Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
File: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft (raw, json)
Hash identifier: aJoTZsYRIKb8JvUA7PnqBqZ+aWWfWGEK5nvoSXQxVi0=
Subject key identifier: B9:6B:6E:59:31:E4:E7:57:5E:E2:2A:68:E5:78:78:44:C5:E8:90:4D
Authority key identifier: 89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
Certificate issuer: /CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Certificate serial: 01976C98DD992C6C31900B32C2B87D928FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 04:00:46 +0000
Manifest this update: Sat 14 Jun 2025 04:00:46 +0000
Manifest next update: Sun 15 Jun 2025 04:00:46 +0000
Files and hashes: 1: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl (hash: ce5xgUC2IzV0C5sOwjjHDFm9OLRTIgnencAkj/wbLjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:dd:99:2c:6c:31:90:0b:32:c2:b8:7d:92:8f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Validity
Not Before: Jun 14 04:00:46 2025 GMT
Not After : Jun 15 04:00:46 2025 GMT
Subject: CN=b96b6e5931e4e7575ee22a68e5787844c5e8904d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a0:25:d8:2c:27:f0:04:a8:56:fe:48:74:c2:
2a:c2:2f:3d:44:07:f7:0f:9d:11:d0:1f:3d:16:c3:
b3:28:37:1e:38:50:bc:be:e4:d0:de:47:b0:2d:5d:
c4:49:76:72:bf:23:9b:88:3c:5d:99:65:7b:ea:7a:
08:da:00:df:12:9a:20:84:7d:ce:2c:5f:9c:6e:f3:
c4:ee:4e:ee:a2:ed:3f:0a:fa:e2:26:9a:7c:5f:61:
a2:8c:c6:f6:f8:77:67:4b:39:6d:b4:be:6a:ce:33:
39:ff:61:ec:f0:47:58:85:d2:42:00:cf:52:d3:19:
28:26:e4:29:7e:d7:2d:da:cd:c1:80:07:30:27:ec:
d3:51:d2:d4:89:40:c0:e3:22:3b:b2:7b:6d:f0:39:
24:04:19:41:fa:3f:9e:3a:0a:0e:60:1d:cf:a7:f7:
38:30:41:d5:17:38:d2:c1:d2:8e:72:e8:50:ed:20:
b0:38:9f:f5:ec:31:fe:15:ff:78:c2:16:b8:60:4f:
be:1e:56:c9:e2:b1:c7:55:b3:33:db:82:eb:ea:98:
e3:81:a3:91:b6:18:dc:37:2f:eb:93:78:fc:09:02:
bb:37:4c:e3:b7:7c:c8:27:5c:5b:a9:9c:d5:56:27:
4b:0b:79:e5:1d:52:86:7c:37:2f:77:92:78:cc:d7:
f0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6B:6E:59:31:E4:E7:57:5E:E2:2A:68:E5:78:78:44:C5:E8:90:4D
X509v3 Authority Key Identifier:
keyid:89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0e:85:63:28:44:0b:97:84:4c:e4:d8:66:db:d0:fc:36:41:
f7:ae:11:82:1e:65:54:17:3c:0e:e6:fb:86:99:27:70:63:9f:
04:2f:bf:3f:ef:69:c5:07:37:86:46:f1:e2:e5:03:83:02:a9:
3f:8e:82:bd:e3:6f:66:19:f9:72:97:9d:cb:f8:56:9a:ad:50:
62:91:09:72:92:49:bc:f5:b9:12:a6:02:32:81:92:12:6e:91:
8c:93:e1:35:14:0e:fe:72:2b:77:8e:54:11:db:76:b7:d6:ed:
c6:6c:bf:65:e6:6c:17:7a:ed:6b:eb:e1:71:d3:75:e3:1e:9f:
ed:b8:7d:a6:2e:d8:fb:a9:1e:69:39:86:fe:7b:a5:d4:aa:ec:
fb:41:5d:98:42:68:df:48:1c:91:63:8d:9d:0e:9b:8b:f4:3f:
fa:b1:3b:82:63:30:0d:64:ce:ca:4e:1a:29:75:56:40:93:6d:
5f:4c:1f:e5:69:ae:ee:c3:8c:f4:4d:ab:f2:55:84:15:a4:aa:
db:48:f8:c4:63:49:60:b7:be:96:70:e0:e3:e5:a6:ad:1f:c4:
06:61:70:c9:18:a7:3e:06:9b:fc:1a:e7:b1:c8:b4:3d:0e:fe:
ea:68:5b:df:20:54:ff:c6:33:32:da:4b:dd:fb:81:83:fc:c6:
21:ec:30:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:29:31 2025 by rpki-client