Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
File: mQRCuMDNHdU1vq5yuU3TX5JyA40.mft (raw, json)
Hash identifier: 6I43wk/QpG3V/j4pwR46aB57ZbkwQIY5rj9C+jQnqAA=
Subject key identifier: C9:85:70:CB:0E:3A:3E:10:1A:8D:C4:54:57:B3:FA:27:0F:F5:D7:69
Authority key identifier: 99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
Certificate issuer: /CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Certificate serial: 019778D3E9FD8D2B9F35BF304CBEC89BC0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
Manifest number: 0669
Signing time: Mon 16 Jun 2025 13:00:43 +0000
Manifest this update: Mon 16 Jun 2025 13:00:43 +0000
Manifest next update: Tue 17 Jun 2025 13:00:43 +0000
Files and hashes: 1: mQRCuMDNHdU1vq5yuU3TX5JyA40.crl (hash: YedOSuNZoRkiPW9HzWBuaHcvp9zLwPLR6SRm6Uqf3fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d3:e9:fd:8d:2b:9f:35:bf:30:4c:be:c8:9b:c0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Validity
Not Before: Jun 16 13:00:43 2025 GMT
Not After : Jun 17 13:00:43 2025 GMT
Subject: CN=c98570cb0e3a3e101a8dc45457b3fa270ff5d769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6d:e8:74:f9:49:f0:ba:7f:48:c8:a9:de:b0:
66:de:42:f9:93:ec:46:b0:37:19:3c:1e:16:28:81:
f1:e8:e1:77:d6:42:4b:ca:25:47:10:41:c7:e1:39:
9c:52:e4:0c:20:61:8a:fc:d0:bc:42:94:c8:0c:0f:
cc:5f:2b:2c:dc:1b:95:78:4a:35:be:b0:eb:df:31:
2e:5d:8c:a1:8e:1b:fb:f6:8b:46:fd:e1:1b:f2:38:
a1:c5:15:54:bc:92:c6:3a:7e:e3:35:56:d4:47:55:
73:1d:f2:87:7d:07:a4:26:50:2f:97:25:65:ef:e1:
b8:a4:6b:83:10:13:db:5a:1e:6c:f4:94:1b:2b:b3:
14:f1:94:a1:5d:e8:61:a8:dd:7d:c0:7b:73:be:11:
61:a4:15:98:b3:46:23:70:51:fd:48:f8:ba:5d:4f:
45:76:da:7b:34:0f:ff:f1:e7:5b:9d:72:63:39:7d:
ca:9c:44:c4:fa:31:76:67:7f:ef:a4:da:fc:b9:14:
c1:02:b0:21:64:33:97:08:9c:5a:30:f5:de:ce:ee:
82:c2:69:c7:e3:dd:51:55:40:32:3e:53:77:6b:80:
d8:ac:e5:af:8b:6f:24:f3:b4:ca:ce:2e:14:62:e3:
84:82:a3:dc:97:09:a8:3c:35:eb:94:be:55:f7:8b:
73:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:85:70:CB:0E:3A:3E:10:1A:8D:C4:54:57:B3:FA:27:0F:F5:D7:69
X509v3 Authority Key Identifier:
keyid:99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7b:0a:7a:9c:eb:99:cc:fb:08:c6:f2:ff:bc:b1:93:d0:62:
32:20:ce:34:52:5a:7e:3f:1c:f4:5c:b8:5f:66:c3:c8:7f:7b:
e2:93:58:ab:93:cb:e8:7c:49:1e:4e:e9:fb:91:fb:ac:95:c4:
85:e6:2e:e2:b9:dc:8d:bd:0d:5e:31:cf:78:97:2d:cb:10:70:
f3:4d:24:53:cb:90:5a:54:a7:4b:a9:55:4c:97:33:cc:af:21:
c2:96:1b:7a:b5:9a:76:2d:60:82:dd:6d:93:50:1b:eb:5b:c3:
48:65:12:07:3d:2a:65:7a:22:6d:47:98:f5:03:84:6d:7e:5e:
c4:6d:69:53:ca:70:df:e7:6b:fd:b9:49:7b:e1:1a:a2:2c:cd:
50:ee:de:de:27:de:4e:b1:5c:d3:41:3a:d8:22:ae:2a:49:f6:
21:1a:fe:63:b6:b8:dd:38:7c:14:ca:89:21:f9:8c:77:ec:35:
1b:b9:27:22:e4:0f:79:49:3f:b1:8a:cd:c4:8e:64:d1:8e:6c:
90:d2:ff:c8:c8:30:34:53:95:43:72:c6:0d:57:a8:ce:ac:3e:
0f:b8:31:58:98:fc:2e:6c:cc:49:59:e9:65:c1:1e:ae:55:e9:
31:95:63:42:49:75:e4:11:d1:c3:61:91:96:ab:7e:82:a1:1c:
95:c2:f1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:23:36 2025 by rpki-client