Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
File: C7M4e-bSDUos4TzAkuh_d3uLmVY.mft (raw, json)
Hash identifier: wzYiCzFn9db5ti/9fURjK0jUJslJ02ozw9X3ofAUbbw=
Subject key identifier: 56:EF:89:06:38:0C:A6:D9:FD:79:F4:FB:C6:F6:03:65:4F:F0:87:1C
Authority key identifier: 0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
Certificate issuer: /CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Certificate serial: 019770758FF7C7DB543ED1BA29FA0647BCC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
Manifest number: 1065
Signing time: Sat 14 Jun 2025 22:00:42 +0000
Manifest this update: Sat 14 Jun 2025 22:00:42 +0000
Manifest next update: Sun 15 Jun 2025 22:00:42 +0000
Files and hashes: 1: C7M4e-bSDUos4TzAkuh_d3uLmVY.crl (hash: UUgdeM0Rl/yUzhqM+KUKhct6ymxdLGwTb5Q73Nd8hL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:8f:f7:c7:db:54:3e:d1:ba:29:fa:06:47:bc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Validity
Not Before: Jun 14 22:00:42 2025 GMT
Not After : Jun 15 22:00:42 2025 GMT
Subject: CN=56ef8906380ca6d9fd79f4fbc6f603654ff0871c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:b0:7c:f7:8f:31:ca:0c:60:05:14:11:f5:
87:f3:95:f3:ea:17:c8:71:fe:6d:18:57:ee:af:fb:
a4:df:b8:fa:e9:72:21:01:91:d9:1c:f6:dc:30:a1:
df:12:ae:ba:0b:a0:af:b6:7c:95:b5:c2:6b:1e:e9:
f0:71:29:29:8c:b1:0a:6b:b0:99:50:3d:46:31:5a:
ab:a5:22:23:f1:1d:9a:a9:46:21:d2:d6:b9:5b:36:
8e:a7:c6:e7:2e:08:d8:21:57:a8:23:2a:07:07:33:
4a:6c:60:f4:4e:90:ce:34:27:6a:a9:ba:64:2a:4a:
45:ae:77:09:d1:4e:fd:db:6f:da:f3:12:fa:1a:18:
74:b7:5f:8f:c8:9e:89:c3:06:f5:2a:69:12:0b:72:
ca:fe:a8:88:2d:91:3c:73:12:27:7d:5d:de:e6:ef:
75:35:ea:0d:0f:d9:cb:e4:bb:f5:89:bf:fd:f1:1a:
3c:57:82:f0:af:82:72:db:a5:c6:54:c4:bd:ab:09:
bb:d3:dd:23:5b:fc:69:c0:67:0a:64:a1:1f:55:b4:
19:da:cf:d1:36:a9:3e:43:ae:6a:42:58:84:a9:a0:
3e:68:46:c2:1d:c7:e2:3d:d0:df:dc:09:04:2b:51:
4b:c1:0f:89:fe:b5:c1:30:3c:e5:be:50:4c:d5:45:
d3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EF:89:06:38:0C:A6:D9:FD:79:F4:FB:C6:F6:03:65:4F:F0:87:1C
X509v3 Authority Key Identifier:
keyid:0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:19:01:0d:4e:67:42:4b:ff:59:fe:63:8c:61:6a:45:f4:38:
9f:12:66:19:97:e2:d1:fe:59:5c:30:8c:2c:c6:5f:5a:41:7b:
e2:2d:a6:6f:cd:92:74:95:d7:c2:99:63:73:d1:4c:6b:ee:5e:
a7:a4:da:02:54:fc:6b:7e:56:aa:52:31:bb:d4:be:92:5c:1c:
69:42:ea:65:b3:55:08:f2:8b:99:3b:17:bf:b1:fd:db:18:76:
0c:07:11:da:95:70:ec:a3:7e:11:ea:88:c5:cd:ae:6f:0d:92:
a0:3e:1e:73:85:b0:30:29:c5:71:b6:dd:a6:4e:87:8b:2b:38:
6f:c5:e6:6d:13:6d:7d:3b:d0:42:8e:89:1f:28:5f:fb:a4:77:
ea:0e:e9:6b:31:77:e6:0d:bf:bc:e7:5f:b3:af:29:69:e2:a9:
cf:2b:df:55:01:6a:5b:59:fc:90:6e:cb:22:5c:04:46:81:70:
9b:23:51:8c:aa:49:85:ac:b1:48:48:3e:4b:72:74:f2:27:39:
f9:b8:00:7d:43:b4:44:54:e3:97:52:49:22:f7:81:39:c2:e9:
03:56:b5:4e:a3:ec:e9:bf:22:d3:bd:27:54:ff:b6:79:c7:a2:
95:68:25:4d:3a:f7:86:38:80:17:e8:cc:bb:65:80:82:29:2e:
19:8d:3b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:30:36 2025 by rpki-client