
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
File: s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft (raw, json)
Hash identifier: ws7Cb79eyM3eINGZoGtb8HNlM2QzedT5/8LK2JlSrIs=
Subject key identifier: 49:42:F6:E0:04:AA:49:1D:A3:C5:EC:62:29:11:41:AE:27:7C:CB:0F
Authority key identifier: B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36
Certificate issuer: /CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036
Certificate serial: 01976BF419E9F33DA018A9020F1D335371C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
Manifest number: 0BAC
Signing time: Sat 14 Jun 2025 01:00:48 +0000
Manifest this update: Sat 14 Jun 2025 01:00:48 +0000
Manifest next update: Sun 15 Jun 2025 01:00:48 +0000
Files and hashes: 1: s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl (hash: +XYcoAoUOUmSW6qEQuccUYwdJvK2C2PEVbWB/4BdYUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:19:e9:f3:3d:a0:18:a9:02:0f:1d:33:53:71:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036
Validity
Not Before: Jun 14 01:00:48 2025 GMT
Not After : Jun 15 01:00:48 2025 GMT
Subject: CN=4942f6e004aa491da3c5ec62291141ae277ccb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:58:2b:d3:56:70:41:7e:18:b4:6f:96:e4:
60:9b:d8:f1:d7:ca:78:52:5e:34:16:f4:79:fc:44:
fb:78:89:63:bd:81:4c:9e:47:f8:09:94:38:b3:44:
8b:5c:3e:28:92:01:90:af:90:14:f8:d4:59:38:18:
fc:c3:f6:c0:f3:37:fe:38:53:ab:d2:7a:66:d8:52:
8b:97:9e:1e:21:a1:b2:3a:b3:c8:d3:48:36:d8:19:
d6:f3:06:ee:f9:ea:72:43:a6:6d:d9:e8:31:5c:ce:
46:6e:1d:59:16:e2:11:91:e5:a6:a9:0f:58:ba:b2:
71:f0:c4:1c:d9:b9:2c:a8:fb:e9:41:a8:3e:69:a9:
79:77:03:4e:dc:8d:ad:3c:44:29:e9:82:1e:b7:f8:
1e:84:fa:bf:d3:6e:94:0f:e3:82:9f:46:4e:1a:c9:
05:03:46:5b:dc:c5:44:41:09:94:d7:ba:27:78:14:
f1:15:50:6e:a5:fa:44:2a:ed:19:14:b1:b1:a4:07:
f5:dc:c5:84:9e:be:8b:f2:63:e2:5c:93:82:6b:69:
de:e4:f4:f8:ed:72:e0:fa:69:73:3d:d1:c4:b5:3a:
bb:06:e7:50:c4:3d:c8:c9:d0:f6:d4:2d:ea:9b:6a:
fe:09:21:e5:54:07:9c:db:74:17:a4:63:12:4c:50:
9f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:42:F6:E0:04:AA:49:1D:A3:C5:EC:62:29:11:41:AE:27:7C:CB:0F
X509v3 Authority Key Identifier:
keyid:B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a6:e3:cd:bf:00:18:31:90:95:b6:60:49:33:2f:28:41:82:
17:5e:10:08:90:67:89:36:7e:b4:be:e6:62:f7:11:d2:53:20:
0e:87:f9:7c:d3:4e:d7:92:f4:38:94:27:ba:6a:5b:4d:96:c8:
f5:ba:b1:64:ad:ff:f0:de:15:48:b5:e5:80:d0:19:d5:7d:5f:
ae:b9:de:95:98:ba:88:71:1a:b5:26:5a:8c:a9:8d:bf:a4:3c:
76:28:18:5e:8c:28:8c:f6:7c:40:87:1b:38:20:11:02:5d:17:
e0:69:ce:15:94:f9:a1:10:a8:b7:99:6f:16:70:e9:b0:26:6c:
92:47:c7:02:34:1e:e6:81:8d:6f:cd:25:13:48:2d:98:11:9a:
3a:50:25:f0:11:16:69:01:6b:8c:71:15:55:9a:05:b3:5d:39:
3c:da:ea:0f:c7:27:e5:81:00:4a:98:2b:0c:5a:e4:07:8a:06:
ac:e4:1a:f3:27:93:3e:b7:fa:61:bc:1a:cf:7c:80:4d:f8:89:
7d:80:ad:42:00:0c:4b:09:8b:b8:7e:d3:61:a9:00:7f:a5:8b:
cb:c0:1c:e8:e9:16:e8:9f:87:5d:0e:7d:a9:16:5a:63:06:92:
5d:ec:6d:bc:40:3b:ba:6a:a6:65:be:43:0b:f7:85:3c:7d:26:
c3:31:bc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:20 2025 by rpki-client