Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
File: sTSesOfbZTbKeYKWH_rJsykWXF8.mft (raw, json)
Hash identifier: Fd/ztgQe1EEqkOu9k1omGHSK7wkzIAehE25cQ6cbAr8=
Subject key identifier: 7F:BB:1B:23:ED:F4:89:89:EC:EF:4E:E7:6C:00:B3:9D:6C:74:AC:AC
Authority key identifier: B1:34:9E:B0:E7:DB:65:36:CA:79:82:96:1F:FA:C9:B3:29:16:5C:5F
Certificate issuer: /CN=b1349eb0e7db6536ca7982961ffac9b329165c5f
Certificate serial: 01976EBDCF87696F90D35A6918632762B575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
Manifest number: 0244
Signing time: Sat 14 Jun 2025 14:00:22 +0000
Manifest this update: Sat 14 Jun 2025 14:00:22 +0000
Manifest next update: Sun 15 Jun 2025 14:00:22 +0000
Files and hashes: 1: sTSesOfbZTbKeYKWH_rJsykWXF8.crl (hash: c07ifmGUij47OOgiil6R2+6f6LXDZP3UVGk2jeTnijM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:cf:87:69:6f:90:d3:5a:69:18:63:27:62:b5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1349eb0e7db6536ca7982961ffac9b329165c5f
Validity
Not Before: Jun 14 14:00:22 2025 GMT
Not After : Jun 15 14:00:22 2025 GMT
Subject: CN=7fbb1b23edf48989ecef4ee76c00b39d6c74acac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:53:55:4d:20:96:68:39:3b:1b:62:0a:b4:
b5:03:11:3f:23:5d:8e:56:ee:b1:ce:bd:1c:60:36:
55:12:06:e3:40:7f:1b:9f:7e:8a:0f:33:14:5b:1b:
80:a8:7e:56:d2:80:c6:2b:e5:38:bb:d7:83:59:37:
83:91:fa:25:87:c0:d0:a0:e6:9e:4d:fe:78:f9:76:
4c:fc:e1:e6:5b:47:9c:d0:58:45:d2:b8:42:00:9e:
6b:9c:4e:4f:1c:5b:dc:fb:91:55:70:5a:e7:0f:4c:
07:2f:8e:fc:3a:f7:a4:83:df:4a:8e:dd:39:b6:54:
fc:c4:9b:5c:10:cf:11:eb:36:36:be:3e:42:18:dd:
d6:61:b1:0a:77:00:05:fb:21:f4:ea:c4:5b:8d:27:
e9:68:3a:85:19:bd:1b:b5:3d:62:59:c2:aa:ca:9a:
64:a2:57:5a:7d:d9:f1:7e:d3:eb:22:0d:7c:d6:e2:
25:36:25:1c:64:03:67:9f:5e:f6:99:44:8e:0b:4d:
fa:0c:35:2d:aa:62:e4:9b:87:1d:09:fa:29:a1:21:
42:44:d4:a3:18:6b:b7:c2:a5:33:a3:c2:d4:fc:f4:
8d:9d:6d:74:7b:cb:91:77:b3:2f:ab:78:f1:08:ba:
a7:d6:0a:b5:1f:11:31:06:f1:7c:55:2b:0b:03:15:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BB:1B:23:ED:F4:89:89:EC:EF:4E:E7:6C:00:B3:9D:6C:74:AC:AC
X509v3 Authority Key Identifier:
keyid:B1:34:9E:B0:E7:DB:65:36:CA:79:82:96:1F:FA:C9:B3:29:16:5C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:23:4b:1e:4f:d8:3a:b3:74:ac:8e:a3:95:0a:19:ca:1c:d7:
b8:ab:b3:ba:d4:63:a6:75:29:ec:ea:c6:69:29:50:b8:88:12:
c1:38:f5:33:5d:ed:d9:af:65:39:3e:7a:00:0a:1b:b0:94:e6:
c6:3b:ac:a8:cf:72:73:6f:6d:79:83:11:b3:09:a8:4c:1c:06:
1a:ac:b4:d0:dd:36:88:5e:bd:b5:fe:c4:7e:ec:5d:20:14:6b:
3d:65:c0:01:3e:8f:1d:17:94:f0:e0:58:96:6e:53:2d:97:94:
8a:c3:b5:63:9b:fa:39:63:1f:00:fe:10:d5:cc:ba:ba:73:59:
e7:f6:f8:5e:1c:d6:a0:36:4c:3e:b0:86:5b:7b:85:85:05:82:
38:dc:d0:f0:23:3d:62:ad:03:19:d6:46:89:53:18:01:ba:88:
7c:30:9b:66:72:39:5b:f8:4e:7b:cd:1b:6c:a2:4b:5e:14:f1:
b8:b3:7d:05:c9:75:a2:6e:7a:ab:cf:4f:98:5d:e8:43:50:3d:
39:e3:a4:dc:25:ae:b9:64:ba:57:74:2e:db:df:fa:4f:b0:cc:
57:29:2f:f3:03:34:24:8d:19:c7:cb:27:88:5a:dd:1d:02:fb:
93:c3:43:8f:60:2f:02:04:fa:75:20:79:b7:92:8f:00:c6:5f:
b5:99:ec:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:18:42 2025 by rpki-client