Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
File: F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft (raw, json)
Hash identifier: B3Q/LtfS304LXgJrwiVLj/yNKcIhkWtEvJvgn7bMyfw=
Subject key identifier: 37:A3:17:30:1B:3E:74:18:65:E0:25:6E:DB:C1:0E:04:97:74:24:6C
Authority key identifier: 17:4D:54:5B:29:3C:16:DC:EF:DC:41:D1:56:F4:91:9B:B1:54:C0:D9
Certificate issuer: /CN=174d545b293c16dcefdc41d156f4919bb154c0d9
Certificate serial: 019769CED34CBC49696DB6015B91B18C803C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
Manifest number: 0A1B
Signing time: Fri 13 Jun 2025 15:00:51 +0000
Manifest this update: Fri 13 Jun 2025 15:00:51 +0000
Manifest next update: Sat 14 Jun 2025 15:00:51 +0000
Files and hashes: 1: F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl (hash: mrV1XdJ6JvwOH3PXk/qRelpcrdew7q8V1fpVNjYfFGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:d3:4c:bc:49:69:6d:b6:01:5b:91:b1:8c:80:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174d545b293c16dcefdc41d156f4919bb154c0d9
Validity
Not Before: Jun 13 15:00:51 2025 GMT
Not After : Jun 14 15:00:51 2025 GMT
Subject: CN=37a317301b3e741865e0256edbc10e049774246c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:17:ea:0d:e3:ee:2a:b7:86:05:08:32:25:
27:75:32:3d:44:b5:57:02:7f:2c:27:22:41:b7:28:
72:fe:b8:5b:66:f7:b7:ad:e4:c6:8f:74:fd:73:e2:
44:1c:3d:ec:90:7f:5f:33:8e:e5:49:a3:a9:24:9a:
58:02:78:0d:8f:a3:90:70:cd:04:1d:ec:f9:bd:4e:
2e:36:18:e4:36:3e:3d:0a:e3:34:7a:2b:35:d9:a5:
82:26:17:f8:6e:d4:67:6b:90:4b:88:1c:4e:2a:cb:
ed:e5:c0:91:ec:52:fd:7c:a8:5e:16:11:bb:34:f2:
e2:97:51:7d:e5:4f:0e:80:9d:cb:91:7c:f1:ce:cc:
8c:be:99:dd:a6:4c:ee:dc:77:95:8b:83:71:30:fe:
aa:eb:58:27:d5:b0:3c:e2:0c:f7:2c:1b:72:81:91:
a2:91:ed:da:06:70:7a:22:71:55:7f:3c:c8:f5:86:
2f:61:18:eb:bc:35:4e:7a:1a:d0:08:a6:fd:55:42:
84:e7:3b:bf:7a:79:30:21:c2:86:4c:4d:a6:ad:44:
e3:86:a5:47:ad:bb:de:a2:31:15:39:02:3f:3d:78:
05:b0:18:8d:8e:53:d0:e8:15:e5:e9:d4:87:30:91:
3b:f2:a5:88:c8:02:68:7f:22:9c:f4:f9:d4:85:7e:
37:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A3:17:30:1B:3E:74:18:65:E0:25:6E:DB:C1:0E:04:97:74:24:6C
X509v3 Authority Key Identifier:
keyid:17:4D:54:5B:29:3C:16:DC:EF:DC:41:D1:56:F4:91:9B:B1:54:C0:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:bc:19:32:0c:cf:84:8c:8e:e0:40:84:f6:af:a2:83:3b:77:
bb:1b:55:6c:29:5d:10:cb:48:a2:56:9f:e2:5a:95:48:53:a9:
d1:1c:7e:95:a7:e1:f6:26:d0:29:8f:c7:9a:9e:b0:3b:e8:03:
3d:39:2d:fd:17:ad:a8:da:dd:2b:f8:66:4c:9a:ac:99:b3:ed:
25:7b:95:f2:11:aa:06:0c:92:8c:c8:7c:cf:59:8c:4d:d0:07:
f1:6d:82:ed:2e:83:14:e0:91:66:bb:65:8a:d7:3e:f4:60:ce:
7b:7c:4a:7c:77:c7:fc:ec:2e:13:a9:4b:de:aa:71:29:c5:87:
9c:bc:fb:7f:d9:31:46:52:10:bc:d0:7c:f6:1a:8f:49:5d:cd:
27:71:be:3c:d3:92:e3:19:17:ea:e9:f7:79:3f:22:4c:6f:d2:
d6:f3:42:55:c4:b3:6d:04:a9:5f:a3:c2:de:b7:78:73:71:30:
72:cb:a4:1d:0c:77:53:01:73:a8:44:f1:8b:67:b9:b7:2e:0f:
ac:dd:79:90:5e:14:3f:30:21:b1:62:62:a2:7a:5e:19:80:c8:
bb:59:c1:30:84:76:89:c7:36:9d:a8:f5:50:c2:be:43:8d:85:
14:1a:a5:95:c3:d6:17:a6:8e:7a:42:6f:17:b5:ed:09:74:c8:
a7:9c:69:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:48 2025 by rpki-client