier: A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
Certificate issuer: /CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Certificate serial: 01976929F5D31D117A899905F69DBB32BDC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
Manifest number: 06CF
Signing time: Fri 13 Jun 2025 12:00:46 +0000
Manifest this update: Fri 13 Jun 2025 12:00:46 +0000
Manifest next update: Sat 14 Jun 2025 12:00:46 +0000
Files and hashes: 1: p_555OY70WvEI3WStoTQBDPL0PY.crl (hash: 7EXG0qWEryD15Is1NTgTxdGupQH8Z81C73xmVXzLO+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:f5:d3:1d:11:7a:89:99:05:f6:9d:bb:32:bd:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Validity
Not Before: Jun 13 12:00:46 2025 GMT
Not After : Jun 14 12:00:46 2025 GMT
Subject: CN=4ce1fb013306c520a78abbd7ce615806462d48e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ce:f8:dd:73:2a:c2:d3:d7:0b:07:4e:2d:08:
f3:03:fd:56:f4:ea:f1:60:02:49:eb:44:4b:f1:59:
50:2a:46:b2:0d:fb:9a:5e:4f:32:48:8b:47:72:36:
3c:67:74:35:22:37:91:3a:88:41:e4:ab:6b:ad:77:
a9:db:37:e1:69:3c:8a:14:15:de:0e:5c:f4:89:03:
88:2f:b2:e3:6b:be:e8:d8:19:4b:08:07:52:fa:1d:
52:2c:af:ce:4f:d3:69:0e:53:ec:05:ad:e2:ee:97:
fe:d6:fa:51:63:3f:c4:6b:e3:73:6a:43:43:e4:75:
b4:2e:1f:aa:49:74:a8:45:56:54:a1:f9:72:91:22:
e5:e9:fa:c3:83:9a:f4:b7:23:28:e3:c7:f6:37:d1:
77:99:47:12:17:63:85:d0:3b:81:34:2f:14:f5:2c:
98:58:8a:47:cd:02:77:61:74:ef:13:9b:f4:cb:2c:
f3:b6:79:7f:27:32:1f:64:26:30:9a:85:23:e7:8b:
ae:f1:f2:01:6c:4f:78:b0:b4:b8:e6:2f:d1:2e:d1:
6f:07:08:38:72:26:31:a1:9d:61:20:2c:8a:72:78:
06:40:99:85:93:91:a7:67:ee:98:25:88:78:8b:55:
00:86:fd:f2:96:10:49:f9:2d:9a:45:5c:80:36:a1:
58:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E1:FB:01:33:06:C5:20:A7:8A:BB:D7:CE:61:58:06:46:2D:48:E8
X509v3 Authority Key Identifier:
keyid:A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:27:f0:79:a7:df:ca:32:b1:d6:5a:d8:8c:1f:50:52:91:fc:
56:8a:e0:3e:f4:60:4e:50:de:29:4b:0c:5c:e7:3a:b2:99:3a:
84:c7:f7:72:00:94:5a:82:ae:c7:b0:a7:59:34:90:fe:2b:69:
3f:34:f0:76:60:06:21:db:8c:5c:ed:54:9b:f5:69:a5:1b:66:
6f:c9:97:6c:3b:61:62:d5:35:8e:e8:17:a5:32:76:81:58:02:
22:27:bb:32:bf:34:9c:ab:88:ea:77:aa:f5:24:55:07:54:b0:
03:59:01:34:cb:01:19:69:61:de:cc:3c:4a:aa:f4:a7:ec:44:
28:c8:42:7c:5d:49:87:de:18:9c:47:bf:02:4f:df:f5:82:33:
81:00:a8:bf:dd:57:a2:8b:41:4b:8c:b8:a6:02:65:03:d8:5b:
0c:fa:05:82:c0:66:46:e5:7b:85:70:5d:f3:a1:6c:13:3d:b6:
58:7a:ff:0a:5c:bd:96:82:61:8c:fa:3f:cc:cd:96:56:a6:2a:
d2:90:83:ae:70:7d:4e:85:26:6a:dd:77:32:62:30:fb:95:20:
ed:d4:54:dc:20:70:22:d3:61:2c:a8:ba:30:d9:d2:1e:12:ba:
14:6a:72:35:c2:1f:d0:62:8f:a7:91:4a:0b:d9:1c:7a:62:d2:
65:6e:e7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:16:29 2025 by rpki-client