Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
File: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft (raw, json)
Hash identifier: WO6SJpr37gjoyuCAKORTU4wNnGIzD09xhV7OjO/khcE=
Subject key identifier: C8:5F:1F:2E:74:CA:B1:BC:45:CF:99:9F:4C:E9:34:F0:05:0A:37:49
Authority key identifier: 0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
Certificate issuer: /CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Certificate serial: 0197692A12B722B2639CE3A93B200FB4D726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
Manifest number: 0447
Signing time: Fri 13 Jun 2025 12:00:54 +0000
Manifest this update: Fri 13 Jun 2025 12:00:54 +0000
Manifest next update: Sat 14 Jun 2025 12:00:54 +0000
Files and hashes: 1: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl (hash: qpeqOXB3CULsisEEbgQUBvt3ISdwYQVjStRN454/KmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:2a:12:b7:22:b2:63:9c:e3:a9:3b:20:0f:b4:d7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Validity
Not Before: Jun 13 12:00:54 2025 GMT
Not After : Jun 14 12:00:54 2025 GMT
Subject: CN=c85f1f2e74cab1bc45cf999f4ce934f0050a3749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7a:dc:c6:23:04:64:24:53:bb:0f:76:57:4b:
85:e1:78:d7:06:5b:cb:b1:7b:7c:c3:cd:d1:de:6c:
74:d7:b2:7c:07:d4:6e:ee:6b:ac:29:2a:d4:6c:85:
3c:ee:2b:da:1d:76:eb:45:54:05:c3:7f:c2:f4:3a:
64:24:3f:9a:f7:c5:2e:e6:3e:48:c2:da:2a:79:5f:
4f:26:40:10:d1:2a:8f:79:92:5e:34:8b:57:2e:d0:
59:fa:63:f0:d7:d0:cf:61:bc:12:2e:b0:11:2e:e6:
33:c2:d0:79:52:50:4f:66:72:60:01:94:ce:82:f8:
10:0c:46:b8:36:71:ab:35:a7:1b:3c:05:d2:1b:b1:
aa:c2:40:48:59:44:7d:49:2b:f7:4f:48:4f:a7:30:
7f:6f:75:8b:21:45:6d:0b:be:aa:db:d2:9e:01:59:
e7:67:5f:09:5c:93:90:aa:5d:67:95:f5:98:61:15:
99:a9:e5:59:b4:11:04:64:2a:15:eb:d9:a0:94:a4:
f1:e6:de:79:1b:de:4a:e3:3d:12:de:b5:d0:f0:5c:
86:1d:3c:03:a4:80:49:d1:bf:f1:be:99:fd:fe:ba:
d0:58:7f:51:69:32:8a:3a:14:91:92:2e:67:30:91:
ec:e0:7e:37:e0:d8:dd:05:45:da:b5:c9:82:2b:ec:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5F:1F:2E:74:CA:B1:BC:45:CF:99:9F:4C:E9:34:F0:05:0A:37:49
X509v3 Authority Key Identifier:
keyid:0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4c:e6:88:ef:a6:e3:d1:35:f1:97:0b:10:cc:32:c7:fe:f5:
81:8f:66:e2:94:13:52:c4:53:f6:b3:70:22:d5:4d:5b:0e:24:
71:80:4c:e7:d2:98:e7:95:b7:e9:74:6b:8c:99:5b:8a:6a:6f:
5d:be:6c:54:9d:b0:a8:75:43:c4:00:e0:be:d6:ef:eb:8a:21:
e1:43:9f:98:6f:e5:db:44:46:4e:df:43:9e:c8:6f:40:56:c5:
b4:60:d1:b2:66:ec:f1:36:b9:a0:fe:8a:f7:0f:c8:27:bb:e2:
78:92:f2:8b:31:ad:63:6a:b2:90:d1:92:2a:ff:c0:87:7a:79:
31:97:fd:39:fb:40:e3:db:a4:ef:61:49:8a:c3:e9:d1:2b:02:
e8:82:64:ec:c3:6e:b5:10:65:24:87:fb:17:5d:92:f4:43:f6:
3c:67:64:16:32:92:b1:06:dc:4f:b2:d5:6b:86:00:6f:cd:4a:
b3:8c:be:a4:36:ad:1d:df:2f:46:9e:ba:57:c9:e3:70:5a:37:
dd:73:ee:c0:fa:11:6b:b7:00:8f:c5:80:6e:d7:66:27:99:61:
63:5c:a6:73:3a:f1:3d:3e:4b:f2:fc:40:7a:1b:df:72:e2:17:
5b:06:d1:53:1a:a5:3c:29:36:c0:ef:8a:28:2f:8f:95:ed:88:
51:08:4d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:50 2025 by rpki-client