Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/671bac-9f98-440e-87b7-f094069675e3/1/D2HrqF8lrXvk2foP9UUoqUorNjc.mft
File: D2HrqF8lrXvk2foP9UUoqUorNjc.mft (raw, json)
Hash identifier: SWfq0FYb4TJCyPc+mF7UlFek8eORYLv80wxBxoeyhoQ=
Subject key identifier: 7B:BF:FD:87:37:A0:56:86:61:04:75:98:E2:C1:39:F3:71:F1:36:41
Authority key identifier: 0F:61:EB:A8:5F:25:AD:7B:E4:D9:FA:0F:F5:45:28:A9:4A:2B:36:37
Certificate issuer: /CN=0f61eba85f25ad7be4d9fa0ff54528a94a2b3637
Certificate serial: 019775652B214B929C51D877E7CD02D669F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2HrqF8lrXvk2foP9UUoqUorNjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/671bac-9f98-440e-87b7-f094069675e3/1/D2HrqF8lrXvk2foP9UUoqUorNjc.mft
Manifest number: 0102
Signing time: Sun 15 Jun 2025 21:00:53 +0000
Manifest this update: Sun 15 Jun 2025 21:00:53 +0000
Manifest next update: Mon 16 Jun 2025 21:00:53 +0000
Files and hashes: 1: D2HrqF8lrXvk2foP9UUoqUorNjc.crl (hash: BkWc4xyEPktD+xzybHi0ahdmjrw3A6C5Km6CSSnTtoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/671bac-9f98-440e-87b7-f094069675e3/1/D2HrqF8lrXvk2foP9UUoqUorNjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/671bac-9f98-440e-87b7-f094069675e3/1/D2HrqF8lrXvk2foP9UUoqUorNjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2HrqF8lrXvk2foP9UUoqUorNjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:65:2b:21:4b:92:9c:51:d8:77:e7:cd:02:d6:69:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f61eba85f25ad7be4d9fa0ff54528a94a2b3637
Validity
Not Before: Jun 15 21:00:53 2025 GMT
Not After : Jun 16 21:00:53 2025 GMT
Subject: CN=7bbffd8737a0568661047598e2c139f371f13641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:26:5f:7a:cc:94:dc:d1:39:a4:d1:d1:01:42:
d0:ba:87:dc:71:ea:ee:25:b0:f3:28:3d:5c:ea:77:
01:6c:71:2d:64:49:8b:bd:b6:37:2d:d8:86:14:e3:
45:fe:1a:6e:6c:df:95:73:a6:7e:fe:cc:82:7a:53:
d3:2f:55:ae:fd:2a:d3:3c:b0:ce:ad:f0:06:81:ed:
c5:35:bb:d9:11:c4:d0:31:fc:04:16:71:7d:32:54:
e8:bf:2d:7f:c8:d7:67:3d:3e:fa:03:9a:db:df:06:
d4:e8:f9:55:9d:04:f7:d0:02:c7:78:09:f9:9f:0e:
e2:51:18:0e:6d:34:28:27:ea:3d:83:c7:d3:3f:49:
ce:da:26:81:3e:6a:f2:4c:98:7a:6a:f4:ee:a0:b1:
e8:6b:b9:ae:64:da:5b:24:e8:e7:02:91:60:16:9a:
fe:bf:08:27:d2:1e:79:5e:35:9b:a2:9e:5b:cf:fc:
b3:d9:26:61:43:a6:1e:34:18:50:94:fb:ed:1b:bd:
13:93:0c:64:2d:1c:09:69:20:f1:89:1a:b4:85:7b:
e1:44:ff:78:b8:30:bf:bf:8c:f3:61:46:1c:a4:8e:
65:34:c4:52:cf:7f:35:e8:f4:44:5f:bb:bd:ad:ff:
f3:68:15:67:96:12:f1:ef:b0:fd:fd:24:8b:1b:c0:
cf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BF:FD:87:37:A0:56:86:61:04:75:98:E2:C1:39:F3:71:F1:36:41
X509v3 Authority Key Identifier:
keyid:0F:61:EB:A8:5F:25:AD:7B:E4:D9:FA:0F:F5:45:28:A9:4A:2B:36:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2HrqF8lrXvk2foP9UUoqUorNjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/671bac-9f98-440e-87b7-f094069675e3/1/D2HrqF8lrXvk2foP9UUoqUorNjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/671bac-9f98-440e-87b7-f094069675e3/1/D2HrqF8lrXvk2foP9UUoqUorNjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b3:d6:d0:8f:10:f8:1a:9f:bd:7f:aa:d3:72:b7:18:32:cc:
f1:0d:0a:d9:46:37:f6:70:ab:33:dd:74:47:74:8f:97:80:b6:
c4:99:db:86:73:76:4a:f5:f3:12:97:29:7c:f3:7c:84:ef:23:
28:0a:bc:f4:d7:c6:75:97:de:2f:f8:7f:14:34:4c:70:48:12:
31:7d:7d:d6:41:99:d6:db:a8:37:85:d5:1a:78:29:3e:d4:6b:
97:54:6b:61:f7:61:dd:d3:be:63:13:02:d2:96:3a:25:4b:9a:
0e:8c:a8:06:d7:59:c2:60:10:b5:62:f0:fd:d5:61:ce:f6:17:
a4:e5:1f:3f:87:35:59:b3:f6:5c:14:ae:48:73:4f:55:66:19:
1b:bf:31:f0:93:a5:59:04:4d:4b:e9:75:c7:a0:15:cc:02:db:
4d:2e:5a:79:24:41:6b:51:9a:71:59:37:3d:b3:97:82:c4:c4:
b3:ab:7d:f9:32:08:91:6d:e7:d7:3c:17:b9:5f:63:b1:d1:91:
3f:b0:65:9f:c7:3d:9d:60:5b:ba:10:13:4e:00:6b:34:9f:cb:
cf:81:28:15:cf:77:bd:16:4f:17:4e:8e:c6:b0:f6:18:f2:25:
eb:2f:6c:03:d4:72:a7:d2:4f:22:0f:b3:11:91:d3:4a:1a:2c:
96:65:ad:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:07:44 2025 by rpki-client