Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
File: 1peKb6yHM4CG9TacW0AhsIBhHlc.mft (raw, json)
Hash identifier: jhUcsQn8b6sFyA8FXvFyurDmuZNYWfH+92T47+B8ISQ=
Subject key identifier: 41:95:4F:F6:04:D9:9A:75:82:58:65:63:BD:08:DE:98:B6:CA:CC:25
Authority key identifier: D6:97:8A:6F:AC:87:33:80:86:F5:36:9C:5B:40:21:B0:80:61:1E:57
Certificate issuer: /CN=d6978a6fac87338086f5369c5b4021b080611e57
Certificate serial: 01987C40BE97BEE86E8DE525F9A3F53A4A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
Manifest number: 0253
Signing time: Tue 05 Aug 2025 22:01:14 +0000
Manifest this update: Tue 05 Aug 2025 22:01:14 +0000
Manifest next update: Wed 06 Aug 2025 22:01:14 +0000
Files and hashes: 1: 1peKb6yHM4CG9TacW0AhsIBhHlc.crl (hash: onFUUcMo9CBdud0Xt8zIoaJe580d78WuBJg9YvM49YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:be:97:be:e8:6e:8d:e5:25:f9:a3:f5:3a:4a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6978a6fac87338086f5369c5b4021b080611e57
Validity
Not Before: Aug 5 22:01:14 2025 GMT
Not After : Aug 6 22:01:14 2025 GMT
Subject: CN=41954ff604d99a7582586563bd08de98b6cacc25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:0e:86:1a:6b:55:bd:45:e2:7a:5e:8d:48:
28:08:00:d1:9b:89:6a:86:f4:d1:a6:a4:7a:c8:e7:
28:0b:17:2d:ec:9b:e1:46:ce:05:2e:67:75:45:40:
bb:dc:b8:b9:1b:06:84:c7:3f:42:02:1c:40:0f:28:
12:17:04:70:40:ba:9c:f9:c1:13:2a:1c:b2:a2:4e:
ef:77:bb:02:9f:34:41:66:71:fb:bc:6f:39:d0:2b:
eb:d7:9f:23:20:06:e6:cc:c8:30:68:52:c1:ac:78:
e7:51:a5:54:75:20:c3:2a:39:37:46:61:de:a0:75:
f6:41:fc:f8:23:d6:ed:d6:61:d7:ca:a9:78:f8:df:
33:03:db:9e:c8:87:98:b9:fb:2d:7a:a8:d1:ca:7d:
2c:9d:76:f8:5c:9b:70:5b:cd:5b:38:81:ed:72:d9:
97:b9:45:a0:ce:cf:e8:99:09:7e:44:d8:b8:0d:b1:
77:0f:2b:07:0b:e0:44:f7:22:fc:05:00:42:42:52:
3f:36:08:d4:fd:43:0e:64:a3:80:03:e7:a3:91:58:
57:c8:74:f9:48:fc:8c:ee:b6:ce:18:cb:a5:e3:98:
0a:aa:c4:23:2a:2b:d1:7e:9d:f6:27:37:67:2f:62:
7c:8e:a9:08:18:5d:69:16:9d:ee:90:e9:61:59:2c:
f6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:95:4F:F6:04:D9:9A:75:82:58:65:63:BD:08:DE:98:B6:CA:CC:25
X509v3 Authority Key Identifier:
keyid:D6:97:8A:6F:AC:87:33:80:86:F5:36:9C:5B:40:21:B0:80:61:1E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:54:e0:0c:4c:20:9a:6e:11:03:8c:0a:45:bc:7c:bb:f2:7d:
0e:31:a0:bd:2e:f9:05:c4:7f:6f:e6:0e:f7:cc:69:f7:d1:7e:
d0:f2:a3:57:1e:4b:9b:8b:5c:cf:71:a9:a6:03:f0:fa:57:4a:
24:42:e1:e0:dc:ac:e6:1b:9c:7b:99:c6:3c:45:44:70:52:e5:
d1:d6:f1:7d:fe:d8:d7:41:d4:30:c1:76:40:7e:03:8f:a6:14:
cb:cc:94:ac:99:8a:9a:bb:f3:75:c6:3f:eb:48:d3:83:fd:78:
ae:7c:e8:ad:52:e3:ba:b5:6c:56:81:15:61:cd:04:d8:cb:07:
eb:c6:14:67:02:0e:ee:4f:85:72:dc:f3:eb:fb:cb:8b:ae:2e:
8d:f5:f2:d2:ff:a9:9a:0c:29:4a:fd:39:ff:59:3e:8f:57:fd:
e5:08:e3:11:7d:48:cb:12:a1:17:43:61:d4:bf:a3:21:e8:99:
bb:f7:3e:92:94:c3:4f:2b:ca:26:1f:a1:43:d5:5b:a4:15:9f:
9f:99:91:21:36:55:67:f3:9f:e7:a0:bf:9c:57:70:0c:24:6c:
82:0c:2d:c7:0e:94:b3:b1:f6:1a:39:1e:a4:bc:4a:7b:b5:aa:
02:75:c2:03:d6:1e:15:76:6b:62:17:0f:35:ec:49:58:13:62:
02:46:16:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:35:39 2025 by rpki-client