Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
File: ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft (raw, json)
Hash identifier: uM0vwWDIBqpIdUWLPAslkeopaN/Uf8mCVB4B6dteXDg=
Subject key identifier: 26:77:85:20:FF:26:BE:13:C8:7D:97:65:97:52:0A:32:72:CD:7E:00
Authority key identifier: 7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA
Certificate issuer: /CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
Certificate serial: 01976961082C19B8B3D71B107C1E81960A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 13:00:56 +0000
Manifest this update: Fri 13 Jun 2025 13:00:56 +0000
Manifest next update: Sat 14 Jun 2025 13:00:56 +0000
Files and hashes: 1: ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl (hash: XGtj3+SBdidPwo1Z7Y3R7aG1lR5Qfya0kTJTEccAELc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:08:2c:19:b8:b3:d7:1b:10:7c:1e:81:96:0a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
Validity
Not Before: Jun 13 13:00:56 2025 GMT
Not After : Jun 14 13:00:56 2025 GMT
Subject: CN=26778520ff26be13c87d976597520a3272cd7e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:c5:75:71:db:87:2f:93:b6:03:3a:b0:24:
83:fa:11:2d:c3:be:42:c9:34:20:8b:61:c9:01:9c:
46:3b:a8:bc:de:6e:fd:6f:a4:c8:43:06:77:bd:45:
de:02:bb:18:96:6c:2b:a1:08:b1:7d:fa:ab:41:f9:
a2:f7:d5:a4:bf:a6:ca:92:4d:3f:aa:e7:a3:86:92:
e6:0c:9c:44:fb:b7:1e:f8:9f:b5:63:2e:75:ce:b3:
6b:9d:a9:12:68:d2:a0:76:c7:72:75:d5:44:5f:f7:
a6:19:be:84:02:16:2a:4b:5a:b6:77:4a:c1:04:eb:
3f:76:b9:8c:96:8d:4d:36:f7:67:43:af:38:bc:72:
7c:1a:82:c3:e0:b2:d2:b7:0e:59:b0:78:9e:27:cb:
a5:cc:c1:e8:51:17:5c:bd:b1:ec:78:a5:4a:73:34:
01:05:14:fd:0b:b4:7a:60:f5:9d:c8:a2:e6:3b:69:
e7:d2:e9:f3:5f:bb:aa:b5:ce:f5:87:53:54:5b:53:
da:2f:60:1c:47:ce:cf:30:3f:a5:25:f1:d5:dc:82:
2f:bd:5b:5a:c9:fc:07:26:e4:c1:cc:a1:d4:52:bf:
72:31:ca:43:dd:cd:81:0b:ab:9b:d8:ac:bd:a0:a5:
6b:7c:45:d5:50:0d:f0:ac:d7:1b:6e:90:05:6a:e4:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:77:85:20:FF:26:BE:13:C8:7D:97:65:97:52:0A:32:72:CD:7E:00
X509v3 Authority Key Identifier:
keyid:7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:54:57:49:cf:b2:4c:67:c1:73:4d:ca:f7:94:e4:2c:8c:7f:
01:a0:10:01:7e:64:b9:37:ee:8d:fb:7d:67:21:af:9b:2b:59:
df:13:52:ef:49:b0:cb:c2:f8:70:53:79:96:98:1e:0a:dd:3a:
56:d5:8e:2b:1c:b5:37:54:a3:99:aa:4c:ba:52:f4:fe:cd:04:
e1:33:d1:81:85:96:87:58:88:b2:be:aa:6b:cb:8f:c2:99:54:
b1:3d:1d:05:47:a8:ad:8e:54:99:80:4e:0c:69:c0:2c:8e:c1:
c7:ac:07:37:59:ca:e1:49:6c:02:ed:87:15:e7:03:3e:03:65:
09:cf:04:67:f3:3e:0e:92:9e:c1:ae:83:64:ff:ec:cb:bc:4b:
bd:9c:1a:3e:8e:33:c2:c2:16:a2:02:13:8a:62:7e:96:90:50:
38:d6:2a:97:4c:39:81:34:e6:c5:6a:14:f0:33:ca:7b:9d:cb:
c7:62:36:74:6c:31:32:40:57:55:be:0e:07:7c:52:b6:b7:2d:
dd:bc:f5:fc:d7:39:6d:dd:4d:ba:82:0e:e7:d6:d2:57:cd:40:
d6:d8:6d:4b:d0:fe:5f:63:4e:66:c9:d8:d4:dd:71:5a:1d:40:
9a:28:b7:a9:88:04:8e:80:b5:60:fb:3b:4a:d4:18:16:8e:b0:
b5:c4:0e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:47 2025 by rpki-client