Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
File: eAl9X3eghkNQCkNtDpjwM9D1SPk.mft (raw, json)
Hash identifier: jy07WqHSNkopC0y/tZrzRPV9zPSwX93zNjd/Ky5VKDs=
Subject key identifier: 18:F5:0B:E7:28:4B:6B:AD:52:F5:84:C1:B1:47:EE:80:7B:A1:C6:0F
Authority key identifier: 78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
Certificate issuer: /CN=78097d5f77a08643500a436d0e98f033d0f548f9
Certificate serial: 01976E86CF64193C0EC218010EDFDF49DFD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 13:00:17 +0000
Manifest this update: Sat 14 Jun 2025 13:00:17 +0000
Manifest next update: Sun 15 Jun 2025 13:00:17 +0000
Files and hashes: 1: eAl9X3eghkNQCkNtDpjwM9D1SPk.crl (hash: QA9hjbWgNf6mKnoX9EYawopR+H0GSDf28j4iBLwEoJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:86:cf:64:19:3c:0e:c2:18:01:0e:df:df:49:df:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78097d5f77a08643500a436d0e98f033d0f548f9
Validity
Not Before: Jun 14 13:00:17 2025 GMT
Not After : Jun 15 13:00:17 2025 GMT
Subject: CN=18f50be7284b6bad52f584c1b147ee807ba1c60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:19:ae:d8:ab:24:3f:81:2d:b9:7a:68:e4:f5:
c6:74:32:3f:b4:67:e3:50:23:71:31:1a:be:a7:e0:
46:9a:1f:f2:cd:c6:6d:8a:52:5e:96:0a:92:da:09:
75:da:e8:f6:84:9a:f6:86:81:9a:5b:48:54:f5:88:
4e:e6:d4:1b:d9:1d:73:8d:7a:fd:c9:dc:e5:f3:e3:
ad:38:08:b6:d3:07:b2:e5:79:b3:62:37:67:b3:12:
80:d5:7d:a2:3f:12:97:42:fc:81:1d:78:e8:b8:e8:
3a:98:c1:b4:52:92:a8:fe:8b:85:33:d3:65:bb:17:
cd:55:b9:6e:df:b5:b2:97:d0:5e:fe:c9:46:8c:b8:
4a:b4:10:f6:57:9c:52:e7:6a:ad:05:dd:f7:a1:fb:
27:08:a6:3b:3a:f6:25:bc:72:54:53:5f:30:b0:75:
20:85:c1:5c:7e:4c:34:fc:d8:eb:4f:7d:2a:27:8c:
f7:6f:42:38:a4:7d:8a:51:a0:40:95:4a:bd:b9:7a:
4c:0f:0c:2e:c1:9c:f4:9f:0a:c6:92:60:66:9d:94:
59:b9:06:60:6e:1c:5a:5b:bd:e0:af:b0:09:ec:33:
9d:90:6c:0a:19:86:c7:0d:9d:80:8f:53:d9:63:2c:
38:b7:52:45:44:20:19:cb:2c:cf:de:00:52:49:75:
45:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F5:0B:E7:28:4B:6B:AD:52:F5:84:C1:B1:47:EE:80:7B:A1:C6:0F
X509v3 Authority Key Identifier:
keyid:78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:f3:0b:6d:1f:e3:fa:fb:41:df:ed:f5:2a:b4:15:ce:35:a3:
da:f9:1a:22:4b:04:8c:6b:c1:6b:2f:0a:21:ed:88:98:b6:63:
d7:29:41:5b:9d:f4:ce:cb:f8:80:30:87:1e:8b:62:9c:2e:dd:
ce:b4:44:a9:5f:f8:38:f6:61:32:d1:19:cb:9d:5f:06:46:c2:
8c:06:10:16:e1:96:5e:b4:00:a1:9c:8b:d8:de:e7:eb:7a:59:
a6:1d:eb:7c:c6:33:45:2a:cc:e0:a7:30:7d:a5:7b:d7:10:51:
02:f6:a9:35:8b:a7:df:6e:96:be:84:7b:52:88:b9:93:0b:f2:
fe:2a:fc:33:6f:e3:b8:3f:4f:e1:5d:1e:24:c9:3e:1f:a3:0b:
01:28:0c:7d:1a:5c:70:e1:7d:95:2b:28:32:b2:23:ed:bc:7d:
42:fb:40:1c:57:75:b4:38:96:1f:b6:f1:b3:7b:ed:60:99:25:
a4:cd:a4:d9:b4:94:6b:a7:e1:d9:ca:a3:cb:41:7c:5c:9f:cb:
46:b7:62:5f:59:84:57:54:1a:80:be:57:58:5b:f8:0b:8e:ea:
f0:2b:f9:f3:f7:58:1a:f9:9d:11:51:54:27:81:fb:2e:34:f6:
84:0c:5b:c9:b6:1b:4f:c0:ee:03:58:fe:49:bf:4d:05:83:3e:
f7:d7:64:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:16:45 2025 by rpki-client