Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
File: 1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json)
Hash identifier: NXPF+kqotdEDncDEfzJ7FopyPHIUWnlr0ZA+Kt2p7Hg=
Subject key identifier: B7:FE:88:6C:92:83:19:D3:82:E5:B9:2A:7F:6B:2B:57:52:67:65:4D
Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
Certificate issuer: /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Certificate serial: 01976F2BD74A6FEC3B1D711C047BADF70CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
Manifest number: 110E
Signing time: Sat 14 Jun 2025 16:00:33 +0000
Manifest this update: Sat 14 Jun 2025 16:00:33 +0000
Manifest next update: Sun 15 Jun 2025 16:00:33 +0000
Files and hashes: 1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: GjQdlIbQt8gU3Aw2ueS8Vf1l9L0B4xqOCxDWJBj/5ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:d7:4a:6f:ec:3b:1d:71:1c:04:7b:ad:f7:0c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Validity
Not Before: Jun 14 16:00:33 2025 GMT
Not After : Jun 15 16:00:33 2025 GMT
Subject: CN=b7fe886c928319d382e5b92a7f6b2b575267654d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:af:c5:b0:c7:9a:2c:c2:9c:5a:44:e7:4a:46:
b1:bd:c1:d5:81:6a:04:62:74:49:b5:00:cd:c9:6e:
ed:de:d8:96:35:b5:ff:dc:4f:4a:c4:0c:e8:0d:20:
ba:e7:24:ff:3d:d8:42:9e:58:93:03:a6:a3:3b:4d:
6c:99:a6:a5:1d:cb:dd:1d:0a:da:39:e4:c5:10:d0:
ff:3f:1e:a8:a4:69:31:3a:0f:95:4a:ac:d7:aa:57:
63:3b:d7:8d:e8:6a:42:5c:b2:3a:a2:63:a0:c4:35:
27:69:da:c1:e1:f2:ec:0c:f3:7c:59:9a:04:a1:2a:
b7:67:f7:a0:66:ea:51:6c:64:76:bb:24:57:79:ff:
da:45:7a:f7:8c:95:27:b1:3b:93:43:7e:bb:90:98:
e4:63:47:46:11:96:10:3e:3c:a9:54:e3:92:74:65:
7c:1b:8e:e9:7b:dd:43:87:4b:67:28:12:49:cf:53:
d4:68:15:61:89:47:51:dd:3e:fd:ac:4b:ff:42:3d:
a6:34:ae:4d:71:7d:80:32:3d:dc:d0:bc:ce:bb:5a:
41:9d:22:8f:c2:1e:c1:1b:fe:7e:41:68:f9:b5:5f:
7d:a4:9a:88:b8:4c:4f:e7:9a:40:c4:bb:24:91:73:
58:ac:b8:f5:6d:56:de:8c:28:5b:57:49:f5:50:90:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FE:88:6C:92:83:19:D3:82:E5:B9:2A:7F:6B:2B:57:52:67:65:4D
X509v3 Authority Key Identifier:
keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:98:9e:f3:7a:93:45:85:30:85:14:a6:c1:dd:fc:1f:24:f8:
a6:2e:66:f4:0c:0a:e9:26:54:c8:0d:e3:45:4a:f3:b6:3b:e3:
b9:8e:e6:c7:8a:ac:cc:05:48:21:f1:41:52:08:8d:b8:33:4b:
5a:e6:98:54:55:6a:df:00:8f:b5:68:37:98:19:a6:ba:e7:25:
1f:84:f5:21:ad:98:c4:3e:47:e2:ee:27:cd:81:75:7b:9c:c1:
bb:1f:27:16:7c:5f:d8:d0:71:83:aa:91:45:f3:11:2b:71:2d:
69:95:d0:75:b9:b6:77:48:e0:5c:cb:c6:85:f1:f9:c1:bc:29:
4f:38:d2:3f:38:b2:2b:46:6c:9c:1b:a2:3c:88:d5:60:61:b8:
d9:9e:c4:62:a5:69:36:b9:69:2a:66:e8:b9:9f:56:e0:72:81:
f2:49:76:90:17:36:20:fa:e0:44:93:e2:24:4c:cb:e4:a9:7c:
d6:3c:fd:d9:0b:29:a0:06:51:ef:5a:f8:6b:9a:c3:02:fb:49:
8c:5e:eb:cb:67:ae:0f:f1:cb:79:1b:aa:90:c5:a0:98:6c:3c:
91:3f:6d:49:72:e0:0b:d5:65:cf:6e:9f:f5:bf:0c:36:79:f8:
3b:ca:6a:09:78:8f:e6:66:a6:8d:83:60:8b:40:b4:27:6d:00:
10:dd:05:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:08:07 2025 by rpki-client