Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
File: Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft (raw, json)
Hash identifier: w/WC7kJyDibqbpwbrcaH+RkIzw+UctP5atYJow19rlM=
Subject key identifier: 61:81:4B:B3:EC:62:6D:C6:88:87:42:8F:38:AE:0E:46:81:76:20:0E
Authority key identifier: 31:FD:40:17:41:E6:69:E9:20:B0:3C:6C:76:AA:3A:78:71:40:3F:54
Certificate issuer: /CN=31fd401741e669e920b03c6c76aa3a7871403f54
Certificate serial: 0197B6A128D867A5B7A6292C889B270E9FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
Manifest number: 041C
Signing time: Sat 28 Jun 2025 13:01:44 +0000
Manifest this update: Sat 28 Jun 2025 13:01:44 +0000
Manifest next update: Sun 29 Jun 2025 13:01:44 +0000
Files and hashes: 1: Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl (hash: oyeFKhnPbJK/CZKkuNYDPLuup+PIpjMcrg1ogphybBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:28:d8:67:a5:b7:a6:29:2c:88:9b:27:0e:9f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31fd401741e669e920b03c6c76aa3a7871403f54
Validity
Not Before: Jun 28 13:01:44 2025 GMT
Not After : Jun 29 13:01:44 2025 GMT
Subject: CN=61814bb3ec626dc68887428f38ae0e468176200e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:6c:48:da:a1:9b:09:6b:17:d2:6c:42:18:
fb:16:8e:48:31:b9:a6:6d:2a:a4:af:90:12:ff:06:
1e:99:66:e5:cd:e3:d8:46:78:50:b7:4c:23:72:dc:
62:fa:cd:cb:7c:8f:55:54:ca:92:b9:f7:a0:e8:bd:
61:92:75:98:f1:68:cf:16:60:4d:e4:7e:c4:c0:a5:
22:c5:c7:90:c0:00:3a:9f:c0:cb:1d:da:9f:a7:2f:
a1:b6:61:3e:47:bd:3b:67:1e:a8:af:10:c0:ed:0d:
1e:8f:19:56:8b:f0:fb:71:d2:d4:df:c5:6f:14:61:
42:84:21:0e:5c:84:4f:22:35:f3:b8:bc:08:e9:1f:
73:3e:67:5e:2b:3e:aa:52:f9:fb:11:5c:3a:db:cb:
ac:41:ed:80:75:bc:a3:13:6b:49:49:15:ac:a6:db:
37:eb:8d:15:f4:21:d7:18:89:27:59:92:25:c4:c0:
fb:21:37:8b:1f:c9:2f:c9:d1:9b:f2:89:01:85:f7:
07:af:c0:75:aa:98:c3:ce:98:fc:02:b8:e2:38:a2:
7d:eb:69:64:a1:a8:90:30:68:a1:4b:22:27:30:26:
f8:5e:d9:10:0d:1d:f4:ae:00:cf:6e:19:75:f9:af:
23:d4:81:82:9b:c7:80:b6:7f:4d:3f:57:b1:96:2b:
48:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:81:4B:B3:EC:62:6D:C6:88:87:42:8F:38:AE:0E:46:81:76:20:0E
X509v3 Authority Key Identifier:
keyid:31:FD:40:17:41:E6:69:E9:20:B0:3C:6C:76:AA:3A:78:71:40:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f9:13:0b:c0:8b:3e:cb:16:04:25:04:9a:0e:ec:86:01:65:
52:a2:e5:b9:6a:9e:34:7c:fa:27:6d:17:68:ef:54:7e:f1:e9:
6e:5d:bb:31:4a:d5:95:a3:34:a7:3f:87:8e:c9:4c:c8:ea:ee:
14:25:0c:02:59:09:8e:ee:89:c8:a5:ca:5f:3e:1e:34:7f:ee:
17:b1:81:0c:a8:67:3d:29:fc:62:c9:90:c0:2b:93:a5:9e:37:
d3:f7:e7:d5:03:1c:91:47:55:7c:7f:90:b6:68:3e:23:de:d2:
f2:e6:29:04:d9:0e:3c:37:4f:d9:28:86:60:19:a7:18:74:77:
a1:02:3f:94:92:f1:1e:56:0e:95:e1:89:fb:7f:0a:d9:7a:c6:
47:09:b1:9d:5a:18:10:be:73:a6:09:fb:29:b5:f1:20:7d:9f:
23:91:d3:07:4c:80:92:91:2e:0e:8d:28:e0:fa:4e:8a:c4:1a:
9c:07:cd:c3:b8:5b:df:fb:e0:a6:ca:64:ad:e2:14:28:82:a7:
03:7f:f3:59:d5:a3:89:f2:78:90:74:73:5c:05:66:49:16:ba:
2a:b7:c5:55:06:2a:d6:a3:e7:88:0a:9d:e4:f1:32:bd:64:5f:
07:7d:02:24:f2:61:1c:67:4b:33:cc:24:66:4d:3b:03:67:1e:
28:24:ac:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:04:29 2025 by rpki-client