Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
File: r4yBlkcmb7yxOeZyqPuaV89Ysog.mft (raw, json)
Hash identifier: aOp1f73OfG08gcRvGCpJqg+YG8s63JlVGcLe5vA2OG0=
Subject key identifier: 7B:C4:38:A1:20:BC:8F:79:7B:2E:FC:65:74:D3:D1:6E:83:C1:9E:2D
Authority key identifier: AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88
Certificate issuer: /CN=af8c819647266fbcb139e672a8fb9a57cf58b288
Certificate serial: 01976DABF63027CABEE8A80A750122BCF2CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
Manifest number: 03A1
Signing time: Sat 14 Jun 2025 09:01:15 +0000
Manifest this update: Sat 14 Jun 2025 09:01:15 +0000
Manifest next update: Sun 15 Jun 2025 09:01:15 +0000
Files and hashes: 1: r4yBlkcmb7yxOeZyqPuaV89Ysog.crl (hash: c9k4CZJY0XbbdWMK9xnyk3cDk9CoxiDDcADEmVtZasE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:f6:30:27:ca:be:e8:a8:0a:75:01:22:bc:f2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af8c819647266fbcb139e672a8fb9a57cf58b288
Validity
Not Before: Jun 14 09:01:15 2025 GMT
Not After : Jun 15 09:01:15 2025 GMT
Subject: CN=7bc438a120bc8f797b2efc6574d3d16e83c19e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:56:97:97:15:68:02:2e:ee:6c:0a:84:51:
69:f4:d4:57:da:92:80:39:b8:94:a9:eb:7b:35:72:
9a:6d:36:ee:a9:ed:34:d0:07:a1:7a:8f:40:76:5d:
72:95:cc:ef:eb:99:e7:b0:8a:94:62:38:f1:49:ba:
4a:9c:7a:ff:82:eb:5e:28:f7:da:d1:26:ce:00:10:
5f:b0:be:de:bb:d7:03:2e:ea:19:b6:d7:72:22:73:
88:9a:7c:a5:f6:4e:49:0c:f7:33:60:60:76:02:4c:
cd:1d:d3:ea:c5:22:01:15:e9:98:ff:8c:43:85:68:
a6:68:74:c7:35:0a:a2:ae:cf:b1:72:fc:02:d2:22:
d7:9d:5a:ed:65:75:fa:9f:83:0f:bf:41:e4:d3:eb:
03:60:08:fa:2e:67:48:72:2e:4e:0a:46:c4:ed:10:
48:cc:b0:c6:21:e6:17:23:f9:6e:46:66:43:f1:46:
90:a0:2d:a5:15:63:dc:c2:86:a2:ca:a7:41:c3:de:
83:9c:17:3d:ad:32:80:3a:80:9b:1f:50:86:f7:0a:
d5:bb:4f:f7:ff:54:d2:54:88:dd:57:64:e3:81:5d:
89:e1:d8:85:4a:d9:9f:07:4e:07:80:85:6f:28:06:
1b:a8:a2:1a:b3:88:bd:ac:ff:1e:5d:15:f1:6a:64:
c9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C4:38:A1:20:BC:8F:79:7B:2E:FC:65:74:D3:D1:6E:83:C1:9E:2D
X509v3 Authority Key Identifier:
keyid:AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:cd:7f:75:dc:0d:17:b0:1f:f7:6a:cc:96:3f:d4:00:1b:48:
88:c3:94:c8:f5:b4:0a:30:3a:c5:29:b0:70:0a:7a:cb:5a:82:
04:89:ef:37:ef:c6:b1:66:92:c4:e4:7d:e3:22:03:99:45:cb:
1e:19:bd:65:74:3b:a9:3e:6b:d1:d0:84:bf:6e:28:cb:92:68:
fa:06:63:47:73:6b:ed:84:65:40:36:d2:79:b8:50:f1:64:de:
44:64:b3:8e:33:65:17:82:42:7c:9f:de:15:4d:b3:10:88:96:
5d:2a:bf:a9:74:bf:93:6b:b0:7c:7e:35:57:26:61:48:40:76:
b1:95:3e:78:17:78:c0:fa:07:04:56:e2:bb:24:9a:2c:15:86:
c1:15:f3:23:ed:ee:38:44:d9:30:db:82:32:32:d6:10:3e:9f:
5b:c0:2d:5f:40:1d:4e:f9:f3:1b:ee:36:ca:2a:b4:21:00:6c:
2f:8d:b5:4b:81:d2:e6:d6:4f:79:31:ff:6d:95:12:29:ad:78:
6d:57:58:5c:00:56:ec:11:25:54:26:f2:ee:2a:1c:e4:5c:d8:
92:55:8d:fc:b3:2c:8c:30:c5:4e:6f:7f:e0:77:47:59:a1:4b:
6b:5a:83:f7:0b:f6:1a:b2:68:8d:a5:ff:7d:f9:25:8a:35:54:
7d:87:d5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:49:25 2025 by rpki-client