Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
File: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft (raw, json)
Hash identifier: cfWvjLyZ0jt0VMtHeuICD7MFDHiOYbeur9IWzKQB+0s=
Subject key identifier: 37:14:5C:33:5E:0C:44:64:6D:14:86:0C:58:9C:85:DB:5E:89:5D:C0
Authority key identifier: 44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
Certificate issuer: /CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Certificate serial: 01976D06A180AA59DE5533DF8F6C2762B7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
Manifest number: 0348
Signing time: Sat 14 Jun 2025 06:00:40 +0000
Manifest this update: Sat 14 Jun 2025 06:00:40 +0000
Manifest next update: Sun 15 Jun 2025 06:00:40 +0000
Files and hashes: 1: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl (hash: tZD9AyugHOIPK4T8COOjS87YM4N1AZ8GQebVWZ8AiPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:a1:80:aa:59:de:55:33:df:8f:6c:27:62:b7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Validity
Not Before: Jun 14 06:00:40 2025 GMT
Not After : Jun 15 06:00:40 2025 GMT
Subject: CN=37145c335e0c44646d14860c589c85db5e895dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:67:6d:b7:75:b3:de:2d:95:63:0f:c2:30:
79:c9:21:3c:4e:64:ca:d2:88:56:af:05:16:31:0b:
50:7e:e3:ea:da:ab:5e:c1:82:99:b4:ef:13:25:4c:
c4:aa:87:09:fb:19:51:69:e2:89:a7:9f:46:f7:1f:
f8:ea:b0:e9:82:31:d0:83:f9:2e:03:c1:15:15:4b:
07:7f:4e:de:d4:6e:4f:5c:f6:82:c4:cc:d0:42:81:
57:2e:99:ed:99:fa:13:2b:e3:63:0c:90:58:63:77:
e8:ec:44:c2:42:6d:35:1c:15:b0:9d:64:38:e7:fd:
e0:81:38:5f:8a:b1:72:89:b1:9e:b4:25:1a:d5:8a:
5c:33:ea:c7:42:bd:34:13:90:fe:e4:8e:97:ed:e0:
94:6c:15:99:27:d0:c4:97:e2:33:ce:f4:25:92:96:
69:1c:9a:11:5c:da:11:17:a2:28:e4:9f:ac:1c:12:
f9:d9:ef:b1:43:19:98:7e:c9:eb:ce:ed:cd:0f:12:
ec:4d:3d:e4:d0:fd:b7:77:ef:b2:0f:e0:65:ca:4a:
a6:4f:99:02:a5:c0:e9:c8:cd:0f:6e:18:d5:35:6a:
78:0b:a1:04:a9:ea:75:71:4a:98:92:81:49:c7:7d:
82:9e:67:46:54:f1:a0:1c:5a:38:b5:1b:9f:e9:4e:
fa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:14:5C:33:5E:0C:44:64:6D:14:86:0C:58:9C:85:DB:5E:89:5D:C0
X509v3 Authority Key Identifier:
keyid:44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:19:d0:9e:82:89:1d:68:41:df:26:06:11:cb:31:2d:7a:6a:
a7:38:4b:aa:a2:3c:76:9f:84:74:4a:62:09:7d:37:e9:d2:ea:
fc:67:da:9f:e2:4a:95:ef:34:58:d5:b6:90:b0:5a:ae:6a:62:
b5:8c:e1:19:56:1b:07:ae:16:f9:29:6a:63:f6:57:f5:68:a7:
b2:f0:62:6c:75:9e:b3:4d:3c:1e:2e:f8:76:72:91:83:06:cf:
19:08:d4:b1:cd:37:6d:21:f6:4c:63:29:fb:27:e0:9d:f8:58:
c7:2d:6e:b6:5a:bc:42:a0:2f:6b:34:9a:9a:4f:a9:9e:c3:02:
a6:85:7b:8a:14:17:fa:a3:e6:60:3d:f7:0c:b9:9d:ff:ce:c3:
df:e8:c3:8a:cf:d3:08:54:84:9a:23:02:6b:18:3e:0b:92:57:
2d:ac:9d:1e:06:e8:54:25:9f:09:f7:de:4c:1a:36:32:2c:77:
05:ac:6c:70:07:ea:5b:88:bd:47:ab:72:7f:15:3e:6a:6c:4d:
0b:c3:8a:49:63:37:80:10:eb:1e:e5:96:49:15:dc:0d:3a:a3:
08:b0:da:c1:89:12:91:66:81:5e:50:d0:b5:e2:f0:db:9e:e5:
1d:a0:d7:1a:41:2e:8f:98:ec:e0:2a:2f:6f:8a:a7:45:cc:62:
42:1c:d9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:48:20 2025 by rpki-client