Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
File: C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft (raw, json)
Hash identifier: AhXfGIcX77tMUasPvbl9ixrB1KsjhgEAnHYix3+dSQI=
Subject key identifier: EE:5F:99:CB:96:9C:26:88:23:AF:88:A9:79:EB:4F:CD:E5:73:58:1A
Authority key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
Certificate issuer: /CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Certificate serial: 01976F2C49B5D01B86AF76FAEE772C26653C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 16:01:02 +0000
Manifest this update: Sat 14 Jun 2025 16:01:02 +0000
Manifest next update: Sun 15 Jun 2025 16:01:02 +0000
Files and hashes: 1: C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl (hash: Ug0i1UBd10a0hrOD7L4+q+uajkXGP8ZO8xIuDbUe9tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:49:b5:d0:1b:86:af:76:fa:ee:77:2c:26:65:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Validity
Not Before: Jun 14 16:01:02 2025 GMT
Not After : Jun 15 16:01:02 2025 GMT
Subject: CN=ee5f99cb969c268823af88a979eb4fcde573581a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e0:c5:fe:9c:9e:08:e8:1d:db:bc:b8:cd:88:
7c:04:bb:2a:78:e9:11:f5:c2:19:8e:0b:e3:69:c8:
52:4c:81:95:8f:20:9c:a8:d4:2e:34:3a:9c:da:61:
ff:fa:b4:e2:6c:70:45:19:ff:f2:3d:2c:60:a9:dc:
6e:e6:0c:d2:40:0c:c7:0b:6c:30:9f:18:d2:53:a6:
0a:1a:b1:d7:7f:84:2f:0f:cf:19:61:11:a2:95:e3:
d3:4e:bf:46:96:2a:cb:90:e7:a6:5b:f7:d2:7f:aa:
9a:f5:34:84:3f:13:ed:28:b3:b2:dd:d4:69:1c:8f:
02:b2:b9:b3:e0:2b:47:f7:c3:12:7f:9a:7e:12:80:
a2:5b:65:ca:ba:56:8a:c5:de:7f:46:95:83:ba:af:
dc:91:bb:66:4a:e5:86:0a:4b:97:21:f0:6b:c8:2d:
e0:32:b3:f5:b7:6c:7a:4a:2b:ff:5c:74:4b:80:16:
86:54:0e:b8:39:e7:ca:a9:89:eb:bd:4a:aa:d9:4d:
1e:e5:89:3c:c4:cb:be:00:9d:f0:54:b7:6b:11:c8:
34:a1:63:8b:49:9d:8c:10:5f:a3:79:36:63:a4:46:
46:2c:63:f6:93:d6:b9:f9:b0:7a:0f:9e:27:dd:d3:
5a:39:90:35:b0:c9:12:78:1b:9a:4e:4c:80:d5:cb:
4b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5F:99:CB:96:9C:26:88:23:AF:88:A9:79:EB:4F:CD:E5:73:58:1A
X509v3 Authority Key Identifier:
keyid:0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:20:d0:93:df:b7:a3:43:1d:9a:2f:cd:0d:81:75:f9:40:82:
70:0a:75:5a:e1:a0:4c:68:fe:30:e5:52:d1:9c:2a:be:da:a2:
38:76:a8:ac:41:e6:45:4f:52:cc:9a:4d:fe:33:46:30:cb:8e:
df:b2:fe:e0:7a:52:ad:2d:1f:74:c7:47:f7:d4:84:f2:0a:b3:
b6:b7:63:e5:e6:de:54:ae:3c:80:cb:a7:92:a3:70:ba:1c:67:
a3:81:a7:dc:7a:44:8a:ef:86:00:10:f0:dd:3c:b7:8b:d4:da:
ca:22:dd:3e:4c:48:80:85:ff:d2:c8:0f:74:05:9c:f3:eb:ea:
ab:ae:19:15:03:ab:13:50:ae:34:e8:83:97:6b:8c:1e:8b:31:
e2:d3:07:55:f9:7d:13:18:d4:a8:88:5f:b6:32:5d:cb:3d:69:
94:c1:64:6b:d4:18:0e:01:3f:f0:14:5f:59:3e:35:7f:f9:52:
0a:e0:19:d4:3d:08:3c:3b:73:04:57:8e:93:ba:b1:15:fd:55:
70:de:f0:3f:39:8b:b5:f8:cb:75:2d:67:ec:20:47:2e:b5:a9:
69:c5:d1:3d:27:bb:de:ba:7c:0a:37:f5:2a:a0:22:c0:68:f4:
88:1e:63:09:7c:bf:38:cf:d4:0b:36:a6:af:cb:1b:e7:86:68:
be:d1:10:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:12:49 2025 by rpki-client