Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft
File: rRIanMsoPqIejQoHCi4LakDph30.mft (raw, json)
Hash identifier: vynDosB9dFAsHV99dqTSphGPQD7gBFZq4MxUbf9tml4=
Subject key identifier: AB:BB:D3:B1:CC:E4:B1:57:41:06:B7:D9:20:3C:88:F2:C4:36:FA:6C
Authority key identifier: AD:12:1A:9C:CB:28:3E:A2:1E:8D:0A:07:0A:2E:0B:6A:40:E9:87:7D
Certificate issuer: /CN=ad121a9ccb283ea21e8d0a070a2e0b6a40e9877d
Certificate serial: 0197B6A15BBFFDB028DC57AD1CF4093D6A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRIanMsoPqIejQoHCi4LakDph30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:57 +0000
Manifest this update: Sat 28 Jun 2025 13:01:57 +0000
Manifest next update: Sun 29 Jun 2025 13:01:57 +0000
Files and hashes: 1: rRIanMsoPqIejQoHCi4LakDph30.crl (hash: 7xvYPqOi5LFf92iYg4OQqzA86re+tdv8z4SgJU3PIWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRIanMsoPqIejQoHCi4LakDph30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:5b:bf:fd:b0:28:dc:57:ad:1c:f4:09:3d:6a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad121a9ccb283ea21e8d0a070a2e0b6a40e9877d
Validity
Not Before: Jun 28 13:01:57 2025 GMT
Not After : Jun 29 13:01:57 2025 GMT
Subject: CN=abbbd3b1cce4b1574106b7d9203c88f2c436fa6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:58:f9:ce:b2:aa:85:46:a0:d8:a6:ea:78:
34:de:34:8c:fe:b1:06:88:c0:8f:23:30:32:d1:47:
e9:46:e9:1e:48:35:72:10:66:95:bc:a3:f3:eb:ec:
88:88:38:92:46:77:ef:28:ca:c2:3c:ff:ac:c0:19:
dd:5c:e4:c1:7e:e1:0a:46:ff:11:50:fc:57:63:26:
e9:fa:8c:89:45:cf:39:01:e7:98:92:98:58:05:85:
e8:79:bb:a8:8f:4a:e6:83:9f:d6:f2:20:c0:e6:17:
50:c3:9c:44:65:85:e0:9e:05:f7:34:a7:f2:6b:9c:
11:65:e4:9c:48:b1:2a:17:7f:83:f2:9d:c1:22:a4:
cb:37:68:f0:25:8b:83:9d:07:70:f8:1c:88:b5:4f:
a7:2a:16:03:33:c0:09:ec:5b:bf:e7:36:38:3d:41:
fd:df:ba:e1:fe:44:9c:4e:5e:fc:82:d0:86:1e:8d:
43:5b:4a:a9:96:16:df:c5:8a:9c:df:99:25:68:fa:
05:8b:c8:57:d6:9e:1f:53:f8:99:34:80:e8:c9:3e:
d4:07:2e:5f:c6:2f:90:93:8c:15:8b:8f:cb:0b:05:
e8:00:83:0d:05:5f:e1:6a:32:bb:4a:bf:38:e6:de:
30:80:d4:d2:a3:d1:01:13:79:42:5c:15:7c:a3:fd:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BB:D3:B1:CC:E4:B1:57:41:06:B7:D9:20:3C:88:F2:C4:36:FA:6C
X509v3 Authority Key Identifier:
keyid:AD:12:1A:9C:CB:28:3E:A2:1E:8D:0A:07:0A:2E:0B:6A:40:E9:87:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRIanMsoPqIejQoHCi4LakDph30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:04:59:53:19:52:24:61:97:88:56:1c:43:03:96:4f:25:e8:
aa:f4:af:5f:4c:84:08:0c:60:3f:1e:92:99:b3:41:a9:62:13:
3b:09:e0:62:aa:62:28:ce:68:db:70:18:d3:f8:52:77:81:b9:
b3:11:4a:2b:84:0f:5e:e8:37:d0:8f:06:1a:e8:60:d3:a1:5d:
df:8e:dd:bd:ff:3a:8e:51:e5:97:45:bf:1d:0d:da:3c:37:97:
5f:7c:88:e5:6f:aa:82:91:52:12:72:53:d4:c2:07:d0:d0:b6:
a0:50:b5:a6:e3:0c:4d:1c:ed:ea:d4:63:a0:bb:55:d3:e6:d8:
1d:c7:f9:d3:1e:c2:7f:92:d9:29:a1:e2:9e:18:44:fd:df:9c:
1b:c2:66:d8:15:6a:a9:bc:b1:67:7a:21:00:7b:85:5a:e3:b6:
87:95:54:31:af:d6:6d:38:8b:70:61:ac:3a:73:a9:6c:6d:02:
06:e1:95:fb:cc:1f:2a:f9:77:b2:6d:3d:71:d6:e0:76:a5:a6:
d3:47:8f:f9:fd:12:b1:cb:c7:ec:37:37:a1:30:15:42:4f:62:
9b:6e:9f:c0:8b:84:f6:5b:92:f5:7e:4d:5c:7e:83:e7:6b:ed:
70:27:f6:0a:09:22:69:cf:bc:4b:a8:f8:0a:95:63:d7:a5:e3:
f9:e9:5b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:48 2025 by rpki-client