Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/388312-4480-4797-a3da-db2edb3a0207/1/_2doQ1vYHTIqUcZiBRA9Rc775fA.mft
File: _2doQ1vYHTIqUcZiBRA9Rc775fA.mft (raw, json)
Hash identifier: snUYGToRI1LCNqrxrtBXaNDVwZ0jpyGWK0ZuGmZ93No=
Subject key identifier: FD:CC:37:3D:FE:97:FF:30:89:FF:E3:8F:AB:25:84:2E:D6:75:F4:22
Authority key identifier: FF:67:68:43:5B:D8:1D:32:2A:51:C6:62:05:10:3D:45:CE:FB:E5:F0
Certificate issuer: /CN=ff6768435bd81d322a51c66205103d45cefbe5f0
Certificate serial: 01976D0697CE1736121A83EF69EACCF19107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2doQ1vYHTIqUcZiBRA9Rc775fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/388312-4480-4797-a3da-db2edb3a0207/1/_2doQ1vYHTIqUcZiBRA9Rc775fA.mft
Manifest number: 43
Signing time: Sat 14 Jun 2025 06:00:37 +0000
Manifest this update: Sat 14 Jun 2025 06:00:37 +0000
Manifest next update: Sun 15 Jun 2025 06:00:37 +0000
Files and hashes: 1: _2doQ1vYHTIqUcZiBRA9Rc775fA.crl (hash: 8kL5CKryUOo6Qb8RIQ2fO3kb+D/QytJ2uTIGmDEX5tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/388312-4480-4797-a3da-db2edb3a0207/1/_2doQ1vYHTIqUcZiBRA9Rc775fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/388312-4480-4797-a3da-db2edb3a0207/1/_2doQ1vYHTIqUcZiBRA9Rc775fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_2doQ1vYHTIqUcZiBRA9Rc775fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:97:ce:17:36:12:1a:83:ef:69:ea:cc:f1:91:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6768435bd81d322a51c66205103d45cefbe5f0
Validity
Not Before: Jun 14 06:00:37 2025 GMT
Not After : Jun 15 06:00:37 2025 GMT
Subject: CN=fdcc373dfe97ff3089ffe38fab25842ed675f422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:88:24:3a:60:5a:4e:8b:61:4c:ed:07:36:e0:
48:28:27:18:6f:b4:3b:a3:c7:26:4f:c0:71:b4:ff:
5d:56:e6:f6:fc:5f:90:30:80:d9:43:25:f9:a1:b2:
10:b7:bf:ac:0f:01:fb:38:2d:68:2b:a8:a1:dd:e2:
41:1c:b7:f0:2f:e0:41:92:7c:73:cf:08:06:f1:8f:
e2:19:1d:03:fe:6c:12:e0:f0:1a:a2:71:f5:fd:3e:
8c:bd:0b:d8:63:ef:b7:55:6e:63:f7:b1:68:38:fb:
83:89:5c:6e:e5:7c:43:42:11:aa:e0:27:38:7a:d3:
fd:3d:56:83:7d:20:57:87:44:8d:46:8c:6a:df:90:
fd:42:18:c0:69:0a:b2:20:44:49:a7:1c:1f:15:77:
19:1c:bb:af:88:1c:56:ce:49:9e:1d:76:62:09:88:
06:ca:a4:e6:0a:f7:e8:49:6b:33:88:16:fb:a3:ff:
78:25:54:6f:0d:4e:fa:04:10:cc:4e:9d:93:d2:0f:
0d:3e:22:5e:61:5b:e6:4e:8a:b1:35:13:4c:80:25:
cc:77:e8:68:db:b8:64:bb:4e:fd:ad:d5:c1:25:15:
e6:99:7c:ca:86:00:b3:40:25:68:60:13:34:05:e5:
76:c2:12:f9:56:d8:31:b7:dd:ec:cf:65:8e:53:a3:
da:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CC:37:3D:FE:97:FF:30:89:FF:E3:8F:AB:25:84:2E:D6:75:F4:22
X509v3 Authority Key Identifier:
keyid:FF:67:68:43:5B:D8:1D:32:2A:51:C6:62:05:10:3D:45:CE:FB:E5:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2doQ1vYHTIqUcZiBRA9Rc775fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/388312-4480-4797-a3da-db2edb3a0207/1/_2doQ1vYHTIqUcZiBRA9Rc775fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/388312-4480-4797-a3da-db2edb3a0207/1/_2doQ1vYHTIqUcZiBRA9Rc775fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e0:c4:90:d8:05:65:a3:82:bd:57:52:6e:7f:26:2f:e7:1b:
54:06:07:a9:4f:4e:55:cd:84:b2:5c:0e:4e:0c:c3:16:8f:5d:
c9:a0:1f:b5:36:a0:f0:dd:04:bd:b9:be:2d:ba:69:33:e8:dd:
9e:89:08:c4:cd:75:dc:a7:07:17:02:97:72:ba:53:98:00:71:
3b:42:14:ee:e9:ad:a6:24:83:7d:9f:1d:be:fb:eb:ab:1e:94:
0b:6c:ea:21:d2:cf:0b:a5:06:f7:3a:5c:76:20:73:64:50:8b:
28:dd:ea:87:6a:77:fe:17:88:61:cc:2d:ad:2b:aa:a1:71:fd:
c1:b3:57:42:e8:64:ca:ff:23:23:f1:35:8c:a4:bf:32:fc:72:
10:ae:03:f4:ff:8a:df:d3:8d:11:41:65:be:59:1e:20:bc:64:
63:5f:5e:e3:8f:2d:83:be:09:a0:60:3b:b9:cc:32:f7:ce:3c:
e1:9c:bc:58:fd:f1:ac:0c:bb:3c:62:bb:34:25:20:a2:ce:e6:
d6:9c:d1:90:f3:55:6d:2b:31:a6:99:15:96:53:77:f0:8f:44:
3e:45:2d:df:64:1f:ea:8c:e4:88:32:23:ac:d1:8a:68:f4:31:
fe:ce:bd:ee:5c:7e:03:ed:04:11:9f:2a:23:25:69:a3:26:21:
93:ea:26:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:15:47 2025 by rpki-client