Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.mft
File: B1138D02124FB2326CF3FB351AD3251A63BEC739.mft (raw, json)
Hash identifier: /+/bLziHEVBrHgQE/n/V2sLYEPzYbOmOglWQhAKZX/8=
Subject key identifier: 35:17:23:1E:89:91:20:BC:E7:DA:DB:BE:F2:A8:FC:B2:D7:FC:AF:C8
Authority key identifier: B1:13:8D:02:12:4F:B2:32:6C:F3:FB:35:1A:D3:25:1A:63:BE:C7:39
Certificate issuer: /CN=b1138d02124fb2326cf3fb351ad3251a63bec739
Certificate serial: 5AA31E25D245EB7D47EFAD5D80E9FF801B6A0365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRONAhJPsjJs8_s1GtMlGmO-xzk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.mft
Manifest number: 87
Signing time: Wed 06 Aug 2025 19:37:48 +0000
Manifest this update: Wed 06 Aug 2025 19:32:48 +0000
Manifest next update: Thu 07 Aug 2025 20:35:48 +0000
Files and hashes: 1: B1138D02124FB2326CF3FB351AD3251A63BEC739.crl (hash: IdPoc0d0BozaDDrlgw3xVzlmkpOHczejzVODCCbfuvc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.crl
rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRONAhJPsjJs8_s1GtMlGmO-xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:a3:1e:25:d2:45:eb:7d:47:ef:ad:5d:80:e9:ff:80:1b:6a:03:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1138d02124fb2326cf3fb351ad3251a63bec739
Validity
Not Before: Aug 6 19:32:48 2025 GMT
Not After : Aug 7 20:35:48 2025 GMT
Subject: CN=3517231E899120BCE7DADBBEF2A8FCB2D7FCAFC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d5:cf:b6:49:0b:40:4b:05:fd:8a:24:6a:46:
8c:3b:11:33:8a:78:0f:bc:83:78:8f:c4:0d:65:81:
24:da:04:f0:9c:2b:1c:fa:9e:bc:e1:2f:cd:c3:a1:
f5:c4:f2:ce:03:65:59:d4:63:14:0b:65:08:6c:4d:
21:81:82:93:32:47:3a:93:b8:11:90:42:56:d9:31:
34:80:17:a8:a7:d8:07:da:75:b5:48:6e:6e:9a:15:
8c:da:16:24:14:a8:db:37:fc:b0:e2:5e:36:57:d0:
b2:c0:fa:f2:92:27:ff:dc:6a:ea:87:93:50:15:61:
fa:72:c2:85:54:da:a5:b2:34:3c:20:8e:0a:ff:b0:
a0:07:a9:c9:d0:b8:ee:ed:a9:47:14:94:18:59:0b:
54:ee:7d:ee:ea:b8:83:88:3c:f4:2e:a8:c1:46:3c:
0a:f1:fa:4c:ff:e5:ed:a9:72:9c:bf:4f:c8:95:a5:
da:61:32:ef:70:ab:1a:6b:a1:17:17:d4:da:21:b3:
3c:4a:7d:c7:ef:4f:91:2e:b0:13:c3:a4:72:f0:85:
39:ef:3e:cb:f3:07:92:4d:6e:1a:67:29:5e:4e:0f:
1d:a7:0c:5e:c7:42:51:d6:56:76:98:06:f6:e2:74:
28:b3:5f:e4:0e:89:16:7c:b4:83:76:3f:8b:10:17:
95:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:17:23:1E:89:91:20:BC:E7:DA:DB:BE:F2:A8:FC:B2:D7:FC:AF:C8
X509v3 Authority Key Identifier:
keyid:B1:13:8D:02:12:4F:B2:32:6C:F3:FB:35:1A:D3:25:1A:63:BE:C7:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRONAhJPsjJs8_s1GtMlGmO-xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b7:0f:7e:0e:68:ab:ac:33:3d:21:12:69:9a:96:24:d1:e0:
80:8e:49:8b:13:a3:e9:fb:6f:2b:63:3e:19:bd:82:1e:71:01:
78:cb:9e:46:c7:d8:61:46:2d:eb:37:81:08:c8:f8:15:be:06:
ab:3f:58:e2:8c:75:ef:40:ce:a4:69:a0:74:9a:4a:35:2f:79:
fa:29:c2:47:e0:66:6b:a6:c2:81:95:cd:15:3f:d5:bb:eb:1c:
24:4b:d8:4e:cc:02:34:7e:fa:ba:10:a5:ea:29:bc:0b:84:81:
49:f3:6e:ab:04:1d:52:fb:da:1c:0d:14:d2:84:c1:18:86:d9:
f2:c1:9d:96:d3:95:83:b6:51:53:cc:61:05:8a:d4:d8:26:93:
fc:c0:0c:26:11:d4:5c:00:f4:57:04:c8:44:67:6d:f4:2a:6a:
97:8a:8a:67:78:e3:e3:4a:63:83:1b:b5:3d:a3:b6:08:f4:01:
f9:ca:6b:e1:88:42:19:79:8b:4c:dc:c4:98:68:85:61:c4:ef:
f8:0a:96:ab:63:aa:bd:12:cb:7d:53:0d:55:22:18:e8:14:8d:
08:5c:21:22:3d:26:51:cd:ca:65:ff:d5:ec:5c:e0:d7:4a:b0:
50:79:1e:19:ed:71:f9:33:0d:3e:54:97:7a:5c:03:6b:42:1f:
fa:0c:ac:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:08:33 2025 by rpki-client