Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
File: iD9pgz7Edx87C85PAJNleTVG9qg.mft (raw, json)
Hash identifier: AB2mscECcVgcYsSvlCDKl2m/Bzsb+nvJBbT2UAwbxEw=
Subject key identifier: 28:9F:E4:AD:5A:9B:16:84:9A:D2:A6:AC:D6:17:E7:99:D8:91:3A:32
Authority key identifier: 88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
Certificate issuer: /CN=883f69833ec4771f3b0bce4f009365793546f6a8
Certificate serial: 0197C9F02C8DCB4281C866BBD741DD398A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
Manifest number: 05FB
Signing time: Wed 02 Jul 2025 07:00:49 +0000
Manifest this update: Wed 02 Jul 2025 07:00:49 +0000
Manifest next update: Thu 03 Jul 2025 07:00:49 +0000
Files and hashes: 1: iD9pgz7Edx87C85PAJNleTVG9qg.crl (hash: 3t6WyIua3AynpcWLsNVQFIhyvOXZurN/VrVW6pXuZAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f0:2c:8d:cb:42:81:c8:66:bb:d7:41:dd:39:8a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f69833ec4771f3b0bce4f009365793546f6a8
Validity
Not Before: Jul 2 07:00:49 2025 GMT
Not After : Jul 3 07:00:49 2025 GMT
Subject: CN=289fe4ad5a9b16849ad2a6acd617e799d8913a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:ed:41:21:cc:e8:17:80:18:98:62:8b:b5:
8a:d9:d1:b0:46:53:1e:ad:f1:60:c7:e6:fa:93:e5:
3c:99:00:2e:c0:5d:7e:4f:1b:ef:ad:70:35:94:32:
db:58:32:0c:44:57:d1:2f:6a:2b:00:7c:7f:7e:d2:
51:2d:ea:f3:8f:7c:14:58:f0:bf:4f:f9:3b:dc:af:
2a:e2:c8:9a:32:1d:19:2a:96:64:8b:c5:20:ea:a7:
8c:76:f8:dd:ad:e0:bd:ca:da:bf:1d:ba:2f:78:9b:
a4:c8:5c:33:4e:d1:fe:29:1f:65:f1:70:0a:1b:e6:
fe:5d:d7:c5:2b:8a:4d:ab:91:e1:6c:e6:fe:d9:44:
39:e1:86:6d:5d:b2:8a:a0:f1:a8:06:60:cc:57:93:
6a:dc:d0:59:f9:76:77:1c:c5:da:93:33:8c:d0:a3:
a7:94:cd:98:79:56:29:b1:0e:bc:a0:ae:17:0e:09:
86:2a:69:97:91:5e:71:6a:ac:32:91:65:39:d3:76:
3b:6d:31:e9:eb:51:58:6b:b0:32:f0:71:6c:4d:cf:
f5:e9:e9:07:0f:de:c9:ba:ec:8a:7c:55:0b:79:02:
66:05:44:92:8e:f6:8b:14:2f:e8:cf:35:45:1d:31:
5b:00:e7:e6:8f:bb:27:dd:99:3b:2c:e1:51:d9:44:
41:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9F:E4:AD:5A:9B:16:84:9A:D2:A6:AC:D6:17:E7:99:D8:91:3A:32
X509v3 Authority Key Identifier:
keyid:88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:cc:4a:d1:ac:c4:2b:20:fc:df:bc:97:16:07:30:05:0a:42:
b3:00:95:31:30:6f:d2:31:02:12:d0:81:76:0b:a1:71:e9:26:
88:3a:63:76:90:68:0f:5a:96:87:e4:53:e1:17:7b:35:c0:51:
21:83:68:23:fc:ce:c6:72:b4:8c:fe:d0:d6:3f:72:90:1a:ef:
c5:f2:69:70:83:96:17:5d:70:3d:d2:c9:e6:66:4d:75:f2:74:
db:c2:5f:b2:73:a7:38:33:09:68:b2:1d:3a:92:21:06:6c:89:
55:d7:1e:ef:ae:f9:df:5d:c6:8a:58:06:e4:98:e4:ae:47:2a:
5f:d9:7f:0e:5e:06:2e:5f:e0:8f:ec:70:36:20:f0:b2:37:f5:
99:6f:ad:f3:07:9f:6b:cb:7f:8c:29:3f:27:25:da:5c:a6:52:
03:70:cb:f8:c1:ae:a6:d4:34:da:92:2a:00:e5:7e:63:76:3e:
09:f9:56:0d:be:5b:f3:f0:a9:9c:17:d8:86:d7:bd:94:9d:a8:
5a:f8:86:31:88:77:f7:69:35:48:c2:3a:9c:bd:8f:d3:40:de:
47:68:a7:63:f3:25:4b:d8:6b:df:30:77:29:e0:e0:82:6c:95:
33:71:f5:51:27:35:c5:e6:41:56:d7:8d:70:f9:3b:9f:35:f0:
52:0f:63:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:37:36 2025 by rpki-client