Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
File: D1pCPdyX3TDeyLhnPCSWjic3JnY.mft (raw, json)
Hash identifier: RXvsknMrr41IhM6kmDwlkipC5W3A9+DdVKUhu+qL4F4=
Subject key identifier: C6:94:8C:AF:63:0D:6E:01:11:98:04:A4:17:68:F9:DE:13:E0:F0:D5
Authority key identifier: 0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76
Certificate issuer: /CN=0f5a423ddc97dd30dec8b8673c24968e27372676
Certificate serial: 019891B57448B1F0B7CE369FD157B5FFEF78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
Manifest number: EA
Signing time: Sun 10 Aug 2025 02:00:44 +0000
Manifest this update: Sun 10 Aug 2025 02:00:44 +0000
Manifest next update: Mon 11 Aug 2025 02:00:44 +0000
Files and hashes: 1: D1pCPdyX3TDeyLhnPCSWjic3JnY.crl (hash: 5GxrU1soOYOtcLn4Zad/j0Vuw7XTQ3+ufzleXB+ARiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:b5:74:48:b1:f0:b7:ce:36:9f:d1:57:b5:ff:ef:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f5a423ddc97dd30dec8b8673c24968e27372676
Validity
Not Before: Aug 10 02:00:44 2025 GMT
Not After : Aug 11 02:00:44 2025 GMT
Subject: CN=c6948caf630d6e01119804a41768f9de13e0f0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e6:70:6c:04:06:4f:94:11:99:cc:20:de:4d:
6c:56:77:f6:89:cb:99:67:56:bf:32:6d:39:0f:3d:
05:32:db:4c:9f:fd:e6:98:17:66:bc:b5:33:79:a3:
c0:56:bf:e0:c0:44:f8:c0:d3:9f:d2:ec:f3:d5:1b:
0f:ed:81:9d:2a:a6:05:d8:83:1a:ce:8a:e8:65:b3:
76:1c:46:ec:df:ba:67:ba:bc:21:9f:4b:f3:75:bc:
c5:c0:4f:6e:6e:b7:68:22:f3:5b:09:27:70:a0:c8:
e2:0c:8b:09:57:e5:f8:c7:c4:f8:cc:0b:96:0e:98:
ee:ab:67:4d:d9:b7:07:c1:ad:1c:9a:b1:e9:65:0e:
b9:02:3f:dc:a6:21:6d:d2:dd:e2:40:3a:37:dc:dc:
33:15:97:0c:5d:f4:02:1a:3d:b2:62:55:2a:eb:0a:
21:09:ff:88:62:f7:1b:3d:a6:28:6d:e7:1a:04:32:
1b:6c:8a:bc:89:ac:46:75:a3:da:6b:6d:de:27:68:
44:0f:05:a1:03:4b:96:37:2b:a4:af:e0:57:bf:c7:
13:d8:2c:17:ee:67:fd:32:67:bc:24:81:8f:c4:72:
4c:eb:9e:c5:24:04:42:e8:51:8a:f3:88:6c:e7:b9:
5e:08:b2:78:21:c6:e6:5c:20:ff:ac:3d:12:7e:bd:
81:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:94:8C:AF:63:0D:6E:01:11:98:04:A4:17:68:F9:DE:13:E0:F0:D5
X509v3 Authority Key Identifier:
keyid:0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5c:e6:d7:f2:05:05:33:1e:0a:bd:43:8b:b0:b0:5b:ba:4c:
26:1d:55:33:44:93:12:9a:86:af:7b:ce:a4:f7:8a:51:1e:11:
b7:c7:7e:70:b0:d5:ef:0f:24:f1:c7:a9:29:53:7b:62:32:72:
66:d7:b8:e6:ec:09:d4:19:6b:6c:ed:ca:42:e9:7f:c5:35:fc:
a2:06:ca:5f:05:87:72:5e:b8:f4:ed:1d:39:6c:82:67:b1:11:
ff:a8:18:db:c7:e5:05:bf:c9:de:68:bf:e6:b6:3c:d4:c8:58:
da:55:b5:77:1e:e2:be:b9:ad:03:a5:cb:c4:6c:1d:aa:84:09:
d5:37:bc:26:a8:07:37:53:66:ac:a9:22:40:3b:ee:0d:af:5e:
ae:bd:6a:08:7e:7e:d9:b0:15:2a:04:f6:20:e7:71:cb:29:8d:
32:8d:b0:8d:02:24:a0:1c:b4:e2:d5:ad:b3:4f:76:a8:91:31:
0c:dd:fd:ba:86:6f:83:e8:e0:1c:5c:ed:0c:c2:85:59:28:a3:
4a:2b:bf:45:31:06:a4:67:4a:80:54:36:19:21:b4:6f:30:db:
41:5d:ca:38:b2:47:c4:69:7e:f0:24:61:dc:2b:10:97:4b:39:
1a:77:0a:50:f6:ac:71:dc:98:de:b0:68:19:b6:5d:1a:bf:98:
79:e4:78:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:41:34 2025 by rpki-client